Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa
File:                     C8899170FB7211F08F8762E74F6F56BC.roa (raw, json)
Hash identifier:          ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=
Subject key identifier:   82:24:0D:5E:90:11:9C:FF:AA:75:B9:80:63:DE:0F:2F:41:85:F1:60
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       0439
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa
Signing time:             Sun 01 Mar 2026 17:06:25 +0000
ROA not before:           Tue 03 Feb 2026 00:20:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        103.178.6.0/23 maxlen: 23
                          103.178.6.0/24 maxlen: 24
                          103.178.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Feb  3 00:20:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47211-e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:84:26:c2:ff:40:a4:5f:54:1d:7a:fe:79:
                    3f:c4:79:16:9e:0b:dc:84:2f:b6:4f:e9:87:69:49:
                    e4:43:a4:f3:e9:69:7a:35:2f:7b:a5:4c:0d:b0:79:
                    74:dd:36:01:33:81:3c:8f:5c:b0:a4:53:b9:1e:d7:
                    b7:8b:d6:2e:bf:6d:06:1d:60:36:86:81:95:59:62:
                    e6:0b:0f:ed:7c:3f:1d:e8:d7:d0:ec:f0:34:b0:ba:
                    85:5f:a0:b8:48:5d:28:9e:0a:a2:b8:29:8e:8b:06:
                    6a:80:c4:a5:96:00:2b:e8:b4:99:c6:06:c8:cb:f8:
                    e8:1d:b4:07:07:80:c4:a6:02:14:1d:24:0c:fe:36:
                    50:41:10:c8:56:d9:58:19:91:20:19:92:7a:38:c9:
                    c3:d4:70:1b:15:c2:83:d8:61:4f:24:56:ae:37:f4:
                    6e:3a:21:c6:0b:19:11:f5:4e:eb:71:99:c3:c7:19:
                    d9:e4:57:d2:13:de:3d:87:2d:35:37:78:df:fd:ad:
                    0f:ce:b1:6b:bc:fa:89:0d:e7:53:c7:f2:49:ad:8d:
                    be:a7:5a:bc:28:ba:31:6b:5a:e0:2a:23:4b:5b:33:
                    43:37:b6:e3:af:bf:2c:8a:d6:af:d7:5e:ca:64:e0:
                    a3:93:73:e6:ca:ed:96:47:fe:01:1d:16:8d:5f:5b:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:0D:5E:90:11:9C:FF:AA:75:B9:80:63:DE:0F:2F:41:85:F1:60
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:23:ca:b5:02:ac:8f:e2:2e:57:40:4c:c9:a0:93:92:bc:58:
         4e:ec:b2:ef:71:f1:97:46:42:0b:f5:6f:b5:28:19:e8:91:e2:
         01:77:d7:21:01:22:4a:fe:8b:9d:bd:b1:4f:3b:86:b6:7d:11:
         1b:87:7a:e1:b5:f7:60:71:14:8e:fb:e7:3d:c2:63:ed:10:26:
         e7:32:1a:f1:8b:83:c9:15:e0:71:c9:30:98:e8:75:12:c5:ed:
         af:ca:e2:fa:4c:43:9f:6c:a3:52:e9:c3:6f:0f:a5:e2:4f:b4:
         15:f0:25:cc:b5:45:6d:5c:7a:45:62:85:d7:57:1a:e9:be:43:
         f9:02:77:68:be:86:f2:e2:f6:24:ec:fa:de:17:f7:ae:5a:e4:
         26:6c:16:ad:58:fb:3e:71:f7:dc:b8:58:bc:2f:ff:e0:2f:4f:
         cd:60:68:67:40:8d:b6:90:e5:e1:f5:56:aa:0b:8c:d1:59:83:
         f1:fe:71:49:2e:6e:d4:2c:6e:bb:84:33:1f:5c:61:30:f5:4c:
         43:15:4c:0a:e3:09:74:44:9b:28:7f:64:3f:dd:fc:4e:7c:8a:
         ff:c0:80:2c:a2:c9:51:d0:58:c6:3f:99:fc:12:9b:7b:d3:1b:
         09:aa:a2:9b:ff:16:a8:d5:e6:f7:f1:2b:ec:0e:27:b2:88:86:
         2d:31:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:50:48 2026 by rpki-client