Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
File:                     EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (raw, json)
Hash identifier:          ct0mE6OpNEThVXE1JEsbco6IvPm8j4AUPffuW2qNdws=
Subject key identifier:   CA:7E:31:90:01:48:D6:01:C2:67:3D:07:E3:22:56:45:3B:25:08:87
Certificate issuer:       /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial:       01FC
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:41 +0000
ROA not before:           Sun 13 Jul 2025 04:10:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140594
IP address blocks:        103.251.254.0/24 maxlen: 24
                          103.251.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
        Validity
            Not Before: Jul 13 04:10:23 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3ec89-f85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:ea:02:ad:92:7b:96:9e:6c:89:19:d2:38:
                    0c:9d:36:66:32:84:38:0c:65:31:58:33:4b:4b:ff:
                    2d:9f:65:69:3a:37:9e:21:bc:e3:b3:c4:7c:3f:3d:
                    9d:1c:b3:d8:ba:64:ea:d1:aa:eb:25:e7:5d:e5:94:
                    3b:78:85:c0:0c:fd:c5:3a:5c:65:9c:73:36:0f:04:
                    b2:fd:02:23:a1:0c:cb:9c:f9:2a:2c:8e:6d:88:f7:
                    24:2d:b3:51:0e:8a:8c:ba:e0:ab:82:1e:36:56:87:
                    24:53:3c:cd:cd:68:6d:10:78:51:3c:07:93:d2:b1:
                    e6:4b:17:b1:90:1e:ca:2e:0a:e0:68:ca:b4:cd:7c:
                    52:cc:77:9f:01:ca:d5:79:90:28:c8:ab:cd:77:9e:
                    d2:ce:d7:77:e3:01:f9:df:f2:9b:81:c1:b7:54:d5:
                    d7:27:ec:33:dc:f3:2e:d6:01:1d:9f:62:f5:b5:8e:
                    d9:67:19:37:2f:ea:31:92:f1:1b:b0:17:b0:be:f1:
                    e8:e6:e6:5a:4e:ba:cf:18:c7:2b:3f:bf:54:89:e0:
                    6b:bb:f2:87:11:6c:a2:f4:4d:8a:43:a8:a8:ad:89:
                    61:51:f8:75:cb:51:0f:47:8f:74:e0:8a:f4:d2:92:
                    8e:d4:3d:c2:41:17:6e:e7:89:b7:2f:a6:a8:62:12:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:31:90:01:48:D6:01:C2:67:3D:07:E3:22:56:45:3B:25:08:87
            X509v3 Authority Key Identifier:
                keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:4e:fb:74:52:c5:b9:d3:40:58:56:08:74:46:ca:3e:ca:
         d7:27:5d:cf:9c:52:4b:7a:19:3e:bc:c5:92:28:12:93:a2:e7:
         93:c1:7e:44:7b:1b:7d:f8:b3:95:9a:b5:ad:f9:09:43:b4:6d:
         57:a3:f9:a8:82:13:6d:aa:0c:42:f2:89:58:80:47:76:de:8c:
         4a:74:c7:62:dd:14:8f:eb:d7:7a:32:3b:09:e8:55:4d:7d:ce:
         b3:d6:d5:10:f3:d3:30:fc:71:b9:8d:88:a6:fa:c4:4a:11:cb:
         41:5a:da:89:6f:dd:d9:c2:36:65:1f:bf:5d:27:c0:9e:cb:f4:
         88:7a:fa:58:2d:e1:05:6e:ab:0b:20:00:74:07:b5:76:33:06:
         f2:32:40:d5:5f:5c:7c:72:bd:68:6b:a5:0e:0a:6d:66:b9:a1:
         fd:34:1f:6d:94:73:4c:46:d3:2f:08:65:d5:b8:86:c7:fa:70:
         ab:c6:2a:6f:5e:86:3d:9a:27:c8:ae:bb:e5:2d:01:c3:68:94:
         f4:90:71:f9:70:b2:79:ce:43:8d:6f:62:26:16:7b:45:db:87:
         0e:eb:7c:21:3e:1f:cc:4d:b3:ff:77:8c:c3:63:4b:30:a9:f2:
         1b:3e:f4:4e:de:86:8e:2d:dc:87:db:07:21:50:1f:14:3a:24:
         2f:a8:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:56 2026 by rpki-client