Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
File:                     2D8428C662F511ECA1FC5A6CC4F9AE02.roa (raw, json)
Hash identifier:          tWz/6xO64zB/1Qqhs2Ax95uvHFJIaUVINpHba9CIrQI=
Subject key identifier:   0D:6E:22:61:A0:B6:69:0E:2C:1A:B1:B3:3C:E9:89:F6:37:C4:93:22
Certificate issuer:       /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial:       04C2
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:20:27 +0000
ROA not before:           Wed 04 Feb 2026 23:20:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136511
IP address blocks:        103.178.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
                          rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
        Validity
            Not Before: Feb  4 23:20:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b2b-2aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:8b:7e:77:d8:5c:bb:59:b3:dc:89:28:80:
                    38:2c:1b:ed:09:4f:f7:52:54:f5:84:c3:b1:1b:89:
                    1d:52:06:4a:6a:27:fd:78:5d:7b:60:34:73:1b:e0:
                    e7:7c:b9:12:56:6c:93:ac:d7:96:a5:fc:4b:f6:30:
                    92:22:75:8f:2c:3b:28:68:d7:db:9e:5f:b8:b7:8d:
                    66:29:40:13:de:1c:81:34:5c:a1:b9:c5:ad:1e:96:
                    27:8c:53:74:6e:f2:d4:bd:74:00:2e:69:88:73:f3:
                    02:4e:d0:71:96:35:95:10:43:47:d9:9a:55:50:61:
                    4f:99:aa:40:a3:ab:9d:53:27:fa:39:50:61:cb:d1:
                    77:27:9b:f6:a2:ea:d9:9b:90:5c:b4:c3:45:5f:a6:
                    88:c9:bc:d4:ab:de:e5:77:4b:5e:33:d4:ca:44:49:
                    a3:51:68:02:36:35:9a:76:50:18:b3:a0:93:a9:c1:
                    56:f6:8d:b1:6f:f2:34:bc:35:db:be:5f:5d:90:19:
                    52:2f:61:02:cc:16:21:ce:f2:6c:11:b4:1d:5e:10:
                    66:aa:ed:d5:22:a3:a1:d3:e0:3c:9c:73:70:dd:f9:
                    60:cb:05:bd:6d:bd:d8:03:46:ef:12:dd:4e:b0:b9:
                    db:7e:50:f4:76:10:1d:81:4f:b2:e3:24:0e:c2:11:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:22:61:A0:B6:69:0E:2C:1A:B1:B3:3C:E9:89:F6:37:C4:93:22
            X509v3 Authority Key Identifier:
                keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:0f:0a:7f:aa:bc:db:f0:08:3b:d1:2d:d4:6e:f2:7f:8c:
         6c:3e:e3:01:f1:2b:47:ab:14:c6:77:47:91:23:ab:65:70:48:
         15:42:0b:68:ec:40:89:31:a3:91:91:70:70:14:2e:85:84:5b:
         93:d3:7d:ce:a6:a7:f8:e6:1e:56:8f:28:c0:8e:50:60:bf:3b:
         c4:0c:0b:05:77:3b:3d:9c:06:81:94:f8:11:0b:9b:9d:5d:25:
         b3:23:4e:c4:8f:ba:1c:40:9e:2a:62:f5:3b:73:3c:6b:e2:78:
         90:b6:fe:9b:de:47:1c:a5:7f:ae:37:3a:0f:30:28:b7:05:3e:
         9f:a5:9e:e2:79:5a:93:e8:13:98:f3:d8:a1:82:8f:0e:ef:20:
         28:db:04:06:ad:41:cf:42:f0:a5:bf:f8:8b:08:4b:5a:ef:f1:
         95:ea:5e:45:69:00:87:70:f2:ad:d4:45:98:09:b8:c8:6c:4f:
         6e:f1:74:d1:f1:c0:90:9b:8f:1e:90:f4:f2:e8:ca:86:9d:c7:
         70:a6:a7:23:1a:f8:67:ce:61:54:60:6f:59:ba:0c:86:1b:07:
         4e:5c:fa:c3:8b:61:cd:df:af:80:35:89:77:46:5d:46:2d:72:
         90:54:8b:0a:2d:f5:19:c2:0e:aa:71:db:5e:d9:03:23:70:a5:
         1b:96:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:09 2026 by rpki-client