Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
File:                     702A62CE9CC311EBA5A7A47BC4F9AE02.roa (raw, json)
Hash identifier:          INBV61Es+GXRIkAETeVkLJIuRhk/GhJelRQlIrBLfQ8=
Subject key identifier:   68:0B:A9:77:96:7E:AA:DE:99:C2:20:A1:F0:F0:6A:54:66:63:53:A3
Certificate issuer:       /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial:       06B0
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:46:29 +0000
ROA not before:           Thu 08 May 2025 23:23:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142042
IP address blocks:        103.165.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
                          rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
        Validity
            Not Before: May  8 23:23:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fce5-94e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:57:65:11:b0:73:73:98:18:7e:a9:37:ec:
                    fe:5a:d6:b4:b3:71:cd:e2:93:53:76:29:29:47:87:
                    10:7e:02:2f:98:4a:21:92:b3:7c:b4:4f:e7:8e:e9:
                    44:11:51:4f:f3:19:72:85:80:46:68:c1:8d:a5:dc:
                    d6:2f:76:a1:85:7b:21:9a:fb:5e:5b:40:69:f3:79:
                    e7:be:fa:98:dd:05:48:32:ed:cb:96:83:6c:ee:ff:
                    34:0a:9e:ad:ba:f5:65:57:69:51:bb:b4:94:d4:37:
                    30:42:2c:f3:62:b2:27:c1:3f:2e:a7:8d:b8:ef:f5:
                    20:63:c2:1b:30:09:82:fb:2d:b5:0e:e3:26:c3:ae:
                    eb:da:25:7e:c2:a7:b2:e3:96:f9:78:e5:36:12:b3:
                    c4:2a:00:ad:ec:bb:fb:d5:87:fc:7d:4d:8b:4e:ae:
                    1b:40:a5:6c:99:f4:39:bf:5e:7f:33:7f:e2:59:a2:
                    3e:79:87:fe:f7:3d:1d:72:eb:11:af:f4:2b:14:ff:
                    98:e5:b2:3f:ed:46:b0:02:e2:be:57:5c:42:e9:67:
                    e9:59:37:1b:df:b5:c3:4a:31:c1:42:fb:e4:0f:d8:
                    3e:73:32:b7:8a:e3:72:55:a1:f0:ae:ad:63:b6:92:
                    c9:0b:1a:14:fa:a1:e4:e7:d7:aa:fd:78:bd:da:cb:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:A9:77:96:7E:AA:DE:99:C2:20:A1:F0:F0:6A:54:66:63:53:A3
            X509v3 Authority Key Identifier:
                keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:ac:64:30:51:1f:8d:4e:de:7a:85:05:ce:98:6f:de:f7:
         76:ed:4a:13:4b:e8:76:05:1e:db:8c:1c:07:c2:a7:d2:3f:e5:
         06:98:65:b6:95:41:84:16:eb:0b:a7:88:64:90:50:b7:05:bf:
         8a:c5:5d:b7:98:53:26:94:d3:32:c6:8d:b3:05:84:b5:f4:08:
         e4:f5:3c:7d:c0:18:03:a0:b8:5c:f1:c1:f3:ca:c4:3b:d5:43:
         59:72:53:3b:02:43:ae:5f:42:46:4a:fb:4f:c7:10:10:6d:05:
         44:43:65:4c:1d:fa:2a:a4:20:bc:e2:f9:4a:44:0d:80:42:8b:
         c0:f2:83:cf:a5:c4:19:17:93:8f:be:86:5a:8b:d3:33:8b:c3:
         7d:ff:ae:41:39:53:c6:8b:6e:8f:f7:40:de:74:3b:ff:76:fe:
         c0:82:7b:b7:58:b6:17:dd:90:b7:ba:34:14:5e:15:52:77:66:
         e2:96:1f:a9:14:07:aa:f8:a7:5f:99:0c:75:98:68:34:7c:8f:
         25:1a:0e:ab:ed:cb:c6:33:26:87:7a:b2:45:9a:e8:5c:2b:e1:
         8f:3e:31:ae:5a:77:24:e8:3a:ab:40:49:ea:71:6a:52:d0:e1:
         9b:0f:a7:7a:36:2a:8c:b8:06:82:fa:71:de:8f:c5:ae:c2:02:
         9e:e7:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:19 2026 by rpki-client