Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa
File:                     A2AF0622853711EFA09C892EC4F9AE02.roa (raw, json)
Hash identifier:          OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=
Subject key identifier:   E8:12:22:BA:D3:A7:FB:8B:08:84:44:69:79:8B:05:7C:89:2B:AA:41
Certificate issuer:       /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial:       0B77
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:30:30 +0000
ROA not before:           Tue 04 Nov 2025 19:38:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        103.143.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
                          rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2935 (0xb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
        Validity
            Not Before: Nov  4 19:38:28 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a469a5-d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:9d:f3:6c:fd:40:08:df:4f:7b:30:aa:03:
                    63:c9:2b:c8:f8:da:ee:f9:b6:10:b7:b2:84:40:41:
                    3c:f1:7d:60:59:83:a6:98:82:55:c2:62:63:ee:c6:
                    71:31:1b:d4:16:e4:26:21:97:51:e2:1f:e2:5e:d6:
                    5b:77:3a:5c:0c:f6:c0:c4:fa:13:d6:f4:02:1a:40:
                    4f:b2:e4:a7:98:04:a2:cd:6e:ce:90:f8:46:31:8f:
                    88:77:d9:ec:1b:cf:6a:de:eb:b3:a3:2c:fa:cd:e2:
                    1e:2e:2c:50:19:61:f5:85:91:28:d2:b3:a8:ba:c3:
                    14:0c:79:bc:ba:e1:3e:cb:d1:7a:42:49:bf:8f:e7:
                    6c:1f:f7:a1:58:3a:7b:1f:74:da:51:ac:fc:45:dc:
                    5c:b3:23:a3:43:f9:67:95:f7:74:41:df:35:5b:e3:
                    ee:17:e7:43:de:94:e1:cd:64:18:c7:97:7e:47:9c:
                    50:1c:d9:17:29:50:1c:3f:10:28:a7:3d:25:f7:59:
                    9e:e3:ce:92:9a:64:0d:01:ba:b8:25:2d:9e:5d:35:
                    50:42:43:d8:13:60:fe:aa:e5:da:1f:ea:1b:d9:bd:
                    73:b7:19:26:5e:48:d9:17:59:ed:a2:36:00:4d:13:
                    1c:bf:e3:21:65:9a:8f:42:a4:93:43:6c:9f:d9:05:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:22:BA:D3:A7:FB:8B:08:84:44:69:79:8B:05:7C:89:2B:AA:41
            X509v3 Authority Key Identifier:
                keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:86:72:00:c7:cf:33:59:42:e0:3a:dd:c7:18:91:01:28:
         5a:91:3a:ef:1c:56:a1:eb:79:40:56:1e:27:a3:74:d7:42:6c:
         f0:29:d7:22:b2:70:1e:76:ab:98:e2:00:87:f4:51:27:9f:2a:
         d1:7f:b9:ff:13:f0:0d:d1:a9:02:ac:72:38:a7:5d:fa:c5:a5:
         ac:47:3f:e2:b9:8c:1b:0a:4b:e8:4b:2f:d2:a3:8e:34:c0:b1:
         ec:f8:84:a8:0e:95:db:69:c7:79:d9:3a:ef:52:8b:f2:a4:42:
         98:ea:0c:00:60:b8:70:6b:35:6c:23:27:72:81:da:d5:0d:cf:
         37:b5:b9:b6:1e:2b:5f:92:af:f8:ac:94:fe:ec:a5:3d:d7:ff:
         0f:ec:a9:d5:fc:dd:8f:7c:83:33:ca:b8:a2:a2:ee:d9:bb:99:
         4c:d4:3c:fb:a5:03:a3:34:16:d2:41:2c:bd:a6:21:3d:25:7c:
         d7:0c:cf:d3:43:e0:4f:05:43:98:44:f1:a7:f2:82:53:fe:10:
         60:2a:f5:74:f9:dd:94:d4:9c:2a:6d:2c:68:6a:4e:7b:be:7c:
         44:89:15:bd:56:99:15:2c:3a:38:1c:f6:08:36:31:00:c9:b4:
         1d:8d:b3:c6:97:14:47:7b:59:1a:3b:65:ef:a6:0f:8b:02:4b:
         13:5c:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:52 2026 by rpki-client