Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
File:                     90AEB6B26C0411EF903ED20BC4F9AE02.roa (raw, json)
Hash identifier:          39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=
Subject key identifier:   70:82:27:E6:F6:15:22:C9:23:70:EC:30:F5:1B:69:82:81:5A:01:C9
Certificate issuer:       /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial:       05B1
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:59:27 +0000
ROA not before:           Sat 04 Oct 2025 23:55:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147070
IP address blocks:        103.172.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
                          rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
        Validity
            Not Before: Oct  4 23:55:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4544f-5b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:60:62:77:df:7d:aa:8e:ba:79:27:97:c6:
                    02:c5:df:41:53:b9:36:ad:5a:bb:5c:ff:73:f5:0a:
                    bd:67:c9:63:4b:93:03:d9:51:73:b2:e6:bf:4e:f8:
                    26:41:c6:f3:79:27:83:42:8f:76:93:d2:4a:cb:c8:
                    39:90:3e:06:b7:4d:c1:ac:57:c5:0e:b8:6b:71:36:
                    3c:99:dc:15:75:5f:26:4f:e9:11:b6:b5:4f:cf:46:
                    6c:de:42:4d:87:09:88:7d:6a:aa:47:bd:01:c0:16:
                    2d:7e:82:cc:a5:32:3e:93:8e:02:48:b1:91:1a:73:
                    49:38:24:2c:ff:02:e3:14:24:fd:39:1c:7e:d1:67:
                    32:07:02:9d:56:74:f2:23:e7:a1:be:6d:26:d4:2c:
                    3c:2f:dc:31:e1:43:40:ff:5a:75:81:a3:17:4a:87:
                    b2:e2:8c:2d:37:96:e4:d1:eb:a4:d6:a3:ea:6e:49:
                    b0:29:21:3c:05:aa:9d:82:b4:b0:5e:2c:e6:a8:4b:
                    6d:e9:99:54:be:d0:3d:9c:14:23:fb:92:0a:55:0a:
                    1e:3e:1e:a9:75:c6:63:fd:6d:f8:f3:c6:82:43:f7:
                    f9:79:cf:72:56:42:a1:4d:69:67:08:02:ac:35:cc:
                    ac:e8:1f:ff:88:ce:c5:c8:e1:a8:73:a6:4b:6b:58:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:27:E6:F6:15:22:C9:23:70:EC:30:F5:1B:69:82:81:5A:01:C9
            X509v3 Authority Key Identifier:
                keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:69:67:2e:83:e9:64:1d:b2:f8:b6:c9:d7:b8:10:db:6e:cf:
         e7:cc:58:2f:99:7f:1e:d0:7d:15:4c:4c:f3:53:80:b6:ea:4d:
         84:6e:30:01:de:36:a1:47:08:54:25:2b:84:19:8f:ac:73:5c:
         77:88:95:fb:f8:0a:1f:ab:6e:ac:6c:4a:1d:c3:c9:1a:d1:45:
         1c:6f:d7:1b:6a:b9:5b:eb:f6:27:34:b7:46:ea:0c:31:d0:b9:
         65:cc:e4:8a:04:86:42:c3:f7:cd:57:8d:b1:90:96:97:60:00:
         67:1a:3c:ea:98:f8:28:e2:6c:bf:2a:ca:7a:f5:76:3e:2b:50:
         16:a2:4b:ae:68:f9:ec:fa:b4:2d:73:d0:d9:98:a0:15:2d:d2:
         1c:27:eb:b7:3c:f1:b9:46:e9:ea:83:ac:4e:05:3a:e3:a9:06:
         32:48:5b:15:35:a8:a3:0f:b9:c0:ac:08:56:10:a7:b4:43:7f:
         04:c0:86:6e:ed:42:9d:4f:dc:00:fd:19:bb:f6:51:28:61:d7:
         4c:58:31:54:24:9a:3f:3f:9e:3e:4e:65:78:04:cf:e5:ca:65:
         b3:f2:e8:21:80:3c:29:b6:9d:2d:41:9f:80:92:bc:01:c8:da:
         0f:a1:00:51:25:28:ad:6d:e9:fb:e3:a8:75:ff:2a:f4:a0:ce:
         a3:39:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:20 2026 by rpki-client