Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa
File:                     76F5B630701311EB9C85DF1FC4F9AE02.roa (raw, json)
Hash identifier:          naUTdPx2hWErxJkYpY1OleALKvTnovAGDRuMLpDEDq0=
Subject key identifier:   52:72:CB:3F:4C:C4:34:8B:DD:39:7B:76:C2:E3:3B:3D:85:F4:7A:BF
Certificate issuer:       /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Certificate serial:       0726
Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:52 +0000
ROA not before:           Wed 28 Jan 2026 21:18:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141707
IP address blocks:        103.162.110.0/23 maxlen: 23
                          103.162.110.0/24 maxlen: 24
                          103.162.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
                          rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
        Validity
            Not Before: Jan 28 21:18:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44964-e894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:36:53:e4:e0:91:a0:12:ac:01:fd:20:ea:
                    65:74:94:31:5e:f6:a6:d3:6c:2c:48:8e:d4:6f:82:
                    aa:2c:80:6a:65:d8:4f:fa:cc:13:d4:d0:bf:3a:3b:
                    7d:e5:9c:08:8f:0b:7a:3f:93:2b:cb:96:89:3e:75:
                    97:b9:af:12:ac:dc:a6:99:66:e5:d1:f6:f1:af:23:
                    84:80:d8:02:f1:bd:48:ed:90:45:5b:3e:bb:72:95:
                    d2:1c:fb:e0:f8:49:8c:1b:ad:35:38:78:04:90:46:
                    0d:a3:a4:c7:62:5a:c3:86:9c:ba:e4:f8:3a:b6:6b:
                    80:11:93:10:a1:aa:e4:01:df:b4:16:7a:8c:47:44:
                    e3:91:71:c2:79:0a:5c:ad:13:f2:68:de:9b:59:db:
                    5c:1d:3c:ec:56:de:43:ba:61:90:b3:e3:97:84:e4:
                    d8:28:12:31:71:ed:4e:31:01:e1:f3:a3:76:39:6e:
                    b6:f1:65:e5:91:3f:c5:7e:f0:70:0f:be:39:6c:a1:
                    41:2a:d2:2f:0f:35:05:f4:86:c2:dd:11:e4:9e:f8:
                    dd:c1:ad:bc:7a:b6:03:db:14:aa:02:c6:b3:e6:de:
                    12:03:06:18:6a:d4:01:2a:b0:e2:87:ca:6c:3d:1f:
                    f1:3e:4d:10:05:45:55:8f:df:70:c1:b1:6c:30:85:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:CB:3F:4C:C4:34:8B:DD:39:7B:76:C2:E3:3B:3D:85:F4:7A:BF
            X509v3 Authority Key Identifier:
                keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/76F5B630701311EB9C85DF1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:74:f2:9f:b3:9e:da:e4:10:18:f3:1e:9d:bd:4b:ab:19:0f:
         77:56:d1:39:80:09:f8:9f:dc:35:48:0d:6e:be:33:73:c1:3e:
         1f:47:00:0c:02:fa:bb:76:ed:85:e3:06:20:04:22:12:74:16:
         31:3e:1e:24:3e:65:63:7f:93:7c:93:74:df:39:ac:9e:74:3c:
         6f:85:1f:92:3e:c3:6c:a4:c8:ee:fa:b3:d5:a3:94:b5:f9:a1:
         f4:6e:68:03:82:8c:94:4b:99:66:0d:dc:95:22:0d:58:93:e8:
         0b:7d:4e:0b:60:be:8b:5d:e1:89:30:f3:f2:5a:4f:72:6b:2f:
         53:fe:c0:b1:18:f1:65:60:d5:c0:68:78:0b:07:7f:29:f8:16:
         6e:57:84:3a:0d:67:1a:d2:15:b5:4a:7e:bc:0b:6e:2a:09:d3:
         16:0a:15:c0:47:6d:35:98:08:54:2d:15:68:57:5f:92:5d:ea:
         ab:dc:0f:73:76:a4:e0:15:f1:fb:98:8a:e9:a7:7a:48:f8:ea:
         77:22:80:69:6c:b3:8b:34:7c:48:9b:65:34:0f:01:c2:78:64:
         59:8b:9a:d9:76:cb:82:1f:86:94:bc:02:96:cd:ca:72:a6:f1:
         81:28:9e:4b:57:60:fe:3d:7b:fa:ba:ed:9b:3e:bc:cd:37:3f:
         00:06:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:57 2026 by rpki-client