Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa
File:                     B951F87ABE6D11EF933FE870C4F9AE02.roa (raw, json)
Hash identifier:          S40NIyhP5u7/UlmLJYX9/RykdcdP5gu6OSoqCbZEohA=
Subject key identifier:   34:C8:2B:D3:87:5F:C9:2C:A1:3F:46:A4:3F:2A:48:2D:F6:EA:5D:7F
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       0673
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:36:25 +0000
ROA not before:           Sat 08 Nov 2025 21:43:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        203.28.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
                          rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
        Validity
            Not Before: Nov  8 21:43:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a432c9-1f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:34:fc:42:fe:88:e4:f5:e8:17:72:58:f1:
                    bc:19:75:fb:ad:0a:bd:43:28:50:1d:d5:d2:b8:df:
                    41:f1:93:57:1c:86:88:35:11:24:91:9d:39:75:5f:
                    7b:61:f2:f5:22:b9:90:7d:f2:ca:89:39:e8:21:c7:
                    e6:a6:a5:a0:bf:d8:a8:a9:b5:79:2e:15:26:69:df:
                    6c:51:86:22:02:49:c7:1a:43:9c:8b:18:58:8b:64:
                    7d:81:22:1e:36:ef:21:83:5e:e1:9c:38:9a:e2:0b:
                    50:2e:1e:73:27:1f:9f:dd:ec:b7:46:6e:84:a7:a5:
                    42:d8:be:c2:39:8b:f3:aa:a5:6e:43:5b:53:94:a1:
                    ca:34:45:18:4f:02:aa:e3:f0:4e:fd:24:aa:47:50:
                    be:c7:ad:fb:ec:69:66:ff:f0:90:79:2b:aa:ca:cb:
                    63:15:1a:14:99:07:22:eb:e3:cb:0f:9a:ed:18:f7:
                    f2:74:cf:9c:c8:6c:47:2a:ea:f3:b6:78:6c:f5:56:
                    6d:e7:5f:09:50:de:4c:90:bf:aa:e6:c2:71:43:28:
                    3a:f7:27:17:af:df:75:b3:cc:c9:68:54:13:34:ac:
                    b8:9e:18:c1:d3:70:75:37:2e:da:ba:31:ef:74:2d:
                    e2:f2:e9:9a:cd:ce:74:d9:3c:81:d2:95:be:d2:7a:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C8:2B:D3:87:5F:C9:2C:A1:3F:46:A4:3F:2A:48:2D:F6:EA:5D:7F
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:53:ac:44:bf:4f:ff:0b:2f:eb:54:5d:1c:6b:9b:56:5d:
         2d:89:39:21:15:00:66:02:ee:97:73:63:3b:ba:43:4f:e6:2e:
         54:ef:79:f5:f5:31:0d:d4:24:5c:56:aa:d4:0a:7e:20:58:44:
         1b:2c:90:09:29:9c:6f:86:7f:68:a8:52:24:02:d4:be:e3:42:
         39:66:9b:c4:75:3d:ad:ae:64:6d:2e:6a:62:f4:35:34:b5:01:
         7b:88:3c:d3:26:da:a3:a9:a2:71:04:55:44:27:db:25:7b:9a:
         d3:76:69:10:7e:97:28:ac:59:46:5d:a3:7d:09:7d:87:e8:68:
         b4:5b:a9:0f:c2:cf:b8:ae:1d:98:e9:31:b1:26:76:61:a8:6f:
         75:ce:d6:57:9c:fc:01:d1:92:9b:84:9a:9d:10:4e:68:7d:6e:
         fc:3b:94:f4:2a:da:dc:da:21:d9:8e:da:2a:23:3c:8e:aa:0e:
         d1:ae:3a:28:a2:e5:aa:8a:1f:46:ba:0f:3a:5c:9a:60:71:94:
         c0:0c:56:d4:74:dc:82:b0:24:57:3b:5f:72:c8:71:e3:63:71:
         92:81:72:79:d4:15:f2:ee:1f:45:9d:85:5c:73:42:be:b3:43:
         e1:e7:c0:2a:14:ee:ac:c1:00:66:5d:4c:af:b8:43:6f:c0:83:
         92:ab:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:27 2026 by rpki-client