Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa
File:                     178177F0D35C11E69A0BDB79C4F9AE02.roa (raw, json)
Hash identifier:          n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=
Subject key identifier:   5E:6B:C1:0E:32:9F:D1:11:95:EF:94:25:5F:29:52:E1:29:E2:E2:5A
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D91
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:24:26 +0000
ROA not before:           Fri 12 Dec 2025 16:14:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     2647
IP address blocks:        202.167.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7569 (0x1d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Dec 12 16:14:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46839-f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:41:0e:2b:34:ef:63:44:63:c4:a9:83:6e:
                    d1:5c:ec:a0:46:10:a3:98:73:12:c0:4c:60:f8:9f:
                    cc:8d:5c:86:39:4a:29:fd:98:02:bc:60:d0:be:cd:
                    36:74:fc:1e:a4:2f:6e:c3:25:05:28:fa:d4:ee:7a:
                    6e:15:1d:b6:27:a4:a3:bd:30:00:9d:d9:89:86:15:
                    77:fe:79:0c:7c:e7:de:48:7e:62:41:76:06:8a:a0:
                    b0:d4:17:3b:1d:cf:d4:8b:0c:93:e7:c6:8f:aa:03:
                    b5:0e:5c:f0:95:3d:30:4b:fe:62:30:df:78:9a:57:
                    5c:3a:b1:f0:54:1b:17:4f:d9:db:f6:17:2f:71:2d:
                    64:4e:4b:49:34:b8:7b:38:c2:0b:0d:4b:22:be:8a:
                    09:4d:fc:78:f2:48:75:e1:5f:5b:bc:ef:00:96:a0:
                    57:8e:72:96:46:30:36:5e:a9:01:48:51:f1:ae:61:
                    55:11:7e:f6:69:cb:97:fc:58:df:8c:12:96:a8:39:
                    fd:bc:7e:48:e7:47:4b:e6:0d:d3:5c:20:a5:4e:c2:
                    2b:85:90:fb:50:0e:8c:26:2d:1d:21:f3:58:c5:3f:
                    ab:65:e5:cd:d0:13:7e:8b:b4:74:ab:f7:9d:bc:92:
                    bb:16:4b:9e:ad:00:f4:a5:3f:79:ab:a3:b8:46:c9:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:C1:0E:32:9F:D1:11:95:EF:94:25:5F:29:52:E1:29:E2:E2:5A
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.167.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:08:d2:87:d1:63:3c:64:17:1b:f5:ec:7b:9c:9f:99:9f:82:
         d6:2d:42:74:e7:1c:b2:46:e5:0b:4a:21:1f:bd:3a:1a:32:71:
         82:36:21:2c:9a:21:f7:a5:84:84:1e:30:f1:7f:f2:fc:6e:ca:
         ee:22:47:e7:0e:5a:09:3d:74:26:f1:4a:69:13:d8:01:99:0f:
         16:8f:36:26:51:9a:c6:bf:7e:a7:13:cc:1e:57:55:be:66:7d:
         97:18:ff:dc:b8:da:0e:0e:7c:84:5d:01:ee:81:69:86:47:0b:
         11:66:46:94:e5:fd:1e:39:ed:6b:29:35:9a:f3:a8:6a:09:ad:
         80:da:8e:1b:e3:64:2d:9c:77:27:61:38:aa:fa:1d:3e:0d:cf:
         80:25:29:a6:c9:d2:a6:a8:8d:e5:81:68:f7:11:8c:89:12:65:
         01:32:ef:32:44:0a:94:cf:0b:e5:de:52:00:6f:5a:e6:40:87:
         4a:96:dc:ee:ed:f2:ce:3d:04:31:71:bf:61:b9:ed:d0:69:a2:
         5b:39:ed:04:85:7b:ac:7a:f1:3c:cf:c5:f4:0d:03:f9:b0:2c:
         ff:e4:50:0b:29:43:70:10:02:cf:4c:c3:86:c9:37:c1:24:70:
         77:12:ee:85:32:d8:f2:bd:2c:93:6b:9c:05:fe:a5:6e:25:eb:
         b4:c6:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:29 2026 by rpki-client