Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa
File:                     C66770F24B9111EA9A72503CC4F9AE02.roa (raw, json)
Hash identifier:          wcBn6zzmuqZgVHobc9nnX0MwLLhfrJhdoOLry6NW5b4=
Subject key identifier:   F6:84:DC:71:6C:67:6F:0E:98:B1:8B:68:A8:26:E6:45:C1:11:79:15
Certificate issuer:       /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial:       0B6F
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:26:52 +0000
ROA not before:           Thu 22 May 2025 20:04:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     64095
IP address blocks:        103.60.99.0/24 maxlen: 24
                          163.47.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
                          rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2927 (0xb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
        Validity
            Not Before: May 22 20:04:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4065c-c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:f0:f3:ec:20:db:c7:cd:65:2d:4e:50:a4:
                    39:12:8a:d1:f8:80:5b:1f:8d:70:5e:13:2f:16:94:
                    b7:5a:63:2c:52:0e:c4:30:d5:33:d2:54:c1:1c:f1:
                    80:14:29:72:ea:df:80:78:2d:41:ae:c3:ad:57:e0:
                    84:90:04:e8:8a:26:17:78:08:97:7d:e7:5d:5a:56:
                    b3:d4:c7:59:6d:52:ed:3a:13:c6:23:cd:04:99:2e:
                    fc:98:88:3a:ca:3f:77:58:65:74:9a:bc:b1:fb:5f:
                    d5:61:39:89:3f:83:e9:b6:87:25:d5:d9:af:49:e7:
                    87:d9:66:5a:39:f0:83:3c:b9:85:7d:3b:19:83:2b:
                    a5:0e:ea:de:43:4a:fd:91:a0:e5:ed:f6:b8:d1:5d:
                    3d:a3:9e:54:05:bc:db:58:f8:a6:85:9b:d0:aa:47:
                    2c:c4:71:79:18:b4:3d:24:92:1e:8e:3d:e5:0b:57:
                    81:0f:5a:6d:ba:bf:c8:87:96:63:a5:a9:46:c1:48:
                    5a:5c:e6:98:42:c8:fd:24:af:34:f2:28:af:c2:69:
                    ab:4f:36:95:34:fb:78:17:0a:42:e0:f1:2d:ba:a9:
                    cd:5a:67:27:5f:b7:57:82:04:ed:08:1b:81:d3:03:
                    4d:2b:23:0d:9b:5c:9e:17:a0:e6:bd:aa:6c:43:70:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:84:DC:71:6C:67:6F:0E:98:B1:8B:68:A8:26:E6:45:C1:11:79:15
            X509v3 Authority Key Identifier:
                keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.99.0/24
                  163.47.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:3c:08:07:d4:a4:78:63:e3:4d:88:69:e7:0b:b3:84:77:
         d9:59:c9:0e:e0:0f:13:ae:d2:49:10:2c:9e:d8:2f:c6:ae:f2:
         53:69:0b:5c:6a:db:02:2a:4c:64:30:ac:93:4e:7a:dd:50:34:
         d6:2b:e6:6d:0f:9c:b3:77:c9:9d:2c:82:1d:61:95:3d:f6:2e:
         a2:b3:dd:09:cd:05:87:da:74:1d:ab:41:8c:61:2b:2e:a8:81:
         de:21:0f:bc:ad:51:7d:15:a7:26:7c:70:5e:fe:8b:ba:49:d9:
         c3:1b:ba:d7:4a:6f:0a:55:30:e1:79:85:96:99:e7:2b:45:06:
         f8:4c:7d:7b:33:87:10:62:80:75:db:55:23:08:3a:cf:50:71:
         ba:63:52:cf:cc:9d:50:97:af:e3:22:47:95:7b:e5:94:f8:dd:
         67:86:fc:20:a1:3f:51:52:ed:9c:91:8e:0e:db:e5:88:b6:c1:
         04:1f:7d:4d:69:74:97:95:c1:5d:cc:00:27:be:05:c1:60:61:
         68:3f:6b:e8:77:97:aa:d2:57:9e:ef:d2:08:3e:32:67:39:ea:
         ab:54:b7:23:fd:77:a7:bf:13:7e:17:53:b0:da:1b:ba:6e:78:
         f1:e3:86:4f:9b:8a:45:a7:c0:53:40:1b:74:49:61:67:2c:1f:
         9a:1f:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:14 2026 by rpki-client