Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
File:                     ED31D84EC81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier:          qAEw4cfCPVqW7FS+d2/zPSE0MsVbQiymPW0bXvjNNYM=
Subject key identifier:   59:19:8D:FF:5E:83:CA:A1:F3:50:C6:BF:8E:4D:D8:8F:16:51:4B:67
Certificate issuer:       /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial:       065E
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
Signing time:             Mon 06 Apr 2026 22:35:13 +0000
ROA not before:           Mon 06 Apr 2026 22:35:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134693
IP address blocks:        103.164.162.0/23 maxlen: 24
                          2407:3d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
                          rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
        Validity
            Not Before: Apr  6 22:35:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d43521-da04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:28:4f:bf:92:6e:71:0a:f1:ca:00:d1:7c:
                    20:b7:c9:40:81:27:81:09:ba:ef:c2:f0:c9:92:9b:
                    8d:2f:ab:d1:3e:a4:81:b6:fc:b6:b2:fb:9f:99:16:
                    b0:10:7e:9d:54:24:43:48:84:74:90:ca:02:28:2b:
                    f0:49:86:43:cb:11:58:16:7f:8e:41:6d:93:9b:b3:
                    bb:4b:bf:3a:6c:c0:fa:3a:98:4b:f7:c0:f8:f8:3b:
                    e0:8b:38:eb:9a:89:dd:5c:69:12:e5:82:e4:c2:43:
                    14:ca:4f:0a:da:10:01:bb:18:bb:7f:ae:0b:8f:71:
                    f3:4a:ce:c4:18:e5:d7:b6:3b:f2:3a:4e:09:a4:06:
                    62:80:17:b2:65:f6:cc:50:6f:b1:84:49:de:9c:56:
                    9b:4b:4b:d4:fb:20:a2:ec:2e:9a:ca:4a:87:85:41:
                    fb:af:41:31:35:06:62:74:d6:61:d0:57:7d:9f:fc:
                    0e:02:fb:31:c4:40:6c:d8:05:c8:1e:d1:49:b3:02:
                    b4:f0:ad:66:de:7b:22:23:e1:e5:a7:27:5f:d9:53:
                    95:18:a4:a6:8b:5a:bf:ce:c3:56:3c:5f:ab:bd:ea:
                    cc:af:4f:82:67:9d:d3:fb:d4:2f:8f:64:9b:42:67:
                    98:53:5c:43:cf:fa:e2:d4:6a:d0:8f:08:6f:ff:29:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:19:8D:FF:5E:83:CA:A1:F3:50:C6:BF:8E:4D:D8:8F:16:51:4B:67
            X509v3 Authority Key Identifier:
                keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.162.0/23
                IPv6:
                  2407:3d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:46:d0:e0:d4:76:bf:e3:86:2b:f4:05:39:7c:a9:81:94:d6:
         b6:f4:60:7f:cd:cf:62:51:4a:4c:51:7b:a1:3f:0d:f6:92:fc:
         5c:b6:ef:d3:07:e0:05:61:6c:ee:b7:13:83:ff:5d:f6:b1:8e:
         f0:82:66:e2:9e:c7:d4:db:87:a9:63:f8:bd:3d:b0:af:f8:b1:
         d4:23:21:a6:11:dc:99:c7:25:b0:ec:8c:eb:aa:ad:81:27:5a:
         32:80:86:3d:21:6c:17:a3:c3:2c:35:e7:ca:e6:d3:c2:1f:05:
         47:5f:e7:05:8c:25:d0:93:81:ab:12:aa:82:86:01:0d:7c:7e:
         73:af:c1:ab:6e:98:f6:47:e7:34:7a:70:cb:71:0a:ca:a7:d4:
         e6:99:7c:30:4e:16:92:ad:fa:9a:19:99:01:b3:e9:00:aa:ea:
         68:2a:6f:9e:8f:81:2d:5f:d2:8d:2b:6c:ed:73:0c:b6:1f:f8:
         da:2a:d1:e8:6a:fa:0d:bc:a2:de:29:6c:c4:b3:39:a2:b0:d9:
         3d:a0:dc:c4:8a:d2:f3:bf:0a:11:09:7a:23:f1:25:46:07:b7:
         c7:b8:67:80:8f:9b:ff:d6:10:6f:ec:f7:f1:7d:88:34:aa:cc:
         db:c6:b9:ba:12:23:7c:5a:06:bc:0e:9a:b0:f5:5a:f0:a6:34:
         df:c5:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:37 2026 by rpki-client