Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa
File:                     8342D87641AC11ECACD65E18C4F9AE02.roa (raw, json)
Hash identifier:          Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=
Subject key identifier:   01:80:CD:90:04:9E:FF:E7:FB:9C:A6:94:B2:89:C8:C1:48:9C:1E:A9
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       07DC
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:57:41 +0000
ROA not before:           Fri 16 Jan 2026 21:17:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     40676
IP address blocks:        103.160.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Jan 16 21:17:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a58945-bb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:0b:34:e9:eb:7c:bb:8c:82:4c:7d:a4:f5:
                    d5:0f:b9:cf:5a:62:75:9a:88:11:2e:4e:f1:73:17:
                    2d:e1:fe:0c:5c:13:bb:a0:9a:fe:44:62:83:cb:79:
                    17:b3:15:79:2e:6f:fb:ce:9d:e0:52:cd:17:35:82:
                    69:02:69:60:85:06:2e:1d:a3:aa:84:35:75:d2:67:
                    59:80:f7:69:59:c9:15:4e:08:60:05:4c:0c:30:3f:
                    46:d7:52:53:3a:af:4f:25:a8:85:93:e8:74:02:fc:
                    9c:e1:6e:22:02:7c:38:ed:c4:23:82:85:20:88:bf:
                    36:99:f6:81:64:c4:8c:66:a2:28:50:16:fa:a4:1d:
                    d8:87:17:c6:4c:fa:8d:17:cc:7b:99:68:b5:2c:9e:
                    67:66:9a:a2:ed:42:4f:0a:9e:ab:c6:ab:eb:b9:57:
                    11:9e:e6:5b:40:17:c8:b7:f8:23:3d:e3:81:7d:0c:
                    f5:09:25:34:3e:77:5f:c5:eb:5f:d4:a5:b3:37:bc:
                    57:0e:fd:c1:c6:78:d5:c7:fe:19:98:c9:df:f3:bc:
                    f3:d7:a6:77:8f:15:7f:70:d8:ca:04:2d:1b:28:d0:
                    0e:af:9b:d2:7f:4b:d3:08:ac:96:b3:62:64:ee:09:
                    fa:88:ce:51:54:40:4c:16:f7:4b:52:af:05:8a:69:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:CD:90:04:9E:FF:E7:FB:9C:A6:94:B2:89:C8:C1:48:9C:1E:A9
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:44:a6:98:d5:eb:31:7c:24:5c:af:fd:0c:45:f2:36:05:11:
         08:67:bb:e2:f6:9f:59:17:bf:f0:de:97:94:bd:1b:85:7f:0a:
         e4:64:84:32:f7:0c:b1:18:e9:01:05:68:0d:85:ee:fc:58:dc:
         b3:b0:4a:84:a2:13:4d:89:1f:ab:a5:46:81:9c:d5:d1:5d:5a:
         a8:b3:f8:06:30:48:7b:d0:3d:03:b9:66:a2:e0:91:6a:f6:9a:
         d3:2b:fe:be:12:8f:75:cb:fa:31:30:85:ef:2d:fc:3b:5f:13:
         f1:5a:11:6a:16:83:eb:25:64:2d:86:7b:20:85:15:e9:b3:d0:
         4f:c8:27:7c:a9:5e:25:a9:1d:1f:50:13:27:7d:13:f7:74:e0:
         99:f9:58:c3:1c:29:c7:af:a2:4c:30:36:3c:98:df:a4:30:67:
         fb:e8:a2:8d:97:9d:7f:b7:d9:0a:cb:10:08:bf:df:d9:6c:52:
         24:29:3a:63:d9:a7:f0:23:35:c8:53:10:92:8d:7d:d1:94:f1:
         87:e0:19:d5:ed:aa:38:58:c8:2a:9c:77:f3:ae:9b:77:71:db:
         3b:26:8b:b7:3c:4a:49:33:df:bd:aa:6a:c5:d1:dc:be:18:a9:
         57:90:7d:d6:2e:03:98:cf:b3:5a:a6:04:b4:1f:9e:72:8b:96:
         5a:f2:66:11
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy
NEVDMjRFOTIwHhcNMjYwMTE2MjExNzU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODk0NS1iYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn58LNOnrfLuMgkx9pPXVD7nPWmJ1mogRLk7xcxct4f4MXBO7oJr+RGKDy3kX
sxV5Lm/7zp3gUs0XNYJpAmlghQYuHaOqhDV10mdZgPdpWckVTghgBUwMMD9G11JT
Oq9PJaiFk+h0Avyc4W4iAnw47cQjgoUgiL82mfaBZMSMZqIoUBb6pB3YhxfGTPqN
F8x7mWi1LJ5nZpqi7UJPCp6rxqvruVcRnuZbQBfIt/gjPeOBfQz1CSU0Pndfxetf
1KWzN7xXDv3BxnjVx/4ZmMnf87zz16Z3jxV/cNjKBC0bKNAOr5vSf0vTCKyWs2Jk
7gn6iM5RVEBMFvdLUq8Fimkc7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAGAzZAE
nv/n+5ymlLKJyMFInB6pMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF
QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQxMjgvOTBERTlDNjYzRUEzMTFFQjhBQ0I5MDEzQzRGOUFFMDIvODM0MkQ4NzY0
MUFDMTFFQ0FDRDY1RTE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6BlMA0GCSqGSIb3DQEBCwUAA4IBAQByRKaY1esxfCRcr/0MRfI2
BREIZ7vi9p9ZF7/w3peUvRuFfwrkZIQy9wyxGOkBBWgNhe78WNyzsEqEohNNiR+r
pUaBnNXRXVqos/gGMEh70D0DuWai4JFq9prTK/6+Eo91y/oxMIXvLfw7XxPxWhFq
FoPrJWQthnsghRXps9BPyCd8qV4lqR0fUBMnfRP3dOCZ+VjDHCnHr6JMMDY8mN+k
MGf76KKNl51/t9kKyxAIv9/ZbFIkKTpj2afwIzXIUxCSjX3RlPGH4BnV7ao4WMgq
nHfzrpt3cds7Jou3PEpJM9+9qmrF0dy+GKlXkH3WLgOYz7NapgS0H55yi5Za8mYR
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:34 2026 by rpki-client