Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa
File:                     969AE080A14211EC8C49D660C4F9AE02.roa (raw, json)
Hash identifier:          btT7lb3t4WSsKXv6kffudUgwc+vUjVoR2tzuvf0VOIE=
Subject key identifier:   36:54:B3:42:08:0F:E0:B1:D1:5E:3D:F3:61:1E:4E:31:EB:FD:B6:7F
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       0490
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:38:56 +0000
ROA not before:           Sun 01 Mar 2026 01:21:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149419
IP address blocks:        103.178.216.0/23 maxlen: 23
                          103.178.216.0/24 maxlen: 24
                          103.178.217.0/24 maxlen: 24
                          2001:df0:4440::/48 maxlen: 48
                          2402:3720::/33 maxlen: 33
                          2402:3720:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Mar  1 01:21:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46b9f-6abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:db:6e:7a:d5:eb:1d:e9:0c:6e:19:cf:8f:
                    e8:cc:be:eb:a9:10:d0:2f:34:9d:84:cd:f3:9d:14:
                    69:7c:f5:f8:41:6a:b1:04:eb:56:b2:59:fe:45:92:
                    dc:f8:68:94:90:36:4b:c4:0f:a1:33:d4:c3:76:63:
                    a7:68:43:98:fc:b3:73:e6:17:18:24:6e:05:6e:cd:
                    80:e6:aa:ab:6f:37:e5:b5:69:d0:56:c1:be:b5:03:
                    f1:a6:67:2d:51:fe:1f:e6:f7:7c:d0:92:e6:25:e8:
                    d2:3e:d5:59:70:44:2c:f6:19:06:63:3e:dc:c6:f4:
                    ac:01:2f:a6:7a:bf:f0:58:94:ee:4d:be:fc:ec:fd:
                    4f:33:0d:d9:e3:c0:ce:54:74:3b:a5:c0:ab:e6:65:
                    02:f9:7b:45:0d:14:4d:92:49:28:d8:32:da:ec:c1:
                    a1:94:e4:a3:ac:f5:d7:86:16:f0:ae:8b:d1:5c:24:
                    f9:42:45:54:f8:db:b6:13:99:74:78:9d:a1:e2:49:
                    32:fd:20:6f:3f:33:83:d3:ea:ed:6d:58:16:01:82:
                    b4:ce:dc:a6:18:d1:c8:d9:b0:6e:3f:33:81:12:3d:
                    21:01:97:05:36:4d:eb:15:8c:2e:71:b4:b4:b0:0d:
                    95:ff:c9:fa:bc:b6:fd:d7:78:16:6f:36:73:ca:99:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:B3:42:08:0F:E0:B1:D1:5E:3D:F3:61:1E:4E:31:EB:FD:B6:7F
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.216.0/23
                IPv6:
                  2001:df0:4440::/48
                  2402:3720::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:63:bb:05:fc:52:bf:4a:e1:b4:ae:da:37:27:8f:73:f6:0a:
         bf:4a:b5:21:f0:7d:6a:32:d0:54:4b:98:ad:1b:32:b6:16:11:
         ec:a2:ba:08:6a:e7:ee:50:01:49:47:39:24:78:82:67:d5:99:
         66:af:fb:33:3f:b7:57:80:3d:ee:ad:7d:c0:a9:96:0f:31:91:
         19:63:99:3d:f3:7a:30:ce:2c:53:bb:4e:c0:8b:09:91:63:ed:
         33:0b:78:1d:ce:cb:8b:e0:7b:da:3c:d8:5a:36:c0:d1:19:e4:
         b3:92:1c:1a:d8:e9:64:c7:ac:2f:64:00:47:46:eb:60:5e:0a:
         9c:b1:9f:c2:a4:ab:a4:35:20:a5:a5:9f:ef:1e:3f:2b:f2:04:
         e0:0f:eb:47:f8:4b:f6:f5:b1:bf:7e:a8:7c:35:bf:e3:5b:ae:
         e3:a1:82:6b:0f:af:b2:c9:6a:b9:0a:03:fe:8e:47:8c:cb:2e:
         15:2d:4f:60:d9:97:ba:9b:79:00:08:be:7d:ec:7f:09:ab:12:
         69:8c:a1:8a:7f:36:b6:9e:f7:39:fd:3d:b6:d2:47:20:8d:ba:
         ec:cc:71:8d:d8:64:0e:36:a0:80:02:c2:3e:00:b5:eb:3b:f5:
         f9:31:12:d5:7a:b6:18:c1:18:d3:89:d3:d9:93:3e:27:f4:8a:
         7a:88:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:13 2026 by rpki-client