Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/A910F37297CE11F0885B0A30C4F9AE02.roa
File:                     A910F37297CE11F0885B0A30C4F9AE02.roa (raw, json)
Hash identifier:          Y7hqH6AdlNN+CGQx5eSl2EAvXIdaBV9/RAugdoHMkMg=
Subject key identifier:   B2:A9:9B:97:75:57:AA:25:30:35:C4:CF:22:CD:9B:98:8D:10:3E:7C
Certificate issuer:       /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial:       01E0
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/A910F37297CE11F0885B0A30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:05:24 +0000
ROA not before:           Thu 05 Feb 2026 13:22:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151968
IP address blocks:        103.67.62.0/23 maxlen: 23
                          103.67.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
                          rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
        Validity
            Not Before: Feb  5 13:22:43 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47fe4-ef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:0b:1a:8b:be:01:e5:ce:f1:c9:99:cb:1f:
                    69:8f:e4:a4:15:55:c3:22:0e:75:5c:b0:69:bf:3a:
                    f5:13:50:40:f8:70:c6:a4:c5:ae:9a:c6:9e:0f:d2:
                    93:4b:e6:ad:1d:8d:c9:61:85:0f:9d:1f:4a:89:7c:
                    7b:06:b4:f0:69:54:11:c0:06:6d:70:e4:f2:e5:f7:
                    cd:a5:f3:56:80:a7:ed:71:66:fe:3b:4a:d7:15:a9:
                    b9:43:61:da:a2:37:40:ac:c4:a1:37:9e:7c:47:51:
                    4b:9d:04:1d:90:e2:ad:f9:12:cf:11:92:3b:ca:0d:
                    5c:86:c0:02:c9:7f:7c:f1:a4:42:67:a8:51:4a:b1:
                    d7:e4:85:8c:a5:83:81:98:c1:32:af:dc:c1:f6:51:
                    53:01:2a:1d:3e:56:b5:74:30:f2:3e:82:f6:88:0e:
                    15:61:34:57:ec:4c:e1:65:0f:ab:6e:a6:ad:6f:a4:
                    00:3b:af:a0:81:cc:73:5a:6c:30:24:e7:a0:34:0f:
                    0d:2d:11:96:21:7d:1e:d9:6b:b8:b9:f4:10:4f:dc:
                    80:1c:d0:d0:23:a0:9b:62:94:05:78:fa:67:2c:eb:
                    83:59:5c:62:8d:d1:d0:04:3d:e8:28:be:61:1c:7c:
                    fc:f2:06:09:18:77:be:50:30:ae:13:75:75:27:cb:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:9B:97:75:57:AA:25:30:35:C4:CF:22:CD:9B:98:8D:10:3E:7C
            X509v3 Authority Key Identifier:
                keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/A910F37297CE11F0885B0A30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:96:ae:ac:7e:04:96:36:50:08:c6:a3:0a:dd:40:21:b8:43:
         b4:d8:4b:9e:05:2f:ef:c0:2a:c9:1b:8e:3f:55:22:15:60:2d:
         3c:7e:ff:d9:eb:ed:f9:80:39:b4:2a:4b:a7:30:99:95:2b:7f:
         7a:9b:3b:74:ee:cf:23:34:2c:b2:15:ec:03:e7:15:2e:de:16:
         55:57:0f:88:da:8c:04:0f:46:51:d1:d0:88:02:5d:16:ad:55:
         80:83:a1:a0:63:e9:39:71:a5:f4:42:39:67:dd:e8:55:a5:c9:
         c6:7c:5f:72:ee:76:a6:2f:3b:f2:25:64:3d:cb:a7:b4:f6:8b:
         03:50:0c:be:10:6f:3e:15:f4:35:24:4d:39:86:bc:a1:d0:19:
         02:9a:32:74:be:b0:72:45:55:5f:a2:64:14:7a:53:22:1f:14:
         be:1f:f7:4f:71:c4:06:3e:48:37:d3:1d:eb:67:d2:55:67:c0:
         31:86:6a:70:53:5b:80:98:e1:b6:e2:5f:7e:0c:dd:d4:24:70:
         5c:70:7b:72:6c:b9:b7:7f:9e:8d:64:89:11:cc:d4:d4:86:69:
         c6:66:f3:31:32:9b:51:5f:1c:cd:f3:bc:3c:f8:4f:53:1f:c0:
         55:4b:6d:28:b6:58:05:57:f6:03:84:37:45:fa:be:83:50:6c:
         dd:ad:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:46 2026 by rpki-client