Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa
File:                     8023B518E53E11EB9E429C44C4F9AE02.roa (raw, json)
Hash identifier:          PmZWdw64LAwMI3NXzeEum/iMQ1lGbZaRPEZVFE8w0Kc=
Subject key identifier:   73:9C:CE:D4:A9:8E:2D:10:FC:C5:37:FC:F2:6A:40:41:01:95:78:D1
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       06EF
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:45 +0000
ROA not before:           Wed 04 Feb 2026 22:19:48 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     17445
IP address blocks:        116.50.164.0/23 maxlen: 23
                          116.50.164.0/24 maxlen: 24
                          116.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Feb  4 22:19:48 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a484e5-6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:98:75:4f:ff:72:7d:7a:0d:40:55:11:ee:
                    a3:e5:51:5f:2e:ea:13:00:41:0a:ee:36:f2:cf:09:
                    1b:f2:14:65:f2:d6:7c:29:2e:61:4d:a2:a2:16:fb:
                    84:f2:55:5d:24:81:4c:ba:61:60:38:ed:69:df:d3:
                    c6:e7:f8:dd:a6:77:55:f5:76:68:e5:fd:09:40:61:
                    2c:3b:11:6f:f9:79:00:ac:bf:43:f1:8d:85:c9:09:
                    90:f7:ae:6e:79:a0:2e:f4:09:bb:39:87:b4:2d:ed:
                    ff:c0:06:5b:7c:13:d1:3f:97:58:63:ad:9c:77:1b:
                    80:a4:7d:56:a5:b7:55:c9:28:be:88:c5:c3:bd:ee:
                    d3:25:b0:86:92:32:91:26:5e:73:73:7e:fa:62:63:
                    39:09:ce:ac:2a:8f:08:b0:05:72:92:f5:fb:b3:40:
                    8a:1c:8a:47:3e:e2:7a:52:5d:c2:5d:08:47:e7:58:
                    3e:b5:e7:c5:8a:28:40:dd:12:83:c4:3e:43:3d:5f:
                    a7:8d:33:4b:07:9c:c5:cc:d8:ac:80:e2:57:11:6b:
                    87:78:da:70:67:44:db:19:b3:0e:fd:20:60:43:38:
                    79:81:61:16:ec:1f:0b:ec:79:21:8a:39:79:72:e6:
                    8f:44:24:fc:c2:96:3e:26:e0:79:1c:88:ec:51:3a:
                    bf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:CE:D4:A9:8E:2D:10:FC:C5:37:FC:F2:6A:40:41:01:95:78:D1
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:0e:9a:93:71:16:66:64:8f:b0:95:83:27:da:ef:ac:8d:
         6d:f1:0b:11:1a:3b:c8:a6:5d:e9:97:6d:28:b9:7d:32:73:fd:
         f3:f5:61:3c:95:4e:21:ef:83:03:c1:a9:12:8f:a4:ff:a0:77:
         bf:83:3c:d4:23:d8:9e:11:a2:09:7b:3f:9a:68:5d:83:43:a1:
         f9:ec:27:45:1d:9e:df:d2:14:82:af:f7:78:d0:b8:0b:8d:b9:
         ff:82:b5:71:4d:d6:cf:bc:71:52:c0:50:9d:e8:bf:5a:8a:bc:
         50:ac:29:51:f3:b1:9f:e2:dc:70:ff:0b:99:44:74:7b:2b:b6:
         18:aa:d4:13:fe:93:32:ab:36:16:3c:89:13:fc:e6:98:55:e8:
         7d:15:10:dc:52:d2:23:13:a8:31:e6:e7:0c:73:40:f1:1b:dc:
         c6:a3:f1:c0:23:1b:0d:93:d0:7e:ac:a4:4c:d4:a6:51:3a:f4:
         55:a9:76:f0:75:8d:7e:d2:c1:bd:43:8a:64:7a:51:50:4a:ff:
         1f:c6:3e:e1:99:90:77:da:2e:c0:fb:9e:29:d3:4c:49:c8:46:
         32:42:5e:57:21:5a:45:42:cf:2e:d2:b2:6f:5a:4d:93:86:7f:
         e6:23:07:33:84:b9:2c:03:20:d8:18:3c:7c:a7:50:9c:00:6d:
         e3:7b:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:00 2026 by rpki-client