Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/AADE9E9C5B9511EEA8190143C4F9AE02.roa
File:                     AADE9E9C5B9511EEA8190143C4F9AE02.roa (raw, json)
Hash identifier:          z1N4ZBbmDA74CeApYZJ0hayWkNkXn88p5+Sn2lK0fBs=
Subject key identifier:   16:B4:7E:CC:55:42:8D:DC:26:02:94:6E:0C:33:B0:9C:C6:94:84:74
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0CB4
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/AADE9E9C5B9511EEA8190143C4F9AE02.roa
Signing time:             Fri 20 Feb 2026 18:16:13 +0000
ROA not before:           Fri 20 Feb 2026 18:16:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137425
IP address blocks:        103.127.84.0/24 maxlen: 24
                          103.127.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Feb 20 18:16:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6998a4ed-6764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:ce:5b:f9:7a:4e:8e:a4:e4:23:99:cf:0c:
                    f9:3c:00:a1:e1:23:27:84:9d:d5:2f:e1:30:05:a3:
                    08:9d:20:1f:33:c7:85:e5:8a:93:2c:90:62:2c:d3:
                    4b:0a:6a:13:25:92:b6:b5:fd:0e:fa:28:ab:45:f6:
                    5a:b6:1c:b4:b4:08:87:cd:c1:53:43:cd:09:a0:36:
                    3b:9e:6f:1a:0d:be:42:50:8e:17:8c:2c:bc:8f:05:
                    46:d4:be:b8:d2:41:22:c1:8e:47:a2:c0:b0:44:fd:
                    b2:e2:d3:e8:f7:fa:8d:71:6e:3b:86:d7:d0:0f:7a:
                    b2:5b:09:da:6a:7d:2a:7a:75:7b:9a:5d:85:db:54:
                    dd:37:40:de:d1:c5:dd:27:80:10:7a:ab:70:b4:1a:
                    2a:34:05:c8:22:27:87:f1:8b:0e:5a:b2:64:fe:15:
                    ca:fe:b1:7d:56:90:df:f3:2b:ab:a6:d3:a7:c0:42:
                    e6:47:e3:a5:ef:51:9b:eb:cc:3d:f9:06:d3:45:15:
                    8e:3e:30:d7:7a:88:50:f1:9a:a8:48:83:b0:36:eb:
                    b1:9f:93:6b:bb:73:02:05:45:ac:e4:db:f5:da:94:
                    dd:8f:3c:78:f0:29:4b:b3:f3:fe:f7:34:d6:f7:80:
                    ed:a0:d6:a5:01:a5:50:43:90:07:d3:a3:df:0c:92:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:7E:CC:55:42:8D:DC:26:02:94:6E:0C:33:B0:9C:C6:94:84:74
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/AADE9E9C5B9511EEA8190143C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.84.0/24
                  103.127.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:a3:f4:f6:24:44:7f:fe:28:71:4d:35:1e:24:b2:14:35:
         b1:2a:e4:6b:2c:d6:39:d4:2c:35:31:0e:b1:a4:89:0e:ec:23:
         15:d2:24:36:4b:d0:19:98:30:3b:68:d8:be:0e:e1:e3:4b:76:
         04:59:42:86:7c:0b:7d:4a:b8:55:dc:85:9a:d6:f2:d0:c6:54:
         de:5e:df:57:4d:a8:ff:4d:f7:34:d2:4e:02:65:9b:09:54:44:
         d7:88:87:ee:e0:1f:09:17:3c:c6:f6:7b:65:ac:a5:ac:8e:7e:
         80:25:f7:67:12:e1:f9:6a:29:f6:b6:d6:49:a7:a9:1e:3d:d4:
         9b:88:f1:d1:a7:5e:92:92:00:b0:91:e6:75:a4:18:6a:75:f0:
         72:2c:bd:18:f3:9d:29:38:df:1c:fc:4a:02:18:96:95:76:63:
         c6:eb:93:68:35:26:64:5b:50:c1:ff:34:d6:ca:d3:4d:21:c1:
         18:e9:1d:b2:2d:2d:a7:4c:69:bd:bd:b8:4e:59:64:e5:bf:3e:
         4c:f1:5a:4d:fb:82:4b:05:13:bf:e6:cb:ba:0a:f1:4b:fd:5b:
         f9:9a:5a:27:04:2b:7e:03:cc:b9:4a:03:59:1f:11:09:61:7e:
         f5:e6:e2:34:dc:1f:7d:c2:ac:13:ee:12:d8:d9:b7:da:42:24:
         0f:fd:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:30 2026 by rpki-client