Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa
File:                     76987158273511ECB7FB443DC4F9AE02.roa (raw, json)
Hash identifier:          u28XQ2Td7hojEBJzqFeuazgfLz/F072ZW0Ranfc1ZZM=
Subject key identifier:   EA:31:F7:30:9F:2F:07:AF:50:8E:B3:C3:BB:42:E0:EC:F0:13:46:0F
Certificate issuer:       /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial:       0558
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:43:05 +0000
ROA not before:           Mon 24 Nov 2025 22:44:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147184
IP address blocks:        103.174.68.0/23 maxlen: 23
                          103.174.68.0/24 maxlen: 24
                          103.174.69.0/24 maxlen: 24
                          2407:fe40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
        Validity
            Not Before: Nov 24 22:44:21 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43459-8ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:e7:bc:27:36:f3:9c:df:d0:38:85:ae:e1:
                    9e:87:5f:6e:c8:46:e1:b0:39:e7:0b:8a:06:9c:ad:
                    b1:e8:be:b5:70:9b:0c:cf:28:44:7a:64:31:ba:53:
                    3e:84:7e:2a:77:76:40:1d:72:b6:e1:fa:6a:36:29:
                    74:26:ee:4a:d4:26:50:3b:41:cc:ce:c2:ad:92:e9:
                    6d:b2:01:4a:a0:49:5b:9e:06:db:6e:24:9e:f0:a0:
                    41:ff:28:6f:55:60:42:d2:51:96:ac:02:32:ed:53:
                    2c:9c:b2:63:94:5b:4c:b0:3d:6a:41:6f:02:96:df:
                    74:39:67:93:ff:a2:bb:07:f6:08:8a:66:08:eb:55:
                    84:55:b8:85:66:de:f7:c7:8b:d8:8c:49:f4:4f:07:
                    e8:b8:4a:cb:78:2e:fe:84:33:b3:6d:f9:62:c4:e0:
                    7e:e4:94:6f:5e:37:77:fd:6e:5c:9a:a3:1b:58:22:
                    bd:b2:15:6b:50:39:35:f9:06:7a:da:53:36:55:73:
                    dd:c8:24:8e:6c:c2:e8:3b:c4:69:26:da:db:f1:57:
                    47:25:93:c9:de:5a:1f:24:dc:49:e1:11:4b:74:6c:
                    a1:94:eb:5c:fe:d1:35:4a:28:ed:fa:74:1d:98:de:
                    56:c0:54:8e:d1:2e:80:14:3e:f6:f9:2a:7b:78:ec:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:F7:30:9F:2F:07:AF:50:8E:B3:C3:BB:42:E0:EC:F0:13:46:0F
            X509v3 Authority Key Identifier:
                keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/76987158273511ECB7FB443DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.68.0/23
                IPv6:
                  2407:fe40::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:4f:ca:4f:b0:a9:cc:64:ae:78:34:f5:8b:3f:c6:09:70:b0:
         7a:e2:8a:9c:a6:ef:1e:9c:25:27:52:b7:07:ee:61:bb:9c:51:
         a5:98:54:37:56:2e:0c:3b:24:32:04:44:ff:4d:d4:29:8c:d1:
         5b:25:d6:55:06:9c:0a:7c:81:71:c7:47:a1:56:77:38:13:a3:
         9d:21:a5:b5:9e:77:c9:48:df:9d:22:08:27:a5:1c:dd:0d:45:
         09:19:c3:a7:f2:9c:0d:77:d8:ff:c5:45:e7:83:de:b8:8f:2b:
         bb:7c:79:b5:2c:c0:9c:e8:b0:6b:8c:0b:c8:11:ad:a7:ff:e6:
         f2:91:ad:a5:dc:bb:7c:21:be:44:ff:a0:bb:52:19:40:bf:79:
         21:49:ac:eb:82:af:b6:0a:c5:35:da:ab:2b:4e:4f:5f:79:d8:
         30:7f:96:cb:dd:2a:33:12:a9:8f:3a:b3:db:be:c7:c9:01:fb:
         a7:7c:df:9c:b9:cb:25:ac:bf:1a:1a:9c:a5:e4:38:fb:82:dc:
         aa:03:b6:73:57:6e:67:44:50:0a:36:71:45:17:9d:f1:4b:67:
         f1:15:94:19:b1:a9:a3:56:62:73:66:0c:1d:9d:81:a0:b3:ae:
         e5:24:38:47:6e:06:93:03:6c:46:87:6b:8a:f7:20:2b:9a:a8:
         51:2d:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:47 2026 by rpki-client