Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
File:                     385B6DAE577411ECBF021B66C4F9AE02.roa (raw, json)
Hash identifier:          cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=
Subject key identifier:   62:A2:D4:E9:61:BC:56:07:C8:4F:E6:87:A2:9A:3B:B2:4D:D5:DE:DE
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       04DC
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:58:44 +0000
ROA not before:           Tue 15 Jul 2025 01:05:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56311
IP address blocks:        103.168.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Jul 15 01:05:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40dd4-0c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:cd:94:61:f0:d7:00:bc:8f:3b:7c:2a:52:
                    cc:50:fc:59:38:8f:b5:e5:18:ec:b2:0e:4d:38:38:
                    66:e0:35:4e:6b:d1:bb:15:2c:eb:24:7f:d1:60:cd:
                    6c:1b:dc:b9:73:05:1f:60:a6:e2:95:7a:51:c2:0e:
                    b5:40:d3:47:ed:2d:2b:f0:2f:9d:41:96:22:21:4f:
                    a2:be:b8:f5:9e:5f:07:d5:98:6b:3b:35:c2:51:66:
                    45:6f:46:a7:d6:34:5a:79:3a:40:2e:9b:a4:2f:20:
                    be:6e:45:91:31:0e:be:de:df:c4:46:a6:e0:20:d0:
                    e7:de:a5:52:c3:cc:f2:f3:e1:d4:46:59:aa:89:cf:
                    01:54:64:3d:24:d2:59:46:9e:8f:02:1f:5f:4d:24:
                    fb:81:2b:35:9d:84:04:fa:8c:9a:17:5e:11:dc:ce:
                    32:7a:0a:e4:91:53:05:c2:32:b4:df:62:f8:d9:48:
                    d8:fc:ba:a7:44:d0:bc:59:be:f5:f9:bc:6f:8d:4a:
                    78:9c:bc:fd:99:95:16:53:b1:ce:7c:87:4d:7e:99:
                    94:ef:9c:58:aa:39:77:d0:70:e5:e7:70:5b:91:0a:
                    20:60:14:de:8a:4f:b1:84:d3:04:7e:9f:6c:6c:02:
                    6b:5e:d9:03:1e:ff:f2:00:e1:7c:96:b0:c2:54:95:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:D4:E9:61:BC:56:07:C8:4F:E6:87:A2:9A:3B:B2:4D:D5:DE:DE
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:56:c5:d8:bc:72:6f:b7:ba:13:b2:58:3e:a9:8a:33:88:
         a8:c1:db:82:60:89:d5:6a:05:d9:14:3c:d8:f9:72:2b:17:91:
         a4:21:82:94:c1:04:c9:51:56:b0:88:b5:5e:13:96:b6:c6:c2:
         fd:1d:f3:8c:a4:0d:4c:6f:66:39:8e:04:85:f8:bd:dd:59:6f:
         e3:9d:bf:9e:71:18:1a:6f:b9:ca:00:7d:b9:f5:21:b2:6e:71:
         05:78:4e:9c:85:64:42:d2:88:dd:e8:df:3c:9f:5e:49:c2:ae:
         57:4e:e6:ee:89:54:ac:bd:5e:8d:77:e8:04:78:0f:cb:ab:af:
         ae:12:66:57:95:8d:16:bc:74:b3:a1:65:c8:c2:07:51:db:60:
         92:82:b0:e2:3a:a3:4d:43:f2:e7:e2:29:95:f7:60:d3:c1:99:
         14:89:49:a9:30:07:ca:73:ef:3a:89:46:6e:fa:55:04:81:a5:
         d2:1b:a9:79:58:c0:15:d2:50:28:4f:1c:5b:e0:02:75:d9:92:
         25:60:10:30:1f:01:35:36:ff:9e:e5:6f:e1:3c:9c:78:ba:65:
         f4:3e:80:c4:83:a3:4a:12:c9:c1:ec:91:64:7b:51:b9:da:17:
         f4:f8:8b:7d:dd:45:e9:fe:f3:02:e0:a7:a5:47:14:c0:34:0c:
         c7:ec:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:22 2026 by rpki-client