Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa
File:                     54AC9B64C3B411EEBF90C180C4F9AE02.roa (raw, json)
Hash identifier:          DouU0HR255E8sWinNcaYlwzhjnFkk4nKBv8m3C8lp2o=
Subject key identifier:   24:51:88:5E:19:C5:3B:F4:F6:EC:BC:48:7C:DF:74:E1:E7:BC:2D:D3
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       051D
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:18:36 +0000
ROA not before:           Fri 26 Dec 2025 23:19:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152156
IP address blocks:        103.176.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Dec 26 23:19:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44abc-64cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:d5:bd:59:7e:07:5e:b2:5c:1b:83:06:94:
                    35:34:04:0b:fe:30:e8:80:17:b6:10:60:98:72:3c:
                    17:3c:d4:e8:14:03:4e:ba:67:93:ef:ea:90:30:3c:
                    04:82:bb:df:1e:52:f2:0a:2f:dc:45:cc:b2:e2:ba:
                    a5:23:ba:aa:d9:a0:ef:99:0a:b7:7a:0b:48:5f:f4:
                    2f:b1:ba:0c:2e:ed:89:c3:46:de:fd:7c:87:24:2b:
                    a2:a2:45:53:50:dd:e0:10:bc:01:c4:56:17:a2:b8:
                    cc:02:ed:b4:98:93:53:b7:30:a6:34:fd:1c:7b:66:
                    42:91:b6:6d:7a:8d:3b:26:9e:ba:54:bc:a4:9d:38:
                    f9:6e:ad:f4:1a:74:67:86:ef:8e:58:0d:5f:c3:54:
                    8c:9e:87:a5:2d:9b:0a:82:a9:d2:63:2e:c2:30:ee:
                    80:d9:c9:66:6e:20:71:d1:9b:cc:32:22:ee:58:74:
                    60:82:92:e2:74:d7:1d:e9:24:ab:f4:9a:50:40:e5:
                    8b:e8:f7:54:25:d5:f8:bb:74:23:c5:a9:f7:e8:61:
                    55:87:7c:82:87:aa:42:26:60:8b:a4:4e:83:4e:88:
                    a8:2f:d7:0a:65:8f:71:64:fe:d9:5e:f6:9d:8b:e7:
                    0f:3d:86:09:66:0d:84:a7:05:d7:44:db:08:b4:3e:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:51:88:5E:19:C5:3B:F4:F6:EC:BC:48:7C:DF:74:E1:E7:BC:2D:D3
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:ff:a6:09:b5:78:27:93:e4:77:40:60:10:0a:b0:a8:eb:
         1d:8c:a4:28:37:58:14:c4:38:39:0b:67:2c:da:7f:80:35:6f:
         8b:f6:0f:fe:a3:2c:36:ae:4a:08:8c:30:20:38:4d:f3:d9:7d:
         41:77:9c:73:03:19:7f:4c:f1:ab:25:bf:c4:3b:e7:8f:21:65:
         cb:61:7d:73:18:e5:2e:6c:ba:a8:80:b8:81:0a:ad:ce:2f:08:
         1a:5d:df:50:7f:d5:0f:2b:9c:7e:09:67:71:57:5f:31:11:bc:
         8e:35:3e:1a:22:e3:11:13:87:c1:c6:b4:c9:b8:af:fe:ac:22:
         a6:88:04:95:56:d3:7f:bf:00:87:c9:ee:49:3e:c9:b8:14:14:
         3d:42:bc:49:bd:c2:98:a0:45:06:15:55:8f:0e:d6:ef:a0:34:
         2e:f3:0a:aa:f7:4d:a5:22:f3:16:ac:4d:a7:a9:1c:d4:4f:8d:
         4b:66:e8:66:64:57:c7:27:ba:23:8c:23:e0:19:2d:dd:c8:37:
         76:5c:09:bf:00:22:1e:1a:be:ff:d0:d5:75:35:25:bc:5f:c7:
         20:60:60:9b:12:b4:8d:36:56:05:b0:38:b7:1b:cb:a3:68:ab:
         68:97:2b:11:91:9b:04:09:16:14:56:df:93:c8:b6:95:f1:1d:
         03:ad:f3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:30 2026 by rpki-client