Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa
File:                     6985BF0062D611EEB5C5721CC4F9AE02.roa (raw, json)
Hash identifier:          RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=
Subject key identifier:   E8:16:3C:B6:C2:E8:48:DE:22:9B:4C:BC:5C:19:F1:27:A0:74:71:D1
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       0283
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:10 +0000
ROA not before:           Tue 15 Jul 2025 03:09:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.167.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Jul 15 03:09:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a455e2-3a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:9b:75:ec:58:e8:e4:7a:16:47:fc:a7:71:
                    9e:07:fb:b0:14:a8:33:26:df:3a:0e:94:d1:13:f0:
                    bd:11:30:4d:fb:7c:66:f1:fe:a0:53:4d:71:23:ad:
                    09:3f:c4:60:02:22:ea:10:4f:5c:7f:ce:d5:2d:a1:
                    36:c0:98:b5:2e:a1:d9:87:6d:6c:c3:ec:51:0d:15:
                    3e:08:39:eb:a3:2a:e1:36:fa:0f:95:0f:33:91:77:
                    d6:93:2e:19:64:39:11:7b:6e:5a:e5:a9:93:b5:e1:
                    11:96:41:96:16:c5:18:ef:e0:ca:a1:17:b2:b8:e8:
                    88:9f:db:0d:61:d2:a3:19:81:85:d7:85:9e:92:d0:
                    50:87:6c:97:b1:1e:e7:68:03:a3:97:bf:2b:e1:13:
                    9f:a8:89:5a:da:c8:27:d2:1d:df:71:19:ae:eb:41:
                    72:18:a1:5e:34:71:c4:4c:bd:01:5c:79:f3:8c:9d:
                    c0:42:e7:3c:25:ef:ed:be:e2:ed:cc:10:6c:ba:47:
                    5e:7f:b9:5b:77:cf:6f:37:eb:ce:52:4d:78:97:5d:
                    7e:13:fa:bc:9c:44:bc:a0:0a:66:17:68:d8:33:76:
                    00:ca:c4:af:74:54:a1:20:2f:db:a3:cf:ed:d1:c8:
                    46:b4:17:a7:53:6d:04:dc:97:81:1b:90:c1:33:66:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:16:3C:B6:C2:E8:48:DE:22:9B:4C:BC:5C:19:F1:27:A0:74:71:D1
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:a3:a1:98:8a:fc:cd:74:9c:2f:db:46:64:f5:ef:a3:87:
         6f:17:04:1b:2c:7f:03:95:bc:c2:c9:6f:67:4e:c6:67:14:ac:
         66:4f:a4:9b:2a:36:8e:03:9e:7b:54:79:17:6a:e7:c3:62:5e:
         ce:8a:8d:f5:8b:29:85:50:f3:1f:74:90:84:fd:9e:7b:50:24:
         a5:e5:c0:e6:3f:d4:13:96:e8:c6:41:7e:31:4d:9e:bd:2f:ea:
         bd:e8:89:18:73:a5:71:38:f4:b4:82:50:d4:0a:38:ec:87:9a:
         78:10:9e:ab:a2:55:65:63:08:42:b5:c0:14:3d:cc:60:a8:f9:
         d9:16:ec:c7:33:ef:ed:12:af:cc:59:7f:ee:13:c0:0b:01:64:
         2f:5f:ee:01:25:fa:1e:d6:a2:3d:1a:57:e5:65:70:5e:08:00:
         c2:a7:4d:11:03:09:be:a9:42:4c:5d:ec:d2:8b:f6:42:15:d5:
         b1:54:a7:f7:77:07:ae:2b:b9:85:ce:e0:b8:d1:eb:3e:98:df:
         00:bf:9c:af:78:be:3a:72:96:92:17:34:01:64:fb:d0:3b:8f:
         d5:fe:c8:04:35:70:4a:57:8d:41:4b:cf:7d:66:86:3f:b8:2c:
         38:38:bd:f0:30:43:63:8b:4c:6e:b3:76:97:ba:90:90:1d:d9:
         b3:26:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:09 2026 by rpki-client