Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa
File:                     8ADFF772924011ED867BE311C4F9AE02.roa (raw, json)
Hash identifier:          TM/D4LHWNIZ9N9gTEfSEIkEH4FxQBGl0/P//YBmNd8Y=
Subject key identifier:   BD:AD:F8:BA:D3:2E:22:36:30:D6:69:74:4A:31:C1:2C:B4:7F:FB:67
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0EDD
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:21:01 +0000
ROA not before:           Sat 22 Mar 2025 18:07:30 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133076
IP address blocks:        103.18.160.0/24 maxlen: 24
                          103.18.161.0/24 maxlen: 24
                          103.18.162.0/24 maxlen: 24
                          103.18.163.0/24 maxlen: 24
                          116.204.160.0/24 maxlen: 24
                          116.204.161.0/24 maxlen: 24
                          116.204.162.0/24 maxlen: 24
                          116.204.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3805 (0xedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Mar 22 18:07:30 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a404fd-44ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:b6:fa:68:94:ad:fd:89:61:b7:54:d7:6a:
                    65:fc:78:bb:11:05:ae:52:8f:ca:ac:bc:7f:6a:11:
                    55:87:20:29:c1:91:8c:36:03:87:1a:b7:8b:f3:24:
                    ed:f1:fc:e4:ea:59:ce:57:c6:ce:af:01:7a:4a:f6:
                    a4:75:c6:28:0f:82:6e:65:4e:0b:de:d5:4c:57:a5:
                    a2:e2:53:dd:38:ed:74:aa:91:79:9b:66:8e:9a:78:
                    65:8b:74:aa:ce:6b:ee:a0:e4:4e:07:0a:1b:63:6d:
                    7e:88:79:9d:bd:7c:da:d4:55:d3:4f:2d:a8:f4:12:
                    58:f2:e0:8d:b5:0a:d1:35:6f:c0:d2:4e:a3:c6:a8:
                    0c:ff:a3:4b:d1:97:35:bd:81:01:8d:a9:ff:7a:6c:
                    b7:bc:b2:ba:47:31:9e:c1:c3:24:96:3d:1f:05:ac:
                    58:82:b5:be:2e:40:8b:c1:ca:83:ec:72:57:5c:50:
                    70:99:1d:5a:f4:91:0a:ba:40:72:44:23:13:92:e6:
                    c2:94:30:39:22:db:e5:e0:93:89:bd:30:91:22:ba:
                    61:77:12:9d:ab:87:dc:f0:79:1b:2c:5a:c7:e0:4d:
                    ed:40:49:f8:d6:cf:d4:b6:1f:0c:da:cb:40:50:59:
                    7f:4d:cb:03:45:24:4f:f1:0d:97:7c:16:45:bb:da:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:F8:BA:D3:2E:22:36:30:D6:69:74:4A:31:C1:2C:B4:7F:FB:67
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.160.0/22
                  116.204.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:17:d2:b0:31:03:4b:89:17:04:27:25:11:0d:17:d8:12:
         ad:3b:b1:2d:e5:4c:1a:3f:10:bf:15:18:18:12:92:c4:c7:30:
         d9:e9:67:3d:5f:55:a0:e9:e4:b9:6a:e1:e3:f9:ab:a9:dc:c9:
         84:65:35:16:25:6f:e4:b9:bd:df:6e:10:c4:4f:73:0e:0c:4c:
         ec:6b:12:02:ec:8a:bc:2b:76:be:13:96:17:0d:74:a8:1a:d0:
         d3:7e:a2:ca:a5:c6:23:0c:f4:d7:49:43:27:c6:60:53:30:03:
         5e:b0:81:1a:b1:f0:49:c6:d2:41:8e:5f:00:7b:d7:27:dc:20:
         ca:a0:36:79:3c:80:d0:fe:82:8f:08:d2:0f:ed:3c:76:cd:6d:
         94:3f:d8:b9:04:9f:80:05:18:9d:1e:44:b3:6a:5d:e9:f6:1c:
         7a:38:7c:c8:19:52:d7:85:7e:69:a5:72:ed:5f:b6:74:b8:d7:
         46:29:43:5b:50:c9:0a:a3:cf:b2:f8:4d:a6:de:8d:23:aa:e7:
         24:b6:63:47:c9:8a:5f:85:8d:eb:9d:1a:81:c0:26:96:0b:4d:
         b3:5b:75:16:51:78:20:68:a1:25:f2:30:b1:ce:2b:24:66:8d:
         ef:55:81:be:eb:cb:d7:2c:3f:eb:5a:00:8a:67:d3:aa:02:c7:
         02:7e:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:53 2026 by rpki-client