Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa
File:                     CE00DA34FF4411EBAD3A632AC4F9AE02.roa (raw, json)
Hash identifier:          5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=
Subject key identifier:   00:C4:AF:0D:AE:17:00:96:E5:63:A3:47:D2:2F:32:8C:7E:05:7C:A9
Certificate issuer:       /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial:       05C8
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:17:04 +0000
ROA not before:           Sun 28 Dec 2025 23:18:49 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141004
IP address blocks:        103.159.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
                          rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
        Validity
            Not Before: Dec 28 23:18:49 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44a60-b9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:16:40:27:0e:c2:1f:fb:c2:5c:da:88:19:
                    b5:0d:4c:f0:17:a6:fe:11:23:52:f6:7d:a4:ec:3b:
                    ea:18:6e:4b:c3:e4:6d:db:9b:64:cc:ec:be:39:e2:
                    14:f1:cf:64:d0:18:31:be:7a:08:09:59:3c:c1:42:
                    5f:d4:58:13:91:90:97:31:11:0b:7c:1e:13:92:b9:
                    81:25:87:86:b0:67:c5:75:ff:60:18:ad:4e:4a:55:
                    76:e0:c5:91:c2:ab:68:c0:84:f7:64:10:a2:66:d3:
                    31:c6:c3:6f:bd:9f:d5:48:83:ef:31:d6:8e:18:c3:
                    b3:02:be:5b:a7:f8:b7:f4:95:fc:47:b0:1f:24:9b:
                    67:f4:75:c0:4c:d8:85:a2:06:b6:aa:62:ea:d6:65:
                    4d:1a:c3:2d:8d:f0:ff:22:6a:e0:d5:8c:79:90:91:
                    f9:c6:c0:54:31:f7:da:f2:f1:b4:bc:63:1f:db:d6:
                    b0:68:6c:1e:f2:e7:4d:b0:b3:17:66:e2:9c:16:f6:
                    cd:b2:31:0d:53:ca:2e:30:17:6a:00:f3:49:11:90:
                    d0:53:6a:4d:b6:82:ce:f6:e7:aa:05:eb:34:24:93:
                    50:fd:c5:ec:e7:cb:ad:12:86:c9:00:99:19:c5:57:
                    69:43:56:f7:01:25:8b:34:74:56:31:e6:e4:2c:9b:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C4:AF:0D:AE:17:00:96:E5:63:A3:47:D2:2F:32:8C:7E:05:7C:A9
            X509v3 Authority Key Identifier:
                keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/CE00DA34FF4411EBAD3A632AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:30:af:64:1e:ce:44:4d:33:c7:07:01:bb:01:05:76:bb:
         02:e8:1d:0d:45:06:7b:ad:57:08:8c:2c:df:08:e5:bb:90:39:
         03:84:8c:75:e6:8a:28:11:c9:f0:7a:8a:47:b6:17:76:23:ed:
         71:9c:17:dc:ef:b3:5a:69:4c:de:4d:5f:e6:6e:24:c4:33:8c:
         b2:7c:32:22:40:ba:24:c7:93:ef:d4:ee:c8:75:b2:1e:49:6d:
         cb:e0:68:8f:9d:60:9f:79:a6:8e:e3:92:c7:a0:07:5b:9f:01:
         ad:9b:56:68:79:8f:85:86:b9:ca:b1:a9:75:9f:5f:e4:fe:8d:
         c9:1f:87:1f:bb:fa:cf:c2:ce:7a:e6:0d:22:d4:69:09:4d:a4:
         65:5e:87:49:1c:b8:ac:45:54:74:51:ee:12:aa:3f:89:95:36:
         9e:b7:2e:16:b6:2c:b5:f3:75:17:39:11:22:95:09:e2:81:ba:
         f5:fc:6c:0d:08:bf:f6:6f:fb:72:a6:7e:a1:4e:3f:f0:b6:ca:
         10:9c:18:5c:9b:1a:18:8b:00:f6:d4:27:5d:c7:2e:16:24:90:
         f4:dc:8f:89:20:60:e2:de:a5:c9:ea:2d:71:0b:ac:be:5b:91:
         13:e4:b8:ea:83:a2:e7:09:a5:ba:1d:c3:27:04:d9:95:30:aa:
         b5:33:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:20 2026 by rpki-client