Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
File:                     BF811486DC1E11EBB2C72F52C4F9AE02.roa (raw, json)
Hash identifier:          3RyEfrC1/+oLdtWYjCCiGJj81mtXCEJfqPIsFdcM1I0=
Subject key identifier:   9C:2D:FE:CD:6E:29:19:96:76:00:AD:C3:D4:B0:40:B0:57:D8:A4:60
Certificate issuer:       /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial:       0638
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
Signing time:             Tue 12 May 2026 23:27:53 +0000
ROA not before:           Tue 12 May 2026 23:27:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142136
IP address blocks:        103.166.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
                          rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
        Validity
            Not Before: May 12 23:27:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a03b778-c632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:fa:dd:f0:21:9d:10:13:91:4f:f1:60:b6:
                    cb:35:69:51:e8:2f:39:7e:b7:51:de:d9:dc:1c:73:
                    31:cd:12:d8:f7:20:c4:99:dd:75:7d:73:95:e4:09:
                    8b:24:cc:29:4b:c7:ce:5b:60:dc:0c:c7:b9:8e:30:
                    1d:3e:e7:26:cf:25:3c:16:fb:83:b5:c7:8d:fa:fc:
                    ba:ee:b2:ed:a5:76:ac:ff:76:fd:dc:aa:e4:a1:63:
                    9b:52:39:01:da:5d:d3:7b:d3:87:57:4b:ca:91:fe:
                    1b:8d:76:39:a1:02:39:cb:b1:b1:9f:72:6b:8f:15:
                    bd:67:8b:09:68:6b:7c:b0:73:53:97:31:b8:3e:ae:
                    ad:2b:c6:9b:67:6e:93:97:b0:77:47:87:86:55:67:
                    06:30:6d:03:89:e5:11:f0:ec:92:f1:b9:c3:ed:06:
                    48:7a:e3:0c:73:0d:95:aa:02:2e:0d:c0:4e:e3:73:
                    6a:3e:ab:e2:0e:02:a4:98:81:03:39:13:9f:3b:f8:
                    c4:e6:eb:35:66:ce:f7:2e:1e:74:cb:21:9c:7d:ca:
                    ec:22:32:3f:75:cd:0c:18:9e:5e:f7:ca:1f:75:45:
                    d5:65:53:07:7e:ee:45:9d:1a:cc:70:36:59:bf:29:
                    33:89:62:cf:ea:a6:6a:fa:c2:b6:3d:b1:ba:2e:9b:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:FE:CD:6E:29:19:96:76:00:AD:C3:D4:B0:40:B0:57:D8:A4:60
            X509v3 Authority Key Identifier:
                keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:f6:d1:1d:c6:e6:1f:30:96:45:c7:a7:81:26:a2:05:15:c4:
         bc:d9:9e:4d:ba:23:cd:e1:8c:ad:d7:e9:87:6a:0a:02:40:83:
         45:77:23:b4:46:56:c4:56:c6:88:c9:88:42:ec:01:2c:3e:f8:
         5b:ae:9b:6e:77:c5:b7:d0:cc:b1:31:8f:24:85:c9:1c:76:6b:
         11:70:5c:6b:fd:7e:85:06:be:65:ea:3f:89:1c:ad:8b:5f:da:
         b6:dc:04:95:56:bc:2c:40:48:05:cb:e1:a7:64:73:a4:1a:4f:
         98:28:ca:d0:1d:66:58:3e:36:8d:59:65:ae:e0:3c:8c:2c:57:
         ab:3f:50:98:a2:c5:fd:4d:4e:90:6a:d9:6c:fe:98:41:96:1d:
         d6:c6:35:a2:03:ac:72:0b:3a:2b:e2:bf:13:01:f6:4f:60:55:
         ab:45:89:91:7a:f0:c6:97:2b:67:9a:ad:0d:e5:17:d8:b4:b5:
         59:b1:80:44:cb:4b:23:b3:93:e0:d7:2d:0f:82:a3:b3:1a:be:
         4b:fa:5e:b5:af:24:b7:23:57:25:a3:e6:83:d0:e7:ed:e0:bd:
         2d:36:6b:d4:3c:6b:db:31:59:91:eb:d3:f6:b8:94:ff:f0:48:
         96:bd:c2:de:2c:be:71:b6:a7:24:8e:a6:36:23:0c:87:87:41:
         44:f7:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:45 2026 by rpki-client