Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa
File:                     8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (raw, json)
Hash identifier:          nqt0HcD1EVYLOzTSMy3qSz9HYLHCtp2w+DxH+GzK3ds=
Subject key identifier:   66:C0:06:70:1E:04:67:64:1B:B6:EC:A1:3C:B0:E3:27:D9:4C:DC:64
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       0560
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:42:55 +0000
ROA not before:           Thu 21 Aug 2025 00:05:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55933
IP address blocks:        103.67.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Aug 21 00:05:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4344f-0a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:7b:77:22:73:15:74:01:5d:63:1f:df:bb:
                    d3:c5:ee:31:a8:d6:9f:d1:97:94:3f:94:21:11:35:
                    30:26:f8:4f:ea:1b:5f:be:33:bf:dc:b5:13:97:8f:
                    ad:de:fb:d6:48:f5:c1:a2:2d:71:0d:4c:96:81:cb:
                    1a:77:c0:b9:b0:21:28:66:97:90:1e:11:a5:70:19:
                    8b:1e:7a:84:0b:f7:04:3d:0e:2a:23:ea:10:b9:d1:
                    e6:9a:b7:d0:16:aa:87:52:29:50:74:b2:3e:3b:7e:
                    45:ea:d0:85:ae:44:90:2a:ae:c6:a3:c3:26:b4:ea:
                    73:d5:20:e3:5d:8b:50:0d:8e:bb:ca:4d:e4:71:48:
                    33:1f:87:76:52:32:c4:5e:e6:88:df:fb:59:a8:eb:
                    77:dc:6e:25:76:74:65:c7:fb:ab:d4:df:f7:2a:b4:
                    32:c4:e9:20:5b:93:15:76:d8:ae:7c:85:72:5f:eb:
                    6b:0c:84:a2:5a:81:fa:aa:ac:9e:fa:ac:7d:ac:ce:
                    f8:b9:5c:42:27:fe:bd:5a:69:d8:cd:09:a3:95:a1:
                    b7:de:6a:25:8e:5e:1f:73:08:23:cb:f3:d6:be:6c:
                    3d:8f:70:75:2c:80:67:fa:2f:69:5b:fa:b6:13:2e:
                    3d:05:93:3c:19:ca:5c:0b:cd:ed:ca:62:7c:bd:46:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:06:70:1E:04:67:64:1B:B6:EC:A1:3C:B0:E3:27:D9:4C:DC:64
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:95:92:e4:4a:26:60:9f:07:1d:94:f3:5a:93:3b:43:a5:e9:
         1d:b9:33:a9:d8:5e:1d:32:d7:14:92:d3:a3:a0:f9:ac:81:80:
         89:fa:ba:3d:f4:87:f7:73:f6:56:66:b7:79:34:b6:94:04:3a:
         e5:7d:87:ba:27:9f:16:88:4a:96:35:84:ec:63:8b:a1:c5:c4:
         c1:f1:a5:5c:87:66:05:c7:d4:41:9b:90:98:22:5d:6f:3e:dd:
         a0:3b:a9:73:c6:e5:5f:a0:84:79:4d:0d:96:fe:e2:d9:0d:e2:
         3b:f0:16:2b:5f:91:d3:0e:7c:74:6d:2a:0b:0f:97:61:bd:5a:
         00:04:01:e8:a2:b1:cd:cd:66:47:f3:44:d0:6a:03:89:9b:60:
         08:ae:d8:75:c1:64:6a:0c:75:5a:20:ed:5f:60:b1:6b:22:db:
         43:ee:b6:f2:3e:81:89:4b:c0:63:8c:b4:23:e1:95:a4:81:b8:
         78:a4:c2:7c:bc:08:e8:9d:4e:08:6e:40:5d:c4:e2:f6:83:b8:
         28:69:57:56:21:a8:93:60:08:d1:1c:5a:2a:f1:ce:57:87:09:
         5a:65:47:c6:3d:d5:a1:93:2f:cd:d9:08:54:ed:fd:d6:f9:93:
         c2:29:30:1f:fb:a9:f1:3f:c5:20:99:7a:ea:0f:bc:ea:be:02:
         df:f0:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:37 2026 by rpki-client