Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
File:                     92C0558C1A3B11EC91C03279C4F9AE02.roa (raw, json)
Hash identifier:          O7zzjDBWEUSYqll/hl0eb8ojldYcS/JklLQk1YXiDkE=
Subject key identifier:   79:C3:28:20:BC:FF:E9:F6:19:E1:5F:D1:D9:92:9F:AF:7F:69:3A:51
Certificate issuer:       /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial:       057D
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:41:59 +0000
ROA not before:           Thu 30 Oct 2025 23:44:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147039
IP address blocks:        103.173.79.0/24 maxlen: 24
                          2001:df7:9980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
                          rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393
        Validity
            Not Before: Oct 30 23:44:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43417-ecc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:70:70:6a:35:7b:20:07:2c:0c:ef:e4:c7:
                    12:8e:b0:3d:d5:df:96:78:17:73:48:70:3f:0e:d5:
                    01:69:f9:6f:0a:e7:b6:14:ab:c3:aa:98:5c:b3:30:
                    fe:2f:53:b6:c2:58:02:73:6d:5c:77:45:92:af:61:
                    02:c5:9d:30:82:f3:af:f5:5f:05:36:1b:5f:7e:f1:
                    25:bb:c5:1b:e1:c9:d4:57:07:f8:50:e7:07:6b:76:
                    1b:90:bf:a5:ce:da:7e:64:9a:a6:07:8c:08:0e:57:
                    3c:5f:eb:e7:3a:4b:be:af:67:7b:84:69:bd:07:a8:
                    a6:c5:86:05:a9:84:e8:4e:c4:63:b3:ff:70:93:28:
                    0f:06:d4:1b:d7:7e:99:bd:52:af:95:c2:f7:39:21:
                    e4:60:7f:0e:d5:1d:49:78:bf:01:0e:76:b6:52:5c:
                    d1:43:f1:82:1e:65:b6:01:72:8d:62:a4:15:72:5a:
                    5a:21:8b:e9:cc:fc:1d:de:9c:d3:78:b7:36:f6:84:
                    be:94:34:38:30:bf:c7:42:f4:5d:77:12:ee:08:3d:
                    e5:83:ff:3d:36:db:2f:af:4d:b8:73:86:ea:53:e7:
                    4b:dc:c8:ee:ee:5c:23:3d:9e:77:69:9f:7a:db:bf:
                    6a:c1:25:c6:f7:58:2c:4f:9e:d8:3f:77:89:36:be:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C3:28:20:BC:FF:E9:F6:19:E1:5F:D1:D9:92:9F:AF:7F:69:3A:51
            X509v3 Authority Key Identifier:
                keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.79.0/24
                IPv6:
                  2001:df7:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:71:63:df:fd:99:45:c8:11:73:b7:14:9e:52:1c:83:45:64:
         4e:9d:58:81:89:6b:b6:14:91:94:52:d5:c6:8c:9a:a6:fa:51:
         d3:12:dd:50:66:71:a0:b2:59:ee:81:a2:09:42:c7:9d:89:58:
         b0:a5:e0:8f:87:af:0b:17:4c:46:c0:d1:7e:91:bf:6a:e3:c9:
         92:31:eb:f8:3f:97:5a:95:9f:53:1a:96:9a:9b:fc:40:01:69:
         81:6d:bb:1f:c5:d3:dc:ba:c0:97:4f:44:a8:81:fb:8f:6c:98:
         31:e2:60:23:0b:7d:ad:b2:e5:57:46:21:06:bb:75:a0:7d:93:
         bb:a2:23:87:04:b7:3a:8a:64:cc:83:7c:b9:e8:68:51:01:f2:
         5f:22:09:c8:36:d5:20:46:fc:85:95:15:c8:f8:4e:40:72:eb:
         eb:2a:d3:7c:d9:a2:f2:ff:a5:19:d8:d8:2f:57:6d:a8:e5:3e:
         58:00:66:b1:93:be:00:44:25:f2:1f:52:2f:37:ce:97:88:eb:
         b7:d5:b5:0f:67:9a:08:3c:8a:62:09:7f:de:98:cc:58:f6:76:
         2d:2e:9f:16:7d:c6:7d:34:63:2f:51:f0:0f:39:d0:18:14:76:
         70:56:7b:24:3b:e6:50:ea:55:38:98:22:e3:32:b4:89:0d:aa:
         1e:ac:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:10 2026 by rpki-client