Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
File:                     166B5FEA727711EEA4209110C4F9AE02.roa (raw, json)
Hash identifier:          m9fdpbDTR93o1zzYBL+SbEGylXvjw7lehcZZpxx/N4w=
Subject key identifier:   77:C3:A8:43:D9:50:DC:10:45:58:81:B0:BE:D3:AF:E1:FA:B7:85:3A
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       01BD
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:39:54 +0000
ROA not before:           Thu 17 Jul 2025 04:41:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132227
IP address blocks:        103.214.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Jul 17 04:41:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3ed4a-4901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:a8:76:57:0b:db:df:af:f5:74:a8:24:54:
                    56:1b:6d:69:82:ea:8d:3a:8b:23:c3:04:ae:25:cb:
                    57:cc:9c:ab:0b:2d:03:ba:23:8c:65:10:18:0c:2c:
                    a4:24:cc:a6:5b:e5:bf:a2:3d:16:d3:ee:94:2e:df:
                    56:b2:de:43:24:fa:af:7f:e0:94:7f:fa:00:79:30:
                    5b:2e:2e:63:d0:cf:cb:87:6f:70:82:af:13:c1:e6:
                    c3:7d:9e:ca:b4:8c:74:b3:7e:0f:26:48:e8:51:02:
                    77:df:de:47:85:30:7f:8d:9a:2d:d8:f6:c9:81:39:
                    ce:b5:9b:41:11:66:fd:8c:6b:e9:20:df:74:00:06:
                    9d:19:6a:56:0d:f0:7d:b9:8c:49:da:29:33:1f:33:
                    88:ac:26:50:dc:d7:a5:44:93:ee:62:43:45:ba:0b:
                    74:2f:0a:fe:9e:f7:53:a1:67:f5:12:b5:4b:53:b3:
                    7a:e7:76:cc:fe:82:c4:53:41:6c:94:7d:40:36:5c:
                    57:41:c0:c6:5c:7b:f5:06:15:40:18:29:5c:59:c4:
                    9c:97:3c:ff:84:36:d6:1c:01:cc:24:cd:83:2f:d3:
                    e0:1f:07:29:e6:06:0b:8a:11:cb:be:de:2d:a9:bc:
                    9b:18:0c:1c:69:02:bd:60:0c:20:ee:ec:1c:d6:4f:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C3:A8:43:D9:50:DC:10:45:58:81:B0:BE:D3:AF:E1:FA:B7:85:3A
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:22:a1:ec:cc:76:3c:cd:95:cb:f5:b0:42:d2:e4:dc:6d:e1:
         eb:52:18:c0:09:fa:85:5f:67:d6:fc:01:c1:cb:4c:36:c9:aa:
         be:bd:1b:0e:d2:8b:59:13:80:2b:ae:1f:57:83:61:99:24:43:
         ab:76:6d:0e:32:e7:48:c7:9a:54:cf:59:e2:76:50:67:17:38:
         5c:47:51:c2:1d:0a:92:d9:8b:2a:88:76:0f:3d:d9:b5:0a:06:
         6a:fc:bc:1d:8a:cb:9a:e4:de:bd:e1:4f:b2:4a:9b:27:60:6a:
         67:d5:87:b2:78:a4:31:18:de:a2:be:e2:73:8e:2f:01:2f:55:
         02:21:c4:d5:0a:34:69:6a:d8:ca:89:7d:8a:b9:1e:5f:0c:a1:
         09:56:e0:0f:74:be:14:32:c1:79:a3:bc:fd:ec:cb:7a:21:69:
         0a:bd:cd:d0:dd:d4:fc:bb:7e:fd:fc:2d:fa:68:2c:c0:52:fb:
         58:5b:b4:13:56:6b:8d:fd:c2:44:28:c2:1a:06:4c:4f:53:71:
         7e:1f:e5:34:e0:51:ac:f6:eb:e2:f9:be:45:58:44:ac:c9:d9:
         ef:32:50:51:6f:00:11:e8:23:4c:8f:4f:5f:21:bf:af:ce:54:
         dc:6f:30:91:87:6b:83:89:f8:4a:8e:95:81:05:c0:c6:61:2c:
         d4:95:cd:0d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz
NkQxN0QwNEIwHhcNMjUwNzE3MDQ0MTE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWQ0YS00OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn8KodlcL29+v9XSoJFRWG21pguqNOosjwwSuJctXzJyrCy0DuiOMZRAYDCyk
JMymW+W/oj0W0+6ULt9Wst5DJPqvf+CUf/oAeTBbLi5j0M/Lh29wgq8TwebDfZ7K
tIx0s34PJkjoUQJ3395HhTB/jZot2PbJgTnOtZtBEWb9jGvpIN90AAadGWpWDfB9
uYxJ2ikzHzOIrCZQ3NelRJPuYkNFugt0Lwr+nvdToWf1ErVLU7N653bM/oLEU0Fs
lH1ANlxXQcDGXHv1BhVAGClcWcSclzz/hDbWHAHMJM2DL9PgHwcp5gYLihHLvt4t
qbybGAwcaQK9YAwg7uwc1k8G1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHfDqEPZ
UNwQRViBsL7Tr+H6t4U6MB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy
NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODk4ODMvQzM3RUM4QjI3Mjc2MTFFRTg0NjAyOTBEQzRGOUFFMDIvMTY2QjVGRUE3
Mjc3MTFFRUE0MjA5MTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ9b4MA0GCSqGSIb3DQEBCwUAA4IBAQAoIqHszHY8zZXL9bBC0uTc
beHrUhjACfqFX2fW/AHBy0w2yaq+vRsO0otZE4Arrh9Xg2GZJEOrdm0OMudIx5pU
z1nidlBnFzhcR1HCHQqS2YsqiHYPPdm1CgZq/Lwdisua5N694U+ySpsnYGpn1Yey
eKQxGN6ivuJzji8BL1UCIcTVCjRpatjKiX2KuR5fDKEJVuAPdL4UMsF5o7z97Mt6
IWkKvc3Q3dT8u379/C36aCzAUvtYW7QTVmuN/cJEKMIaBkxPU3F+H+U04FGs9uvi
+b5FWESsydnvMlBRbwAR6CNMj09fIb+vzlTcbzCRh2uDifhKjpWBBcDGYSzUlc0N
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:27 2026 by rpki-client