Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
File:                     31F9C990668B11F0B10A9677C4F9AE02.roa (raw, json)
Hash identifier:          0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=
Subject key identifier:   2D:10:C2:EC:11:A7:75:AD:55:FD:A5:CB:48:77:54:D1:F0:01:9F:71
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       DC
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:14:20 +0000
ROA not before:           Thu 22 Jan 2026 13:10:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     11870
IP address blocks:        103.44.16.0/24 maxlen: 24
                          103.44.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Jan 22 13:10:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a465dc-b689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:84:40:70:66:8d:d2:62:90:ea:2e:9d:38:
                    0a:12:ab:d5:cc:66:fc:65:26:fd:bc:a2:9f:91:c6:
                    88:da:8f:59:73:08:8c:9f:dc:13:d1:13:36:da:1c:
                    82:01:b3:87:e6:7f:89:a0:49:64:49:67:a7:f6:26:
                    e0:66:bc:24:73:04:eb:6e:c7:cc:40:21:50:57:95:
                    6c:e7:9d:30:54:3c:4b:cb:78:8b:5a:82:63:54:96:
                    a7:be:dc:63:da:ce:c3:bb:66:20:23:a4:79:03:c3:
                    8d:0a:d5:dd:a0:d7:a0:23:53:a2:e7:20:57:f8:d5:
                    96:5f:1a:9f:80:a3:5b:cb:c1:ad:3c:6c:d6:44:e9:
                    ed:dd:31:c0:7e:05:da:5e:ad:5d:f1:12:f6:16:46:
                    f6:f0:64:df:7d:4e:7e:28:24:f9:7b:b0:64:21:e0:
                    68:c3:23:d7:d9:16:97:71:53:d3:e2:21:4f:ef:67:
                    90:a0:00:52:8b:c6:72:19:58:72:aa:f4:08:33:59:
                    a0:b9:b5:78:21:94:71:89:8d:c7:0a:4e:33:43:da:
                    16:63:5b:86:c3:bd:0f:51:a5:a1:b4:45:3f:7b:45:
                    a7:95:57:9a:5d:d7:3a:fb:06:77:84:01:d2:67:42:
                    47:79:cf:51:d9:4c:8e:7a:2b:bb:d9:19:48:0c:e1:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:C2:EC:11:A7:75:AD:55:FD:A5:CB:48:77:54:D1:F0:01:9F:71
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:b6:28:c8:c1:86:17:c5:46:78:4e:3e:77:e6:78:5e:af:32:
         96:da:45:ad:d1:6e:eb:ea:4e:84:46:d5:b0:42:dc:b6:ee:4e:
         a8:e0:b1:d4:43:c2:a0:25:c6:9c:3c:83:ac:e5:30:e2:66:33:
         12:bf:6e:be:91:70:5b:aa:1f:e2:7d:7c:81:76:8f:54:50:e3:
         6b:8f:64:51:d9:ac:71:c3:56:65:ab:aa:30:bf:50:1c:a4:ce:
         98:ef:13:8d:d6:3d:00:20:35:92:7b:3e:7d:f8:ff:9d:2e:1f:
         75:16:58:e0:90:d5:65:d0:f0:ee:9e:6a:0f:cd:b5:03:9d:8e:
         24:4d:f0:63:b8:fa:62:9f:10:d6:1d:a3:01:ff:ff:fd:03:40:
         e5:5a:85:04:33:36:e0:b1:f2:3e:99:41:ad:b7:d2:00:0b:49:
         4f:6f:39:03:af:fb:28:84:bd:b1:b4:aa:b1:03:86:eb:95:aa:
         67:8b:74:f1:78:e1:54:b8:dd:ef:da:13:ea:9a:48:c9:55:52:
         63:4d:65:b5:5f:59:98:9c:69:18:6d:bf:b2:30:40:7c:60:ab:
         ac:5d:5f:f2:af:cb:3e:35:71:ca:b4:03:41:df:8f:32:a3:ef:
         71:26:08:6f:31:7a:db:fc:c6:29:06:74:ae:51:6d:23:fb:93:
         97:de:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:22 2026 by rpki-client