Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa
File:                     160A52A854EF11EFB9156612C4F9AE02.roa (raw, json)
Hash identifier:          VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=
Subject key identifier:   37:B6:FD:F4:1C:19:61:67:2D:DF:3B:9A:50:E1:9E:11:40:81:12:AB
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       01F2
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:18:12 +0000
ROA not before:           Sun 31 Aug 2025 04:22:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151648
IP address blocks:        103.248.222.0/24 maxlen: 24
                          103.248.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Aug 31 04:22:11 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41264-0d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:58:ac:49:17:d4:b5:96:24:58:14:29:fa:
                    f4:87:32:ff:57:fe:66:8e:5a:ce:fa:fa:6d:4a:b0:
                    56:5c:3e:5d:77:cf:e6:12:2b:4c:c2:43:c7:d5:9b:
                    62:b9:e1:ea:08:d5:1f:88:35:8d:a7:0d:5e:20:14:
                    71:f4:6e:3f:ec:5b:5f:ab:92:73:e8:91:b4:b6:46:
                    7a:cd:99:db:90:a6:04:7d:a8:c1:f3:f6:7f:22:c2:
                    ad:66:1c:63:83:7b:10:3c:1c:d1:e7:ce:66:88:91:
                    74:ee:68:c5:65:2e:ee:c8:26:db:19:1a:fb:c7:fb:
                    57:d6:0b:0f:3c:e5:38:94:e1:3c:8e:3a:9a:a2:f2:
                    5a:39:27:45:4f:6c:73:c7:60:dd:d0:c7:76:9e:ce:
                    cb:38:40:c8:f4:5f:80:ee:59:d7:12:df:c9:00:c1:
                    d9:03:c7:3f:1d:5a:a0:e6:23:80:40:1c:74:e4:c6:
                    ce:e2:b2:54:f9:ea:e8:4f:c6:c7:55:e9:a4:e7:34:
                    0c:35:49:53:3c:b6:e0:dd:e7:bc:44:e3:21:28:b0:
                    b1:0c:a5:6e:84:0b:61:48:d1:55:73:a6:45:b2:09:
                    3b:33:ff:32:d5:26:2b:47:b2:ea:20:a4:11:fe:1a:
                    05:5c:dc:e8:26:99:95:4a:d9:d0:70:46:c1:06:2f:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:FD:F4:1C:19:61:67:2D:DF:3B:9A:50:E1:9E:11:40:81:12:AB
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/160A52A854EF11EFB9156612C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:8f:34:cf:14:30:8c:c2:32:cb:97:47:21:af:62:b2:6f:
         37:54:02:4e:c3:29:96:28:27:c4:bc:99:1f:38:8d:b9:9d:93:
         44:2b:1a:0d:45:01:37:59:76:54:13:32:b4:db:08:a8:6d:91:
         c9:cb:68:cc:25:d8:b3:9d:06:e4:8d:ca:14:b9:4c:56:9e:eb:
         12:d3:d9:15:38:9a:b7:03:67:c0:32:3d:c3:b4:c4:0f:cb:ef:
         e1:e2:49:44:44:4d:42:6e:0e:f1:b7:f3:0d:38:67:c2:1d:23:
         99:68:41:92:ee:90:83:03:43:ef:dc:ba:04:81:dd:bb:41:15:
         73:33:2a:b7:7d:76:3b:c0:97:78:bf:27:1d:df:2f:3e:48:07:
         03:64:a9:c3:b5:f2:24:fc:2c:05:27:92:d2:7d:fd:c1:03:cd:
         ff:5b:1a:67:ca:bd:29:00:30:a5:14:b5:7e:cc:db:7d:01:db:
         94:f9:8e:e7:82:09:2f:6b:c3:80:9d:6d:6a:fd:33:5c:14:d5:
         69:47:d2:82:a3:c0:99:b9:bc:be:ed:e3:7a:cc:13:bc:2f:aa:
         cc:10:77:5a:aa:db:e2:51:29:cc:55:26:ca:be:31:93:46:d4:
         d9:df:6e:40:1b:d5:98:f5:30:0f:1d:3f:24:c1:32:ca:27:90:
         82:e9:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:53 2026 by rpki-client