Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
File:                     260D3330758A11EFAE7A8A39C4F9AE02.roa (raw, json)
Hash identifier:          1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=
Subject key identifier:   CB:88:8B:47:36:5B:74:06:87:9E:CE:1C:62:AA:29:AB:77:E0:14:10
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       04AF
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:58:07 +0000
ROA not before:           Tue 07 Oct 2025 00:58:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136787
IP address blocks:        103.86.96.0/24 maxlen: 24
                          103.86.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Oct  7 00:58:07 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47e2f-416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:27:2b:f0:54:32:d8:51:26:6d:e4:53:18:
                    ec:7d:a7:73:3f:5a:e5:21:2f:53:24:85:fd:72:d0:
                    39:f5:9a:2a:cb:48:04:d5:89:e2:02:78:ba:d9:c4:
                    82:27:52:6d:7e:6a:82:a2:9c:ec:75:fd:9b:28:7f:
                    9b:3b:14:f5:d5:10:02:55:80:8b:a3:e6:1f:2d:f1:
                    3d:d7:81:96:2b:c0:80:ae:02:1e:6d:e4:2f:c8:b9:
                    e5:1f:89:85:0e:76:1a:ad:a3:06:4c:6c:17:89:48:
                    82:79:f3:7e:4d:40:3b:18:57:0c:62:01:e3:3a:0a:
                    e0:08:a5:81:c1:4c:a0:73:a7:92:63:8e:de:e6:48:
                    8e:3c:a1:1f:d5:69:23:d9:ec:70:23:c9:52:10:0d:
                    42:1d:c3:57:ed:d5:30:38:a7:2c:af:b7:5f:8b:8f:
                    09:29:64:0f:27:69:eb:88:3d:59:f7:db:e4:eb:af:
                    ce:df:4c:0e:bc:06:0b:7d:17:4d:88:2b:b9:23:5e:
                    b9:7a:66:6c:0b:42:06:d6:5c:cd:45:69:2a:37:ef:
                    ff:8e:7a:7a:5c:70:19:fc:d9:64:49:b3:ab:56:06:
                    ae:06:56:5e:e4:9d:68:cf:4e:17:94:54:98:38:f8:
                    aa:32:38:83:b2:c0:c5:68:99:20:d7:3f:c1:65:b0:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:8B:47:36:5B:74:06:87:9E:CE:1C:62:AA:29:AB:77:E0:14:10
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.96.0/24
                  103.86.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:83:1f:fc:21:9e:fc:3e:04:a0:83:1e:7e:f7:7f:48:6c:
         36:a3:60:74:35:e5:bf:33:83:5c:6a:87:3d:23:ad:2d:a4:d3:
         fe:16:bd:66:d5:8f:f3:26:e4:0c:5c:7f:d6:de:22:f9:ae:e8:
         8d:10:fd:d1:b3:0d:60:85:61:f5:e3:0e:be:c1:2b:4e:89:26:
         fe:7b:8c:24:e8:05:97:36:a9:a2:f5:d8:d5:3a:18:a0:f6:78:
         14:be:ec:5b:c8:e6:6f:6d:b5:fe:66:67:34:56:72:aa:bf:0e:
         f2:75:6c:40:5f:68:4b:94:da:b0:a9:45:e2:d2:7e:47:8d:a2:
         e5:ab:de:72:b7:d6:4f:32:42:83:4a:ab:d5:07:70:9a:ca:45:
         26:0e:99:17:43:03:0e:ef:05:50:54:0e:0d:2d:ef:6f:b6:de:
         83:31:42:9e:32:31:fc:37:3a:db:b2:0f:58:88:9c:b2:49:2d:
         5d:89:1f:22:e7:0c:72:aa:d7:a8:55:02:9b:0b:d2:0c:f0:09:
         90:1a:82:bb:06:d7:ba:a2:48:d1:89:17:94:59:6f:58:0d:04:
         fb:65:7a:74:fe:cb:47:4a:ac:ef:fc:eb:28:f4:a7:8b:4f:c5:
         b4:a5:65:eb:37:c3:b0:5a:3a:47:f4:59:b4:39:fc:ec:d1:f1:
         e0:72:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:33 2026 by rpki-client