Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa
File:                     A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (raw, json)
Hash identifier:          YSudnO+gxDW3KLQoZtaYLWQrz8EP6UlH+aQ5JWb2Q0g=
Subject key identifier:   5E:19:2B:C4:B8:99:00:33:F4:2F:A4:6C:F3:A7:49:AE:DB:41:D0:48
Certificate issuer:       /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial:       1F81
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:24:07 +0000
ROA not before:           Wed 31 Dec 2025 16:13:23 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     132089
IP address blocks:        103.70.78.0/24 maxlen: 24
                          103.70.78.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
                          rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8065 (0x1f81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
        Validity
            Not Before: Dec 31 16:13:23 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a46827-525a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:88:2b:ff:25:4b:0c:77:fc:3f:76:20:47:
                    36:68:5b:5b:5a:44:f7:d9:d4:9c:a4:97:81:d0:e2:
                    18:4c:e6:03:64:93:03:bf:b1:6e:74:e2:d3:04:14:
                    71:b2:f7:df:b8:7e:29:49:d7:bb:40:98:7d:b1:01:
                    f2:eb:33:b3:98:6b:90:94:7e:07:b3:ee:05:58:cd:
                    49:55:67:32:4a:22:e7:8d:9d:c1:96:0d:17:0e:38:
                    dc:71:13:f4:6e:e1:9c:f7:1f:8e:12:05:a4:58:95:
                    cc:1a:4b:b0:02:9e:37:33:6e:d0:8d:f3:a1:f3:16:
                    4d:d0:46:89:cb:92:a6:5c:ab:16:41:66:ad:c7:56:
                    e6:5a:9b:16:94:fb:8e:47:2d:12:cd:aa:05:7c:53:
                    02:58:d0:29:78:53:c6:94:09:85:ee:26:95:b0:f2:
                    53:d7:b5:5c:c0:aa:42:ae:2c:ed:48:bd:ea:f9:cc:
                    58:4b:23:20:13:25:1b:8c:28:9d:65:e6:de:40:48:
                    13:a9:9a:4f:0c:18:45:6d:3f:7a:56:b9:a7:66:be:
                    45:b3:63:ba:83:4a:97:44:69:c6:ae:70:75:05:bd:
                    21:bc:b9:b1:53:b8:72:21:39:9f:b3:2d:a6:e4:88:
                    a2:07:38:55:6a:ab:e4:0b:41:da:55:9d:a0:e4:26:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:2B:C4:B8:99:00:33:F4:2F:A4:6C:F3:A7:49:AE:DB:41:D0:48
            X509v3 Authority Key Identifier:
                keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:04:06:96:2a:75:69:9b:0d:27:2a:fe:ce:87:01:88:01:c7:
         4a:62:57:17:f2:03:46:6c:79:e4:48:a3:ff:2c:c1:fc:40:3d:
         0e:ab:67:82:e3:cf:5f:57:48:bf:dd:90:9c:76:e5:4a:b6:4c:
         d5:f6:23:ce:cf:c6:10:99:da:c5:77:fd:87:f8:0c:b9:e1:99:
         b0:03:57:38:6a:ce:64:15:44:89:f8:66:63:42:e5:56:6f:4f:
         e9:f6:6b:29:79:28:4b:03:ac:32:30:18:e3:50:57:b0:bd:5d:
         f6:63:b0:a1:7f:e6:17:5e:a7:ba:44:4d:33:9d:16:cc:77:8a:
         da:06:ac:5e:59:aa:13:2a:8a:8e:78:11:df:64:cb:6a:e0:cf:
         c3:92:09:16:33:83:9b:4d:6f:98:a9:1f:2f:06:97:48:11:99:
         0a:41:07:6d:26:45:44:03:be:0e:cf:76:60:e2:ef:94:ea:38:
         ac:cb:bb:99:39:e5:81:63:70:a2:98:84:52:b5:19:52:c6:00:
         a8:bb:ed:32:99:ae:23:fb:9c:4b:d6:28:83:e5:0e:5f:65:5a:
         06:f7:36:dd:e4:65:4d:83:dc:fb:4e:7c:d3:52:40:9c:16:07:
         c3:e5:35:bc:ca:f9:5b:dd:78:80:55:d0:ed:92:c7:0b:99:44:
         dc:7a:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:32 2026 by rpki-client