Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa
File:                     8A190AB66D1011EFA13D6E2BC4F9AE02.roa (raw, json)
Hash identifier:          y9tCShTAtdbkhcHqZKIPeVMLfFc8J6hhfijdxgmxbTg=
Subject key identifier:   C6:E1:AF:7F:3E:2F:D5:FA:89:3D:EE:2D:E2:CA:94:18:58:BF:8D:F1
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       055F
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:42:54 +0000
ROA not before:           Thu 21 Aug 2025 00:05:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138968
IP address blocks:        103.67.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Aug 21 00:05:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4344e-e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:47:af:f4:25:f3:2f:1b:9b:0e:b7:4e:cc:
                    b3:cd:9c:ef:ab:3e:6d:e5:4d:6c:02:c5:d0:86:9e:
                    68:22:14:28:b7:ff:f4:34:2e:56:ba:e8:80:5e:55:
                    b4:f9:c2:51:2c:04:8b:d3:c5:46:59:86:20:bc:39:
                    4a:64:44:d0:47:88:62:62:3e:a2:65:1c:b3:43:52:
                    43:5e:59:77:03:97:f8:55:68:1f:3e:72:60:09:57:
                    db:aa:3c:7e:85:21:1c:65:19:c8:a7:03:82:c4:26:
                    33:6b:f4:72:96:45:b2:11:57:74:55:29:5f:44:c2:
                    74:ca:bc:06:9e:0b:ad:76:c5:5e:37:a0:9f:40:f4:
                    d1:d6:cc:da:0d:e1:ac:92:08:8a:6f:db:e7:37:90:
                    48:d7:9e:da:c1:58:f0:c3:6a:f5:ad:7f:43:82:c2:
                    c0:26:c1:74:d7:80:f3:a4:0f:d4:44:09:dd:da:94:
                    a3:ee:dd:d5:f7:67:83:1b:44:87:89:5e:26:e5:18:
                    55:0a:c9:de:24:40:91:da:a8:71:2b:ae:ef:7b:2c:
                    ff:5f:13:07:4e:6a:c4:7f:26:84:5f:77:d4:29:26:
                    9a:7c:29:a8:87:b7:b4:96:0f:30:e4:07:a6:72:03:
                    58:44:09:e8:55:69:aa:dc:c3:2d:ca:00:65:5f:52:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:AF:7F:3E:2F:D5:FA:89:3D:EE:2D:E2:CA:94:18:58:BF:8D:F1
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A190AB66D1011EFA13D6E2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:cb:fd:39:a5:54:a4:4a:63:1d:d3:e0:e3:e9:76:1a:cb:
         8b:c1:db:6c:8a:a1:c4:f7:b2:f2:3c:da:fd:a2:28:dc:ab:6c:
         a5:26:b9:ab:75:22:9c:76:d6:be:c9:88:76:6d:12:ec:d6:b8:
         75:0c:0f:36:74:2f:e0:13:69:20:55:3d:8e:dd:16:af:46:df:
         1f:0a:69:6f:db:5a:ad:ca:ea:55:03:b0:f4:bf:09:e0:44:49:
         62:bc:20:6b:49:cb:2a:a9:03:d4:1c:63:00:53:6d:cc:42:88:
         7e:21:77:73:4f:38:a4:52:ec:66:5b:9f:e1:16:e6:13:ec:89:
         45:40:1f:c8:c5:f9:db:48:ac:df:a8:60:1b:c7:d4:14:ac:c0:
         88:20:4f:cb:84:2f:0f:6a:f2:31:c7:d0:2d:bd:e0:2b:01:0d:
         8e:75:29:b8:8b:b9:46:c3:93:40:b4:08:27:68:16:25:1d:42:
         52:82:07:1c:99:a0:7a:2e:03:3a:bf:a8:21:13:9f:f1:a3:e5:
         73:85:31:e1:b0:52:4d:89:1d:d9:e4:7c:4f:a9:41:7a:1c:b8:
         da:aa:f1:d6:da:44:82:2f:de:1c:4a:eb:4b:fc:dd:5f:79:a9:
         c7:38:6a:91:02:40:79:2f:c5:d2:43:8e:67:4c:b1:2e:8f:9f:
         ad:b9:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:13 2026 by rpki-client