Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa
File:                     16105334922D11F087917886C4F9AE02.roa (raw, json)
Hash identifier:          rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=
Subject key identifier:   F4:10:F4:42:31:99:CE:81:C1:1E:EA:7B:84:A3:1D:25:F8:38:2B:4F
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       EB
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa
Signing time:             Tue 05 May 2026 06:39:31 +0000
ROA not before:           Tue 05 May 2026 06:39:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        163.223.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: May  5 06:39:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f990a2-21f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:03:9c:8e:e6:6f:c8:2e:f2:6d:38:e7:c3:
                    64:92:9e:5d:1e:2f:a5:b0:1a:6b:91:e0:d8:7f:83:
                    78:a1:00:b9:ad:2c:a4:41:ac:33:24:80:49:6c:a1:
                    a2:f1:1a:77:8f:2f:1e:99:91:f1:04:fb:aa:b8:a1:
                    31:89:a4:e5:1c:16:fd:76:e9:ed:10:e0:62:45:ec:
                    df:4a:d6:b1:ce:4b:a3:78:5f:ff:86:a6:84:84:a3:
                    ff:11:6a:94:1d:82:65:28:c4:39:ef:b2:61:25:6c:
                    08:73:ec:bd:af:86:a3:eb:15:24:4e:66:b8:eb:45:
                    16:7c:a4:42:c4:4e:94:15:8e:7f:9f:a4:dc:13:92:
                    67:34:b3:72:c5:79:41:a4:91:48:0b:29:26:dd:bb:
                    e6:45:c3:35:93:19:8e:ac:66:50:9f:36:b4:97:44:
                    e8:86:54:b9:fa:d3:40:01:d1:05:94:18:2e:f8:ac:
                    2a:34:80:43:88:9c:e8:29:d9:94:38:72:ef:6a:88:
                    8c:01:20:5d:be:65:9d:64:06:ae:eb:78:06:06:b8:
                    b8:84:a5:ca:dd:ff:d1:2c:ca:12:a0:cc:d8:16:d4:
                    3e:5d:53:a0:07:5d:bb:e0:69:74:a4:f7:cc:4c:2b:
                    8c:90:97:c3:3f:82:d6:00:e6:2a:24:be:c1:7b:9f:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:F4:42:31:99:CE:81:C1:1E:EA:7B:84:A3:1D:25:F8:38:2B:4F
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:97:24:bc:49:f5:6f:77:0d:d7:44:a1:50:52:de:2f:5f:52:
         f4:b6:08:f9:38:b2:cf:cf:97:bc:cf:4d:1b:7b:69:64:96:ad:
         b3:36:4e:93:db:ed:ee:de:28:48:f8:6c:ed:e2:fd:60:be:3a:
         eb:60:f9:a6:ef:c7:4a:3d:f4:59:02:6d:a8:6f:17:ed:f8:c2:
         c4:c1:ff:16:c7:9a:46:f1:c4:49:ed:49:a0:9e:31:76:38:38:
         ed:50:c7:36:23:6e:25:2e:83:12:7e:07:d2:6a:84:1e:85:46:
         da:f0:dc:2c:b1:d0:04:04:42:08:28:d5:7b:c8:4a:5a:eb:8b:
         d9:b5:c5:44:73:d4:55:38:ac:96:d1:0c:5c:11:39:24:7d:8f:
         a7:88:9c:30:67:7d:85:ab:e1:b8:5e:b7:58:32:35:14:7f:29:
         8b:62:a4:15:31:4b:94:c3:79:6f:72:56:b0:a0:4d:5f:32:50:
         be:05:e4:69:3f:0a:2a:47:ec:5d:e4:64:01:26:9d:7f:09:61:
         9b:f2:75:8c:54:29:bd:ab:ec:07:8b:f4:e7:e7:69:f3:1b:97:
         ac:d9:77:9a:21:20:1d:92:86:bc:e9:9b:50:3c:bd:4e:eb:3f:
         2b:7f:fd:1e:2f:30:6f:6b:2e:ef:63:37:cd:b9:7c:73:71:ad:
         28:d9:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:47 2026 by rpki-client