Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
File:                     FC73357271B811EEAEDED685C4F9AE02.roa (raw, json)
Hash identifier:          3eAYNT7Cuhts6vE6gSWxz2a69NQ+1+KIYGbfU4kLmFM=
Subject key identifier:   74:36:93:E5:92:87:E4:4E:63:2F:FC:E1:69:6A:B1:C0:E2:B8:65:3A
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       0263
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
Signing time:             Fri 25 Sep 2026 02:53:10 +0000
ROA not before:           Fri 25 Sep 2026 02:53:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     58955
IP address blocks:        103.216.158.0/23 maxlen: 23
                          103.216.158.0/24 maxlen: 24
                          103.216.159.0/24 maxlen: 24
                          2001:df2:d3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Sep 25 02:53:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5e216-03bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:27:32:72:d5:b8:3b:f9:d9:4e:4f:90:a1:
                    f2:79:97:a9:b3:ee:f8:e4:29:cd:2c:29:8f:35:d0:
                    7a:18:57:84:e1:da:8f:b6:ae:0f:29:e5:25:94:31:
                    12:37:0a:28:c8:a3:7f:c2:65:f8:56:36:2a:89:78:
                    87:5a:ca:dc:a8:98:3d:71:aa:26:37:1d:d5:38:9e:
                    1f:e3:03:01:97:44:27:47:8e:a4:28:07:5d:46:97:
                    03:af:47:a5:2d:1e:10:47:80:96:24:c1:e2:67:c0:
                    43:70:21:1f:da:89:c9:ca:37:8e:15:7a:75:7d:f7:
                    01:ac:a8:67:ee:fc:ad:30:c0:dd:5f:70:65:09:aa:
                    8f:ba:4a:46:98:b6:a3:5e:8a:09:e9:12:15:1a:41:
                    b0:76:3f:58:d4:a4:5e:1b:d8:3f:ff:05:75:a8:fb:
                    80:18:b5:18:4a:c5:64:d5:60:e2:8a:eb:de:5d:47:
                    fd:cb:5d:00:a5:4a:fe:90:17:b9:9d:03:2c:3e:1e:
                    bf:f1:ab:38:d5:b3:ff:fd:e7:55:59:e5:6b:f8:1c:
                    5b:c0:ab:d8:55:58:ef:f8:4f:99:3c:a2:f2:6f:ee:
                    21:d2:4d:a3:bf:80:95:ef:03:87:bb:ec:ae:79:8f:
                    91:37:d1:97:2f:23:ee:c3:ed:7d:6b:97:24:a9:bb:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:36:93:E5:92:87:E4:4E:63:2F:FC:E1:69:6A:B1:C0:E2:B8:65:3A
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.158.0/23
                IPv6:
                  2001:df2:d3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:bd:36:10:cc:dd:e5:e5:7c:36:8e:37:bb:ed:8e:56:2d:
         ff:cb:4d:48:7b:24:b6:34:1b:47:f6:27:4f:47:00:a8:c9:9e:
         62:5f:bf:59:e9:fe:81:82:80:83:ba:92:88:a0:97:a3:0d:3d:
         c8:86:12:36:70:b7:fa:f2:32:33:54:84:39:8e:a0:ed:1b:e3:
         d7:ed:7e:28:1a:a2:ce:d3:7d:40:09:7d:99:08:a0:37:a4:16:
         5d:e5:47:00:7f:76:9d:87:4b:ac:8d:66:21:d7:ae:ab:3f:49:
         2a:53:25:d4:2e:20:e7:87:ca:ae:73:b2:59:3c:6b:39:27:ab:
         0c:98:6d:ec:50:16:94:cf:45:51:24:d9:a1:30:60:9c:a8:77:
         9b:cc:7b:1a:22:33:69:5a:e1:03:f0:ec:74:73:49:ed:3f:7f:
         81:c5:e1:66:f6:ca:7d:d3:1c:9f:31:6d:a0:0a:64:50:89:af:
         50:64:bc:a3:f1:45:5f:a6:3f:86:3d:c6:f2:c2:96:e3:42:2b:
         aa:3b:8b:36:c2:b4:0e:e8:75:38:46:62:64:83:72:c6:d7:ac:
         d9:d4:cc:0b:02:e7:e5:a1:25:4f:0e:4b:9c:11:1f:ba:68:42:
         12:f9:3d:2a:d3:bc:4a:38:2f:75:be:ac:87:e3:71:fb:e9:06:
         43:3e:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:55:59 2026 by rpki-client