Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C0E909DA16FE11F18F088F02403D8C67.roa
File:                     C0E909DA16FE11F18F088F02403D8C67.roa (raw, json)
Hash identifier:          VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=
Subject key identifier:   A5:BF:43:F6:91:99:43:E6:A9:70:A3:3D:E1:AA:77:4C:6E:35:69:3C
Certificate issuer:       /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Certificate serial:       12
Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C0E909DA16FE11F18F088F02403D8C67.roa
Signing time:             Thu 19 Mar 2026 11:10:57 +0000
ROA not before:           Thu 19 Mar 2026 11:10:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     215748
IP address blocks:        103.227.164.0/23 maxlen: 23
                          103.227.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl
                          rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
        Validity
            Not Before: Mar 19 11:10:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69bbd9c1-a21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:49:1f:9c:46:8c:6f:3f:77:47:8b:6f:3b:
                    3d:cd:3e:72:1f:62:e1:5a:85:9d:85:ac:ba:e4:84:
                    69:e0:89:4d:ea:fd:3f:d1:9b:d1:a1:7c:6b:0b:84:
                    40:8d:fd:17:0a:29:2f:d4:6a:aa:4e:22:90:1e:24:
                    ea:3a:ef:22:af:43:da:c8:70:fe:a6:23:74:06:e7:
                    6b:9e:28:fe:f0:64:58:ad:5c:ea:a4:da:e4:a2:de:
                    f2:65:e4:f5:63:93:94:46:a2:45:54:78:0a:db:0a:
                    a5:26:c2:e9:72:74:32:00:70:07:19:7d:f6:4b:2d:
                    e3:64:7d:a6:f5:58:ee:d7:f9:f4:29:97:47:09:ba:
                    3e:ed:45:e8:7d:b9:76:0e:e6:99:f3:c1:de:3c:b9:
                    33:18:61:4f:99:2c:31:56:c8:4b:57:8d:57:9c:20:
                    52:b4:f5:8d:6e:5d:1a:01:ba:3b:30:3a:cc:5f:5c:
                    9e:20:e9:5c:2a:a9:8f:68:21:8d:e1:5b:b9:2c:c1:
                    5a:53:c1:22:d0:43:54:b3:16:dd:62:23:fd:f6:7f:
                    a5:4f:c1:61:45:d7:92:07:0f:86:82:07:d1:5f:5c:
                    b7:ac:06:da:d4:fd:af:dd:db:e7:b8:9d:6a:cd:6c:
                    20:3e:42:41:87:c5:a3:99:00:77:b5:34:d2:b4:cd:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:43:F6:91:99:43:E6:A9:70:A3:3D:E1:AA:77:4C:6E:35:69:3C
            X509v3 Authority Key Identifier:
                keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C0E909DA16FE11F18F088F02403D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:15:c3:a1:cf:61:b5:ad:5d:b3:35:5d:8f:8a:8b:00:3c:
         b8:22:92:c6:f9:6d:ce:11:c6:b1:81:a9:f3:00:62:c6:9d:d7:
         bb:53:e9:a2:75:71:cb:67:5e:e8:e0:51:85:e4:52:f5:03:18:
         ac:90:3f:8c:1e:8e:ab:2f:bf:b8:39:e8:30:e9:2d:fe:f0:de:
         79:4f:4c:31:02:3f:26:b7:4e:6a:a9:c9:48:65:5e:b7:0b:d9:
         ea:e5:83:1a:13:47:e4:07:3d:0f:40:e3:99:ff:ad:9d:f6:65:
         36:d2:f1:15:37:30:d6:17:1a:72:0d:8c:de:b5:8f:73:0f:85:
         1e:e9:f1:25:43:b0:62:03:9c:99:e3:e5:5d:46:4a:92:c6:07:
         ac:8f:6c:c9:db:e5:99:6d:85:10:da:aa:fe:d5:1b:e0:19:e2:
         a9:95:03:0e:fa:8a:83:1e:08:37:ed:59:c3:10:a7:a6:4e:45:
         fb:8e:c9:ef:24:11:95:dd:98:7c:22:f6:15:e3:8f:ac:bb:f0:
         93:59:b2:31:ba:e7:e4:51:2b:8e:d1:b2:85:9a:2b:ac:55:5b:
         68:93:35:6a:d6:56:48:b7:b7:a1:d9:e7:07:9e:86:00:d4:77:
         8c:e5:1d:02:f0:8a:12:dd:76:00:fa:7e:b6:d1:ba:db:1f:3a:
         5b:8b:df:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:43 2026 by rpki-client