Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
File:                     FC73357271B811EEAEDED685C4F9AE02.roa (raw, json)
Hash identifier:          akhySB51PMI2y7wAP//uAqapHy/Dl5nwYVbMKbRi7uI=
Subject key identifier:   70:B3:58:45:81:E0:61:8A:BE:1F:6A:E7:77:12:86:EB:57:74:8F:FA
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       01F6
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:37:05 +0000
ROA not before:           Tue 09 Sep 2025 04:10:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58955
IP address blocks:        103.216.158.0/23 maxlen: 23
                          103.216.158.0/24 maxlen: 24
                          103.216.159.0/24 maxlen: 24
                          2001:df2:d3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Sep  9 04:10:21 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3eca0-2f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:14:f9:cb:af:59:89:59:3b:46:eb:e8:8d:
                    8c:14:e2:dc:f8:66:e0:be:0b:e1:cc:39:b7:1b:9e:
                    99:d1:3f:9a:0e:ef:d6:59:7c:9c:38:ae:30:82:59:
                    4b:5a:58:aa:6c:1a:b2:cf:57:d0:7d:47:b8:d7:85:
                    c3:67:76:42:66:90:ed:3e:32:a0:75:39:ae:49:34:
                    3a:40:c2:a0:6f:33:29:7e:95:e3:30:cc:9e:09:6d:
                    2b:34:13:6d:48:98:4e:c4:49:1d:f8:46:36:f8:04:
                    97:70:96:cd:19:c4:be:0a:bf:53:1a:25:12:de:0f:
                    47:71:f5:ba:7e:a5:e4:81:82:ca:ea:47:eb:ca:af:
                    fa:35:e6:dc:e1:8e:5e:a3:7a:ab:fa:a4:6c:76:cc:
                    08:4c:78:1e:56:23:71:87:3a:76:36:d1:4c:6b:74:
                    de:9d:a0:fd:24:83:c4:ea:e5:2e:f9:1f:05:2e:df:
                    b4:5d:9e:a8:e2:94:ee:fe:7b:54:fd:b4:ef:a8:41:
                    54:91:19:47:5a:67:a8:3e:2d:f9:85:0a:9e:73:ac:
                    63:96:09:23:23:2f:b6:27:9e:6d:59:fa:20:f1:59:
                    1d:5e:22:5b:c8:1f:68:49:79:95:b6:76:78:e4:5d:
                    34:fa:5e:f4:f6:c9:19:b4:35:97:46:9f:1c:54:2a:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:58:45:81:E0:61:8A:BE:1F:6A:E7:77:12:86:EB:57:74:8F:FA
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.158.0/23
                IPv6:
                  2001:df2:d3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:35:bc:7e:8e:cb:d7:d0:9d:0a:ce:00:55:01:48:c7:04:c6:
         b6:b1:42:51:13:d0:fa:9e:c1:91:78:0f:76:4c:b5:ca:3c:51:
         be:fb:7a:30:04:d4:fd:6c:19:a7:27:c9:b0:c7:e5:d9:d1:66:
         49:02:26:2e:23:69:8d:88:92:50:b4:5d:d9:1e:95:8f:9a:d9:
         d3:3a:30:67:5e:85:1b:cc:df:f8:7f:47:c0:d5:06:78:18:03:
         69:d5:8b:57:1c:4e:e1:9b:77:5e:8f:5c:00:d4:ad:ec:3c:99:
         ec:34:07:53:31:93:39:47:b1:46:79:60:09:11:20:c8:1f:55:
         db:aa:85:3a:35:23:af:5e:a2:10:fb:d8:b4:2b:8e:66:c0:70:
         35:f8:32:46:71:c8:f1:b5:47:c6:2a:ae:a2:a6:ea:6b:e8:31:
         7e:b4:b4:08:ec:13:e9:cb:46:3a:be:7d:d6:d6:a5:d5:fc:2e:
         98:fe:dd:76:5d:97:cd:95:e4:7d:cd:b5:74:a3:4b:b9:d9:79:
         96:a5:07:fa:05:5e:c7:8f:09:87:9e:87:9d:43:fe:f1:bc:db:
         ff:5c:31:0e:27:9f:12:4a:ca:c6:18:87:23:e2:41:7f:ad:a0:
         52:fe:3d:3c:1b:fa:da:64:bc:cb:f1:9d:91:9c:1d:43:e6:66:
         e6:3f:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:19 2026 by rpki-client