Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
File:                     4C6227D2B69B11EFA181E00AC4F9AE02.roa (raw, json)
Hash identifier:          gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=
Subject key identifier:   0A:51:04:48:F4:E3:95:08:97:3C:AC:62:05:0A:89:DD:E8:32:D9:43
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       14C8
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:19:52 +0000
ROA not before:           Wed 02 Jul 2025 17:25:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137899
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5320 (0x14c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  2 17:25:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47537-b4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:d3:85:c0:ab:3c:11:ec:ae:6a:b5:fb:35:
                    d1:85:24:12:02:ed:42:78:bb:3c:f1:3b:f0:61:11:
                    f3:99:15:0c:3d:e7:40:0d:52:0d:cd:52:5c:36:3b:
                    3e:c4:55:35:e0:86:f7:b8:60:62:5a:da:03:63:b3:
                    94:7d:33:84:0a:7c:2b:bd:0e:73:ce:6a:bb:b9:ee:
                    3a:ee:30:01:6f:92:21:ab:6e:b6:a4:1b:7d:e8:18:
                    c8:54:a7:6c:3b:de:dc:52:58:c7:27:74:19:15:63:
                    d0:aa:a2:0e:f8:c1:5a:4d:ee:53:d3:ba:1f:44:73:
                    ed:5f:d2:b1:73:37:e8:38:2d:9e:c3:69:18:de:1c:
                    4d:bc:ac:65:76:91:98:81:03:6f:1c:e8:e2:11:5d:
                    c5:6e:5a:8f:5f:c1:af:6a:e5:93:bc:9c:2b:85:02:
                    6b:4a:e6:2e:55:bf:42:52:bd:4d:e1:67:bd:b2:ab:
                    36:1a:af:e3:8f:3b:60:53:8a:64:b1:55:af:33:30:
                    d6:2c:38:c8:01:80:38:86:44:09:93:01:8b:89:82:
                    4d:14:19:2c:e3:7a:29:31:c7:e6:e0:91:2f:d2:f0:
                    aa:1a:ba:4b:46:b8:ae:7e:dc:66:eb:d6:10:cc:48:
                    94:2c:37:7a:3c:da:a2:d5:57:8b:14:13:1c:2c:c8:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:51:04:48:F4:E3:95:08:97:3C:AC:62:05:0A:89:DD:E8:32:D9:43
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:0a:18:c1:84:df:d9:59:c6:c5:6b:e7:d5:11:b8:d8:6d:
         31:b1:c9:55:c5:9e:bc:13:5d:2e:35:c0:02:e6:8c:ee:e6:f6:
         52:b7:d5:9d:32:f7:47:b3:79:88:ec:73:90:e7:09:d9:dc:1f:
         39:e7:41:b5:f4:d2:45:9f:65:36:a6:40:ce:cb:da:20:79:66:
         76:ab:86:d5:fc:bc:59:9e:b4:98:6d:32:97:86:44:c5:14:b6:
         f9:e3:ad:d3:4f:d5:da:5a:c9:e2:15:86:bb:d9:78:f5:cd:02:
         85:5c:60:8b:28:e4:af:f5:56:ea:9e:6b:ee:fd:19:ae:55:57:
         46:1d:ea:bb:54:15:87:fb:4a:b6:7d:49:b6:5a:33:84:17:d6:
         c7:92:fc:93:85:0e:23:f1:ef:3a:a2:6b:59:60:fc:1f:0b:6f:
         10:3a:ce:3c:ed:93:26:48:29:50:98:be:dc:47:30:c0:47:ec:
         e5:97:3d:47:e5:c3:28:aa:8e:46:85:aa:24:6f:0f:c6:e1:70:
         53:ce:64:0a:af:5d:be:1d:ac:17:4e:ed:9b:17:b5:e9:d2:31:
         5f:6c:68:9c:d6:25:d8:f3:4f:72:4a:39:3b:38:34:9c:a6:e3:
         ec:61:b6:17:9a:10:1f:4a:af:4a:40:08:be:0b:b2:4d:62:2a:
         25:6b:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:19 2026 by rpki-client