Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/23040B70375B11F180BEF7389E833773.roa
File:                     23040B70375B11F180BEF7389E833773.roa (raw, json)
Hash identifier:          H+jn5F9NHODClkbilyzIPhxJujsjE4oYY2dNFOIiVDk=
Subject key identifier:   D5:96:84:77:E8:55:D0:F7:DB:DF:6D:10:97:BE:BA:2F:5C:99:CB:D7
Certificate issuer:       /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial:       0556
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/23040B70375B11F180BEF7389E833773.roa
Signing time:             Mon 13 Apr 2026 17:06:39 +0000
ROA not before:           Mon 13 Apr 2026 17:06:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148974
IP address blocks:        103.175.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
                          rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
        Validity
            Not Before: Apr 13 17:06:39 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69dd229f-a869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:a1:de:c3:09:36:58:1d:c0:04:b9:a5:e7:
                    26:1c:fc:af:fd:c6:c5:61:f0:32:2f:47:12:c1:9c:
                    a4:b1:eb:a8:1a:d0:4a:16:8d:ec:37:65:f6:56:4a:
                    f5:f5:f5:1d:1b:54:e6:69:d5:1b:cc:20:1a:60:cc:
                    a9:a1:8f:f4:62:6d:ef:e3:a0:88:32:0b:b3:49:80:
                    45:e8:f5:a0:79:db:b0:a2:ad:27:3e:eb:50:c6:a5:
                    0c:79:25:2b:3c:0c:a9:69:8d:2b:bd:95:aa:c3:12:
                    fd:aa:e1:5c:f2:b7:2a:b2:3d:76:f0:3b:fa:19:e8:
                    6d:3c:8e:52:ee:bf:19:12:bd:8d:9c:44:6c:85:d7:
                    a7:8d:22:20:27:57:c3:4c:19:83:f4:37:e5:ba:2a:
                    61:82:51:cc:dd:36:59:13:e9:3a:86:f0:71:c0:71:
                    cf:c1:2e:9f:4f:d2:67:fb:6f:e6:61:1a:89:32:de:
                    f2:04:eb:b8:26:2f:63:72:0d:c3:39:05:2d:a4:d4:
                    9b:b1:d4:e4:c7:c4:62:ae:87:1d:03:15:aa:80:69:
                    8c:9d:08:ba:d7:df:40:86:f6:9f:5e:e8:3a:69:10:
                    83:1d:d1:e4:ae:26:53:74:a5:d6:f8:25:fc:f1:00:
                    35:7a:42:8a:c1:ab:62:8b:3d:53:4d:8d:35:a9:ef:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:96:84:77:E8:55:D0:F7:DB:DF:6D:10:97:BE:BA:2F:5C:99:CB:D7
            X509v3 Authority Key Identifier:
                keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/23040B70375B11F180BEF7389E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:45:57:af:cc:6f:7e:92:4b:30:13:3b:9c:e9:6f:c4:8a:fa:
         2d:f9:7c:3f:ef:25:2e:35:95:94:a2:62:9f:72:e5:cb:84:8a:
         cf:be:11:8e:07:58:dc:99:f1:43:be:7e:ae:42:fe:3c:cb:f1:
         ec:f9:92:f0:3c:8e:cd:89:1e:69:0e:1c:d5:5d:00:e4:29:86:
         a1:4e:8b:7a:95:37:84:ce:3f:1d:2f:03:5a:69:5a:c4:de:83:
         e2:f7:ed:6c:c9:19:97:9d:22:32:9c:fe:cc:1b:a5:41:ca:b0:
         f4:d7:a1:af:c7:5d:5b:7d:dd:96:d2:66:1d:71:69:46:f7:bb:
         75:d7:06:f9:f2:fc:c8:4e:4e:0a:74:e4:fe:b7:d2:e4:65:cc:
         10:11:7e:b3:db:26:40:5c:4b:22:2b:16:c1:de:b0:56:34:a6:
         9b:ac:e5:fe:44:21:9d:c2:ab:32:4d:0b:46:f4:54:6b:cb:df:
         10:5b:18:65:e9:89:52:26:33:a7:6f:cd:56:89:c8:ea:94:2f:
         84:98:cc:36:9d:ac:cb:a9:0b:16:63:d5:f4:07:c3:c4:b6:6c:
         c3:fe:d5:8b:36:a2:4e:99:68:35:9f:d2:0d:48:d8:36:19:62:
         ad:54:49:9c:9c:6c:4c:f1:9a:d7:f7:a5:f8:c5:38:ee:a3:1c:
         bc:a1:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:33 2026 by rpki-client