Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa
File:                     7592203EB1B111E999187E66C4F9AE02.roa (raw, json)
Hash identifier:          FPxJw4sExbccVQ2M9hVDSe9NeO0aMI9+xaKlLCWTwe8=
Subject key identifier:   48:1F:2D:14:5A:28:C8:0E:CD:B8:72:11:01:87:B4:7D:18:C8:49:84
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0E8C
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:49:49 +0000
ROA not before:           Fri 12 Sep 2025 17:57:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135366
IP address blocks:        103.99.160.0/22 maxlen: 22
                          103.99.160.0/23 maxlen: 23
                          103.99.160.0/24 maxlen: 24
                          103.99.161.0/24 maxlen: 24
                          103.99.162.0/23 maxlen: 23
                          103.99.162.0/24 maxlen: 24
                          103.99.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Sep 12 17:57:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a443fc-8181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:88:9f:e1:09:c6:d1:53:44:c5:a7:32:cb:
                    ce:be:e0:03:87:1b:56:12:32:16:3d:3f:59:a5:c2:
                    8f:c2:58:4c:26:35:6f:41:1e:07:3b:02:b8:b1:dd:
                    99:2f:b5:58:37:7f:60:9d:d9:9d:d9:19:28:f3:83:
                    a1:0d:16:c9:06:ac:74:3d:77:a9:3d:cd:31:28:5b:
                    4a:8d:73:1d:92:58:fb:c4:0c:5d:75:6a:c7:fc:f3:
                    11:ea:57:ee:d6:4f:e9:7b:41:4e:4c:7d:7d:16:db:
                    19:95:ce:bb:0a:9d:83:0f:24:56:f2:2d:e2:d7:50:
                    c6:40:9f:28:d4:54:05:3d:62:a4:1b:d4:6a:4f:1b:
                    0d:99:af:c1:36:91:82:19:86:51:b4:72:4d:85:c2:
                    1e:4f:36:ea:51:73:f0:21:22:a6:41:17:b4:0b:8f:
                    a0:93:46:e8:8d:ae:20:8e:b3:21:14:1d:ac:b1:3c:
                    e0:50:e5:7f:0e:74:e2:b7:b7:fd:51:53:36:fa:e4:
                    7b:52:c5:03:7b:4d:80:6c:37:11:bb:f7:00:a2:61:
                    d5:09:d5:f9:95:d8:35:7f:9c:d5:c1:27:c7:06:d1:
                    03:b1:b5:1b:64:b4:d0:79:74:3c:27:dc:6a:71:53:
                    51:61:37:6a:ce:b9:9b:4d:de:ec:29:09:ca:0f:d6:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:2D:14:5A:28:C8:0E:CD:B8:72:11:01:87:B4:7D:18:C8:49:84
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:ac:fe:15:b9:db:30:73:7e:93:c1:6e:64:bd:36:6b:76:
         36:cd:93:e1:ad:f7:ca:62:ba:d8:eb:e2:38:ae:5c:99:9b:fa:
         32:05:b6:88:39:e8:40:16:48:db:d4:7a:7a:4f:32:d4:da:dc:
         ab:b5:c2:c1:f2:e3:cb:6d:f1:de:2d:11:04:27:b2:4c:7b:d1:
         5a:97:c5:72:8e:da:42:9d:20:e9:ad:0f:40:d9:94:cf:b8:37:
         b2:3d:94:a2:f3:6b:df:cb:08:80:1c:1d:11:9a:e5:74:c1:6e:
         58:c7:97:8c:3c:e3:e5:1d:78:ad:18:de:40:87:e0:ca:ee:2a:
         51:99:43:55:6d:ae:9f:b3:ad:3c:cc:97:5e:55:d4:94:60:8a:
         f1:8f:95:40:17:ad:df:84:cf:32:1f:3e:6a:08:fa:64:24:b8:
         87:c0:9e:e3:0f:65:32:bc:12:b6:90:ef:84:86:eb:02:9d:3b:
         c0:84:cb:b3:13:ed:14:58:fa:ec:28:8a:75:1f:1a:9a:b4:c1:
         cf:12:b3:63:2d:0f:19:c4:b8:59:30:67:26:dd:ae:d3:b9:83:
         bc:42:f3:01:6e:ce:31:0c:0d:e2:6c:3a:28:cc:72:5f:30:fc:
         f2:ae:12:7d:bf:a1:4c:d5:93:c8:03:6a:e4:18:68:d5:b6:26:
         82:bc:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:14 2026 by rpki-client