Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
File:                     A92EC53AC95B11ED9ABE6935C4F9AE02.roa (raw, json)
Hash identifier:          NYxhWaPU66RmCDpGdJedGH47SKUvMoNmc0ScNkfJxsc=
Subject key identifier:   DB:76:6F:12:FD:AD:EC:C8:8F:38:CC:BA:66:B9:DE:15:4B:F1:E1:F3
Certificate issuer:       /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial:       0242
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 02:35:30 +0000
ROA not before:           Fri 03 Apr 2026 02:35:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133370
IP address blocks:        103.225.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
        Validity
            Not Before: Apr  3 02:35:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf2772-3475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:c3:77:1b:d3:0f:39:2f:ff:04:d8:bc:bb:
                    a2:d3:58:0d:75:87:10:2a:75:db:5e:ad:49:ce:41:
                    19:40:d5:a4:42:28:56:e2:e8:58:6e:af:da:be:6e:
                    fb:25:0b:e6:c0:c7:87:4a:b9:2d:98:1d:18:07:a6:
                    cf:12:fb:ad:9f:28:c2:da:fb:1a:42:2f:84:20:f8:
                    8b:55:1a:00:82:67:97:11:ce:23:b0:be:01:4d:cd:
                    28:3c:0f:c3:c7:d8:be:c7:cb:59:31:aa:47:f3:f2:
                    e6:d1:27:fe:cd:5d:09:a4:20:62:24:86:47:98:3a:
                    39:01:f3:66:17:fa:c1:13:12:ce:5a:7b:59:8b:a2:
                    10:ae:c1:c6:00:0c:71:37:0e:5d:91:b4:85:94:97:
                    36:e3:76:58:c9:ca:bf:eb:6c:f1:fb:41:e0:77:57:
                    c9:ae:b5:83:24:51:36:ba:d4:d1:20:f7:2f:08:33:
                    b6:07:7f:44:cd:37:61:2e:b8:77:94:46:6f:2e:f8:
                    b2:ea:dc:fc:7f:8c:b7:27:00:44:a5:67:56:64:3c:
                    5c:ad:e3:df:2e:b3:90:02:a6:05:c1:8e:aa:fb:8a:
                    d1:f6:04:0a:42:9f:93:2f:96:b6:2a:c8:ee:90:25:
                    8d:fe:26:30:d7:ac:1f:46:7c:68:76:4a:b8:43:47:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:76:6F:12:FD:AD:EC:C8:8F:38:CC:BA:66:B9:DE:15:4B:F1:E1:F3
            X509v3 Authority Key Identifier:
                keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:7e:41:44:36:31:a8:c1:4c:3b:3d:c2:d1:9c:e6:86:d6:
         fc:3d:c8:e4:a4:6d:23:9f:fa:9f:37:b5:47:2d:c3:c2:46:b4:
         ab:28:67:d1:fb:4b:ab:16:b4:88:56:7c:3f:b2:90:b0:85:8c:
         eb:d6:81:7a:88:07:21:4c:aa:be:82:7b:87:e5:82:ed:d4:91:
         f8:d1:8f:64:0a:45:b5:64:a8:93:cc:fe:e5:f5:eb:2a:46:ce:
         e5:fb:d6:39:76:13:10:8f:7f:3c:cd:cc:9f:86:e7:4c:65:c5:
         fb:ab:b3:23:e3:7c:c4:e1:78:41:6f:7c:f9:69:d4:a8:47:f1:
         49:44:29:af:fb:e9:05:bf:c1:84:a4:95:ca:55:d1:f6:46:77:
         19:fe:ea:c0:ac:bf:b0:d9:ce:ab:92:e6:c4:52:2e:da:15:93:
         ee:56:a8:13:75:0d:fa:87:c6:6e:a5:88:1f:2b:89:84:ce:4a:
         3c:dd:5e:72:b5:b5:02:5a:cc:23:08:d4:f3:38:7d:f9:54:60:
         c1:69:9e:9c:0f:86:ab:b0:47:bd:ca:f8:f3:a1:0f:be:ba:b4:
         58:a6:5c:f5:2d:c9:88:29:1f:d4:19:08:f2:e7:76:16:c6:b1:
         48:ba:fd:f9:09:1d:77:7c:04:f2:f8:77:b5:de:c5:c6:61:7a:
         c3:7f:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:30 2026 by rpki-client