Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
File:                     E973A832656511EC85A7CA2CC4F9AE02.roa (raw, json)
Hash identifier:          IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=
Subject key identifier:   BD:54:27:D3:A8:F6:3F:75:14:CB:D0:F6:49:4C:42:A5:44:41:62:03
Certificate issuer:       /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial:       10D7
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:32:24 +0000
ROA not before:           Thu 16 Oct 2025 18:26:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     59382
IP address blocks:        103.73.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
                          rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4311 (0x10d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
        Validity
            Not Before: Oct 16 18:26:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45c08-e7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:bc:9d:92:01:23:55:af:95:78:0d:f4:37:
                    35:b0:4b:92:dd:c3:54:4f:5a:5d:10:90:a5:7b:cd:
                    bb:e7:5a:e4:12:fb:44:29:b0:6e:31:52:8b:4a:fc:
                    4c:8a:e7:09:22:c2:bb:ed:a5:0b:92:3d:2d:61:a0:
                    97:76:5c:5f:82:18:96:0d:78:37:ce:f4:7e:89:22:
                    3e:d9:00:cc:bd:4f:e5:92:4e:1d:27:e4:84:89:6d:
                    19:dd:e2:05:1d:cb:80:a2:fa:de:30:7e:34:1f:1e:
                    0d:f6:62:e9:9c:9a:6b:49:65:a2:3f:53:44:7c:32:
                    33:5b:2f:32:08:f0:0f:36:26:71:9b:66:5d:99:fb:
                    4f:e8:19:b2:3d:15:33:47:25:6d:38:95:b4:b0:ac:
                    78:87:b7:06:b0:19:0b:7c:8e:36:2d:5f:60:6a:5a:
                    6d:e5:09:bb:d4:db:75:f4:c5:00:4b:1a:46:d0:38:
                    13:b6:a5:79:b5:e2:c8:05:3e:9d:7b:8c:5a:98:06:
                    07:1a:72:18:b9:24:32:25:21:59:21:8f:33:7d:c2:
                    42:0e:d0:cd:37:83:f3:49:13:0e:51:aa:6c:ce:3d:
                    ca:96:94:86:2a:0b:13:2b:05:2e:ca:0d:08:40:17:
                    e7:6a:e5:81:fb:78:48:4c:2e:d3:23:55:c6:15:49:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:54:27:D3:A8:F6:3F:75:14:CB:D0:F6:49:4C:42:A5:44:41:62:03
            X509v3 Authority Key Identifier:
                keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:8a:35:81:d1:f4:83:01:61:54:4a:eb:35:a0:e6:0e:0f:
         20:b4:d5:df:b7:ed:5d:8a:b2:17:ee:85:ee:9e:48:01:e4:9d:
         64:1e:68:e7:80:94:b7:f4:59:e1:bf:3e:68:86:e6:70:cc:a0:
         5d:b2:aa:d2:07:d8:2d:13:fc:ff:83:af:ee:70:6a:d6:b1:78:
         0f:58:42:61:ec:ca:42:8c:59:7d:33:3d:88:2e:d9:c7:ea:bb:
         21:63:64:7d:83:c2:84:11:51:44:b3:06:73:65:e6:05:aa:5a:
         71:90:72:5c:53:13:95:bf:d8:30:20:8c:86:6e:db:86:56:63:
         33:d2:2c:45:fe:d8:e7:b1:29:ae:5f:9f:41:d3:6a:a2:cf:7e:
         c7:b7:9f:88:50:33:a3:b1:20:58:48:98:1e:6e:53:02:6a:c3:
         0f:f7:65:c6:8d:69:92:eb:27:7b:6e:4b:94:52:ad:72:fa:a9:
         96:93:47:e5:f5:bb:65:fb:08:58:66:f7:e3:ef:95:7e:f3:7a:
         5e:1a:98:09:cb:f5:ed:dd:b1:f7:dc:b9:8f:6e:cd:88:e5:d1:
         50:6f:d0:00:7e:98:43:3a:99:5f:39:00:04:bc:e9:ce:54:c3:
         f6:ad:8c:e7:fc:1d:f2:25:6a:d2:d3:18:34:35:b2:d0:5f:f7:
         f8:ae:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:55 2026 by rpki-client