Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/C95F7472ABD411F08661983DC4F9AE02.roa
File:                     C95F7472ABD411F08661983DC4F9AE02.roa (raw, json)
Hash identifier:          um5FATXJv2PeHIM419FTfRh/2kJB5Ik6XYcBrsTSeMY=
Subject key identifier:   AC:6E:AD:1F:99:16:F1:BE:28:B4:2D:34:AA:E3:82:DD:E5:08:6C:6D
Certificate issuer:       /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial:       0128
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/C95F7472ABD411F08661983DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:47 +0000
ROA not before:           Sun 01 Mar 2026 07:24:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.207.24.0/22 maxlen: 24
                          210.16.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
                          rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
        Validity
            Not Before: Mar  1 07:24:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3e9bf-0dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:89:f9:3c:2a:53:bc:87:f5:db:9a:07:4a:
                    7b:07:2c:f7:0c:12:8a:ee:ca:64:13:7a:75:7a:b5:
                    97:51:45:d4:0e:c8:ee:14:d2:27:25:ed:fd:52:3d:
                    78:cf:56:8c:c2:66:0f:a3:c4:db:50:ce:a5:d9:90:
                    b0:72:8c:fb:4d:0c:83:c1:93:78:6c:24:71:0e:4b:
                    09:2e:b7:fa:90:19:34:55:14:d0:bf:eb:d5:47:f9:
                    58:cd:1b:3e:c9:47:6f:11:a7:f1:47:4c:c3:0f:36:
                    16:58:2f:eb:e6:21:90:e6:91:fb:cf:9e:1a:1b:5b:
                    d4:21:38:b9:b7:71:97:3e:de:6f:cd:fd:23:7e:fb:
                    6d:bf:13:37:4a:c5:80:01:75:5f:06:06:3c:c4:75:
                    f3:5d:71:20:d0:d8:ae:c7:05:11:15:98:77:40:ac:
                    de:79:8a:9f:66:8c:65:b9:66:bd:40:9b:01:9e:9a:
                    42:24:b0:09:66:d7:58:40:20:9b:24:b0:ee:85:9a:
                    f7:6d:62:2c:e6:2a:03:22:41:ac:1b:43:44:b6:80:
                    a0:66:66:e2:21:d0:87:c0:72:19:d4:ed:bc:58:57:
                    e9:03:9c:d2:9a:8e:c4:32:5e:8e:82:e4:1b:5a:85:
                    51:de:04:96:4e:f3:8b:72:83:d2:9a:e5:91:27:09:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6E:AD:1F:99:16:F1:BE:28:B4:2D:34:AA:E3:82:DD:E5:08:6C:6D
            X509v3 Authority Key Identifier:
                keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/C95F7472ABD411F08661983DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.24.0/22
                  210.16.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:83:48:06:26:d0:1b:a9:36:18:f4:2c:d0:37:72:da:d5:
         7e:20:91:ac:74:6c:8b:b0:21:88:80:0f:c9:6d:16:da:9e:b9:
         5b:c4:e3:ec:07:26:9e:cf:6c:b3:82:da:e6:22:0d:cd:b2:1a:
         ff:cc:26:29:d2:f9:ae:a7:5a:28:dd:b1:07:7c:fb:6f:1c:8f:
         27:1d:31:39:18:27:e8:3a:4d:a1:c0:88:09:55:ce:ae:8e:14:
         f4:1b:33:fa:64:d2:20:68:06:7e:c3:cb:da:b2:d2:22:ef:95:
         af:af:e0:08:45:28:17:97:44:e0:00:5c:7d:3b:09:63:de:2f:
         68:ff:0c:7b:b6:3c:67:c9:10:4a:14:cf:99:c6:33:14:fa:1c:
         32:c9:65:bb:06:94:91:3a:45:51:16:3f:1b:0a:c6:3c:a0:bb:
         c1:1f:f8:ab:ca:55:90:d7:03:4b:22:ba:86:d0:d4:e5:59:d8:
         15:3f:f7:c6:0e:36:03:0b:9a:0b:16:04:a4:66:c6:9f:87:55:
         db:25:5f:b5:c0:1d:58:f1:4a:14:6b:9e:cf:5f:6f:9f:a2:82:
         df:8c:ae:37:d2:e9:83:95:a2:58:d4:0f:47:72:b7:62:4b:f5:
         6e:f7:b4:83:e4:8a:be:8b:bf:d6:79:d4:0b:2a:f5:73:f6:4e:
         77:30:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:48 2026 by rpki-client