Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa
File:                     D4D3B47EA27811EE9C29A256C4F9AE02.roa (raw, json)
Hash identifier:          UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=
Subject key identifier:   6F:E5:0E:43:32:35:64:8D:11:F3:D4:2C:2B:E4:89:D2:AA:A7:80:EF
Certificate issuer:       /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial:       020D
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:14:22 +0000
ROA not before:           Fri 23 Jan 2026 02:22:48 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139208
IP address blocks:        103.179.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
                          rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
        Validity
            Not Before: Jan 23 02:22:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4117e-264f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:14:c4:c0:95:ad:c8:ef:6f:e4:c1:4d:66:
                    a2:f6:73:c6:d2:b7:c2:e4:59:82:0c:cb:d8:76:b1:
                    3e:81:71:7d:64:08:7b:3b:9b:23:47:27:33:fa:4f:
                    e5:b7:7e:a6:92:b2:4e:1e:bc:83:18:70:29:cc:58:
                    b0:4b:d3:67:d1:22:c9:1f:7a:33:68:23:bf:28:2d:
                    2c:fc:20:0b:1b:14:45:61:97:5b:27:80:38:21:53:
                    e3:96:af:87:0b:7d:ab:80:67:23:20:f4:04:8f:66:
                    bc:26:0b:36:f6:a7:a1:31:24:df:fe:3c:59:7e:93:
                    cb:bb:52:95:b9:67:0b:dc:fc:e4:ef:e7:63:95:15:
                    b2:ac:6c:f5:15:b1:ed:e1:9b:31:76:52:03:1b:4f:
                    94:9a:a5:cd:e8:13:74:dd:45:c4:50:39:53:47:e1:
                    87:e8:b7:a5:45:3b:12:f8:b9:d5:3a:11:a9:63:ca:
                    14:21:ca:69:98:74:11:5d:67:bc:33:51:05:93:b1:
                    57:ac:44:de:9a:de:4c:29:27:b7:b8:0a:a1:39:f0:
                    a8:6a:ee:c1:bf:af:31:4f:e7:a2:92:8f:40:0c:e2:
                    ca:c3:7f:c9:f2:6e:f7:71:e1:62:7f:41:4b:0e:36:
                    63:5e:4f:cc:0e:a4:d6:30:ae:11:bb:46:79:53:69:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:0E:43:32:35:64:8D:11:F3:D4:2C:2B:E4:89:D2:AA:A7:80:EF
            X509v3 Authority Key Identifier:
                keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:43:7d:ee:32:aa:2c:ec:9a:1c:aa:75:ae:c0:49:8f:d0:83:
         f1:88:ef:5e:42:cc:e8:ba:f4:06:61:ef:81:e9:ae:bc:2a:d7:
         78:0e:4b:fd:a5:b3:1b:12:63:b9:aa:e3:bf:27:43:18:f2:81:
         2f:71:1f:a9:19:07:59:3d:bf:ff:a5:17:8e:eb:c9:f8:0e:16:
         0e:ff:e6:10:4d:8b:e1:86:55:7b:2b:63:df:74:4b:34:06:37:
         5d:c4:e9:17:7c:95:48:f9:89:74:e6:40:84:c7:47:59:03:a5:
         2e:34:b6:f8:34:4f:a6:16:c9:db:cc:7f:d8:de:2e:d4:8b:7a:
         e1:88:d3:79:7f:5f:75:81:6a:59:d7:0c:cc:1b:bc:6c:51:f5:
         70:99:88:d2:63:b8:31:cf:1b:b6:b1:ea:bd:37:90:6a:18:29:
         82:18:9e:c1:9f:b8:57:3a:bc:32:7c:fb:b4:ab:1c:7b:bb:a4:
         72:ec:52:1a:4d:2d:ae:a4:db:3b:da:20:73:6d:c5:8e:a3:02:
         20:ee:d0:3c:a0:ab:92:41:b8:8a:a1:76:d8:de:f7:c0:02:d3:
         fa:16:40:cf:aa:1e:bd:11:80:a1:6b:10:c8:5e:0e:72:26:76:
         b5:a0:fe:74:cd:87:91:06:5f:2b:1c:ab:43:be:a2:27:f2:6d:
         42:70:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:02 2026 by rpki-client