Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa
File:                     EE99A422139111F1BDC8075D3B3D8C67.roa (raw, json)
Hash identifier:          AOkQ/qP4GzBkvmhob3U3hLgvcTeFpKmdHt13HnJmjco=
Subject key identifier:   1C:65:53:08:E5:F3:B9:44:C9:BF:61:6C:57:93:CF:B5:6B:E5:2F:9A
Certificate issuer:       /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial:       05DF
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa
Signing time:             Fri 27 Feb 2026 04:08:12 +0000
ROA not before:           Fri 27 Feb 2026 04:08:12 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        103.115.170.0/24 maxlen: 24
                          103.115.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
                          rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
        Validity
            Not Before: Feb 27 04:08:12 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a118ac-bc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:2f:8e:75:cb:19:73:dd:af:ca:d6:5e:37:
                    c9:b3:35:80:45:30:cb:5f:38:18:2c:8a:99:e1:20:
                    ab:4b:f1:87:ad:5f:25:8b:9b:8c:46:b9:8f:34:7c:
                    fa:de:79:87:db:27:d8:fb:5c:ea:ce:94:79:bf:0d:
                    b6:9b:0c:31:91:e4:3f:32:fc:b2:04:b3:27:df:77:
                    4f:c3:c0:72:ee:a4:e5:54:20:8f:96:34:8a:85:dc:
                    11:ec:aa:e9:e2:de:f2:6c:01:fb:6c:96:9e:1a:0b:
                    7a:9d:95:9c:63:9b:f1:85:2b:e6:2e:d4:c3:0b:df:
                    5e:0d:12:1e:7f:39:75:10:f0:50:bc:d1:85:09:dd:
                    70:b6:ba:50:f2:96:9e:a0:62:41:e4:03:ab:5c:12:
                    87:80:81:e6:24:98:f6:e8:0f:bf:86:6c:71:d9:e3:
                    56:81:11:ad:41:20:3f:88:65:35:f5:d8:17:45:87:
                    d9:39:c2:35:4c:6b:5b:58:c4:b6:4c:60:2d:fd:f5:
                    62:62:ba:dc:64:83:10:23:65:9b:68:19:0e:ec:f4:
                    37:fb:00:37:4b:52:bf:73:1c:e6:b4:cb:0f:2c:70:
                    37:26:2f:c6:62:f2:33:92:c8:be:77:bc:31:c6:78:
                    96:19:e6:13:7b:fa:32:c9:0c:8d:c4:1a:23:3c:98:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:65:53:08:E5:F3:B9:44:C9:BF:61:6C:57:93:CF:B5:6B:E5:2F:9A
            X509v3 Authority Key Identifier:
                keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:e7:ac:79:cc:0b:b4:78:bd:e1:b7:21:93:c6:cf:1e:c3:
         cc:67:1a:9e:04:c5:97:bb:88:34:4b:fc:a6:1d:13:d8:9f:3c:
         68:c0:57:3e:42:58:af:7c:86:45:68:4e:3b:fa:22:30:b0:d2:
         90:1a:e1:55:3e:c7:9d:57:90:9c:b9:3f:92:9b:29:7f:dc:13:
         30:40:89:3a:2a:38:1e:6e:14:c8:2e:66:b5:97:8b:79:be:e8:
         a6:38:d9:65:1e:47:a3:4e:cd:37:6f:7b:30:ff:31:c2:a7:b0:
         8f:31:fb:0a:1b:7a:f4:20:ad:f4:5c:1b:bc:f5:d6:d4:f8:a6:
         cf:3f:66:53:34:93:85:36:f2:8d:2c:9a:a9:f7:b3:29:f4:a8:
         a6:47:b3:d6:21:fe:70:e8:f9:6e:45:05:42:68:d1:7e:9e:f3:
         43:08:a6:9c:a1:b7:83:3e:d2:73:e2:49:63:08:67:69:92:12:
         30:b3:79:4e:3a:9a:1d:ba:e0:9b:73:ab:fd:7d:20:66:37:18:
         3b:7a:40:b6:0a:52:ec:ef:6b:8c:74:b2:da:94:78:77:fd:6b:
         2c:dd:6a:35:8c:38:b6:b8:71:8d:86:b9:bd:d3:cb:42:3f:a7:
         16:8a:8a:fb:26:8b:c8:a5:e9:23:1b:89:e8:d4:35:80:63:c7:
         5e:05:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:17 2026 by rpki-client