Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
File:                     66864FCE688011ECAA829E31C4F9AE02.roa (raw, json)
Hash identifier:          oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=
Subject key identifier:   F8:91:7A:29:B9:A1:20:49:0C:06:79:1D:85:43:35:9E:CA:70:25:14
Certificate issuer:       /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial:       04C0
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:08:32 +0000
ROA not before:           Tue 02 Dec 2025 22:57:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149307
IP address blocks:        103.178.96.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
                          rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
        Validity
            Not Before: Dec  2 22:57:47 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a51b50-e0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:11:0b:c0:1d:13:e9:76:bd:2f:5d:0c:4b:
                    ac:fe:27:36:3f:fd:48:08:d0:2e:18:f0:e0:0c:c4:
                    11:ca:92:fe:53:2b:01:68:f7:1a:b6:7f:9b:2b:04:
                    a1:d4:fb:79:a0:e6:54:81:2f:79:a6:fb:40:3b:04:
                    52:b8:e2:70:ee:db:57:b7:0b:45:1c:49:d7:29:65:
                    fe:4a:f4:68:32:1b:cd:54:11:63:6e:aa:85:72:64:
                    cf:ed:f2:a5:d2:c9:73:0c:03:38:cf:3e:73:b4:9b:
                    f5:a4:f1:3d:7e:16:99:11:f5:8a:df:0f:bf:f8:f8:
                    76:90:5e:12:7c:16:84:a6:e6:87:b1:07:f1:b1:c5:
                    62:08:ed:23:76:dd:d0:b5:32:f7:01:5e:62:ee:09:
                    0a:35:31:4f:66:3b:8f:2e:cf:5e:96:1c:c6:45:ab:
                    00:06:58:1d:22:eb:5c:83:ca:c2:2a:44:e3:89:33:
                    a6:51:9a:6e:88:5c:19:53:a3:2a:9c:c6:88:90:60:
                    04:61:99:97:aa:94:e8:62:a3:93:2f:8c:aa:3d:49:
                    71:9b:64:99:63:64:16:25:59:8f:23:c9:06:29:da:
                    67:c6:7b:38:0a:4c:e5:38:b5:53:52:9d:c8:f6:0b:
                    f1:de:bc:cf:24:82:55:f5:9d:43:cf:5a:d1:e3:94:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:91:7A:29:B9:A1:20:49:0C:06:79:1D:85:43:35:9E:CA:70:25:14
            X509v3 Authority Key Identifier:
                keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:4a:87:10:88:40:10:9c:96:d0:10:5d:7b:6d:2b:9f:23:
         59:3e:45:44:7b:bf:42:fe:80:40:c9:11:78:aa:bc:b5:af:1e:
         75:95:94:90:21:07:06:59:78:94:28:20:b7:8d:85:c9:c6:2d:
         e4:01:ec:8b:51:00:d6:64:37:07:ab:2a:5c:a7:10:21:fa:dc:
         4f:7e:14:2d:24:8b:73:5b:aa:d8:01:e4:f9:f2:b5:1a:8c:3e:
         98:18:5d:c7:e4:ff:89:b8:b7:33:65:4c:a5:0c:42:67:ea:d6:
         16:ea:39:61:14:d6:ef:28:88:cf:6f:f6:47:90:30:bb:e8:5f:
         a2:91:5a:e9:a0:a5:4a:82:3c:36:4f:ef:60:53:bc:b0:74:d0:
         55:9e:42:c4:be:dc:73:78:55:47:68:aa:1d:fc:69:20:85:43:
         79:e7:d2:f8:1d:48:53:ab:08:92:e3:32:08:29:96:77:12:4f:
         92:af:ba:a8:63:62:8b:dc:a4:3d:e0:1b:14:ba:8e:0a:1a:d4:
         76:4c:d7:4c:8f:4e:7c:fa:33:95:f0:fa:59:76:90:de:51:72:
         42:a8:15:b0:53:23:e2:07:e5:05:46:4c:09:bd:7d:55:5b:13:
         9d:c4:cb:f3:b8:65:12:08:65:89:53:47:2c:8f:42:30:82:ca:
         73:23:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:32 2026 by rpki-client