Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
File:                     D11B9044112011EDAC1D3B15C4F9AE02.roa (raw, json)
Hash identifier:          kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=
Subject key identifier:   71:88:E2:D0:22:B8:03:A2:50:BD:85:33:89:65:31:9B:AC:B9:DD:F5
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       0305
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:06:13 +0000
ROA not before:           Sat 27 Sep 2025 02:00:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132161
IP address blocks:        103.14.216.0/23 maxlen: 23
                          103.14.218.0/23 maxlen: 23
                          203.190.208.0/22 maxlen: 22
                          203.190.212.0/23 maxlen: 23
                          203.190.212.0/24 maxlen: 24
                          203.190.213.0/24 maxlen: 24
                          203.190.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Sep 27 02:00:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a42bb5-ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:92:b9:f2:0b:8f:5b:00:4f:98:3a:93:fb:
                    eb:4a:c5:c8:30:c3:0d:fe:c3:cb:51:fc:45:b3:09:
                    24:78:c8:21:5c:ae:af:66:96:bd:71:53:27:b3:06:
                    11:4d:6f:cf:8a:7b:4b:7a:dd:ae:1d:71:91:23:7d:
                    2c:54:79:9f:f5:07:83:c6:14:0f:e8:53:17:23:52:
                    34:77:af:6a:55:cf:1c:a4:2b:67:85:e6:f6:34:ff:
                    cf:08:d8:c8:b6:7a:ff:76:66:c8:1a:86:f8:6a:32:
                    48:3b:10:b9:ea:4b:cd:63:fb:f2:21:ef:ed:9b:33:
                    09:ba:1a:e7:9f:be:15:fc:7d:2b:1e:c0:e3:d2:15:
                    ab:4c:6e:b6:65:24:2b:1f:5a:ad:1a:22:c7:1e:ac:
                    af:7e:f5:8b:23:fc:e5:48:d9:61:f8:9c:d3:07:3e:
                    2f:16:11:d0:e4:3a:cc:a8:59:e7:62:05:0d:bf:e5:
                    2c:ac:d9:8b:ab:e1:04:d0:7a:02:64:c0:3c:42:65:
                    b1:c8:18:10:74:de:ad:37:7d:14:19:fe:11:ea:87:
                    a8:9d:6e:82:18:00:eb:0b:0b:11:18:95:d2:ef:fb:
                    64:af:aa:55:68:17:b5:fa:81:43:15:05:f5:df:34:
                    31:06:1e:0f:7e:e4:e6:10:13:ba:f9:34:b8:42:7b:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:E2:D0:22:B8:03:A2:50:BD:85:33:89:65:31:9B:AC:B9:DD:F5
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.216.0/22
                  203.190.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ce:73:b4:05:0b:79:ce:df:e3:d7:06:7a:af:c5:45:3c:bc:f9:
         23:56:11:0a:62:cc:29:41:b9:d8:27:9d:d3:3a:c3:cc:33:25:
         dc:f1:f7:19:f1:c9:9c:5f:f6:ee:82:24:09:16:bf:a5:68:91:
         0f:59:87:ed:84:5b:e2:b1:ea:82:c2:28:9d:9d:50:39:95:5d:
         ab:77:8f:82:da:32:0b:2d:70:aa:3d:74:bb:19:4e:84:80:16:
         14:cb:76:29:0a:9a:5c:5c:3b:b8:cd:b9:a0:1c:92:00:7c:87:
         f1:97:74:75:a4:1a:3a:bd:81:8d:85:f8:ac:1f:e1:e8:fe:cd:
         77:a9:c7:37:be:5c:e7:9d:5a:7e:61:38:04:b5:34:54:38:eb:
         38:86:40:a0:27:5e:70:91:89:97:1b:94:9b:72:60:61:2e:4e:
         45:bf:f9:0e:21:9a:d3:86:65:c8:01:23:5b:8f:53:23:bf:73:
         52:3d:1e:1f:a7:64:4c:62:2a:e1:c9:e7:4f:a8:82:07:ab:e7:
         57:74:41:ef:14:09:cc:1b:bb:27:dc:f1:77:3b:32:12:42:9b:
         45:6d:36:77:c1:9b:c9:9e:61:4f:e8:82:87:cf:76:b9:25:41:
         1a:a9:4e:24:a0:1e:66:49:74:d3:aa:79:e2:b8:23:04:c5:06:
         3f:a0:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:54 2026 by rpki-client