Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa
File:                     1E347CDCE74A11EE8602742BC4F9AE02.roa (raw, json)
Hash identifier:          X9BXQVXdacHKtE65WWjF1sZIjnf6Hwqrn91/87XDVa4=
Subject key identifier:   12:8C:C2:C7:40:A9:5E:B6:87:2F:BE:6E:D0:CC:F0:EB:D8:2C:28:9A
Certificate issuer:       /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial:       0178
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:02:49 +0000
ROA not before:           Thu 17 Jul 2025 05:41:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131282
IP address blocks:        103.68.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
        Validity
            Not Before: Jul 17 05:41:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59889-0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:60:84:98:8b:c2:d9:80:e9:4f:f4:56:12:
                    0a:33:2e:97:6f:8f:32:52:18:b8:ee:97:50:33:4a:
                    0e:00:24:66:f5:cf:11:0a:df:62:b9:c8:65:f4:e3:
                    4b:b5:c6:0f:56:00:28:52:80:ea:2c:d0:41:0c:ba:
                    1b:30:4f:61:3e:71:46:9f:d1:63:ef:f5:90:e7:e9:
                    9b:99:43:b7:4c:49:b3:64:75:cd:79:48:dc:1c:27:
                    9e:72:8c:ef:4a:b7:89:2e:9f:39:e8:b4:12:5e:7b:
                    4c:c2:68:3a:7e:21:d5:8d:e6:56:9b:0c:16:09:9f:
                    fe:88:27:8f:9b:83:6b:6b:47:5f:7f:40:e4:f3:3e:
                    fb:ef:25:83:8d:58:9a:28:49:8c:75:7f:9b:05:43:
                    b6:4d:cd:62:9d:90:88:0d:a8:48:ff:8c:81:5d:88:
                    1f:5a:73:e8:e9:6b:2a:f6:ca:68:c3:20:40:07:46:
                    a6:c4:29:7f:9f:53:85:2c:ae:bb:58:77:91:86:2f:
                    41:bb:13:41:71:7d:a7:3d:aa:7a:76:4d:75:3c:21:
                    26:7a:6b:3a:fa:d5:10:21:68:6c:2d:1c:ce:b6:94:
                    0a:0b:7c:e1:66:dd:d8:a2:30:33:63:41:82:dd:85:
                    c0:13:fe:51:43:38:bb:40:c1:0a:10:44:cb:3f:21:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:C2:C7:40:A9:5E:B6:87:2F:BE:6E:D0:CC:F0:EB:D8:2C:28:9A
            X509v3 Authority Key Identifier:
                keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:4d:67:86:08:85:b0:bc:c2:e8:c1:7a:0a:e4:cb:18:23:
         8a:6b:06:9c:ff:c5:60:7d:aa:42:ef:b3:1f:4f:79:25:3e:63:
         9a:bf:9a:94:bd:6d:31:66:54:53:57:8e:ed:f4:a0:6a:ea:a2:
         5e:19:27:1b:85:f0:8d:39:2d:2c:cc:72:a3:bd:ac:8c:39:a9:
         25:3b:0d:f7:f5:a4:65:fe:cf:73:56:88:e4:03:c2:e7:42:7f:
         84:35:60:27:27:b9:ff:9f:7a:7d:a5:bc:a8:81:3e:8e:f5:77:
         76:05:00:dd:70:d6:2a:33:c4:61:9e:0e:ae:b6:d8:12:c3:f8:
         ab:c8:49:e7:91:aa:0a:ce:7f:7b:15:f9:c0:6f:4c:ee:d1:b0:
         71:a8:39:75:e8:0e:56:a0:29:1e:03:73:f0:52:e7:c2:cf:17:
         4a:e8:e9:ff:83:ce:06:32:bc:59:7f:71:01:67:87:e3:21:60:
         3a:e8:d5:11:fa:e5:cc:21:0d:0e:b1:02:d3:53:52:48:e3:b3:
         f7:d5:4c:8e:67:5c:58:d1:09:73:df:a1:8c:cf:7a:74:41:0f:
         fb:ed:ba:7e:54:85:6f:58:a0:59:8b:45:31:68:18:b9:91:54:
         8b:e9:ec:25:3e:02:2a:0a:7c:fc:d1:5e:d0:de:60:ce:ab:05:
         a8:1d:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:41 2026 by rpki-client