Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa
File:                     ABD9CB4630C711ECA2491515C4F9AE02.roa (raw, json)
Hash identifier:          8INoOCXFPbcklJdQVYuXZGAHmYI6aNH2061FTcCA0JU=
Subject key identifier:   36:C8:63:45:4F:14:4C:E0:FA:7A:22:CB:1A:F7:36:4D:FE:A4:B5:62
Certificate issuer:       /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial:       0541
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:51:36 +0000
ROA not before:           Sat 03 May 2025 00:05:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45753
IP address blocks:        103.91.8.0/22 maxlen: 24
                          123.253.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
                          rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
        Validity
            Not Before: May  3 00:05:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fe17-e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:43:02:c5:99:c5:64:90:80:12:71:cd:85:
                    6f:3e:54:2b:55:d4:54:32:3b:61:43:67:75:7c:2a:
                    f9:54:2f:2d:f6:90:64:0d:27:25:67:ce:ec:a4:1f:
                    9d:00:8b:a0:83:11:56:fb:a6:ef:ec:3b:cb:1b:2e:
                    49:6d:d7:bd:aa:66:48:3a:ad:97:21:a0:e7:cd:3e:
                    9f:91:6a:05:a8:db:74:3e:dc:c3:91:90:a4:a8:56:
                    ff:dc:c7:94:6e:d4:8a:6f:00:c5:27:2a:45:27:7d:
                    b2:a8:a2:a3:95:19:2a:93:9f:4a:cc:1a:54:b5:60:
                    af:4e:74:b8:d3:ad:eb:41:6f:dc:d0:b9:b3:a0:43:
                    d9:c9:96:e7:13:83:10:64:d6:d6:eb:cc:32:e0:58:
                    67:59:21:ef:d2:a3:70:95:88:67:56:7c:fb:9f:65:
                    35:87:a4:c6:4e:50:43:38:ed:47:35:19:0c:d0:98:
                    c6:e8:6a:03:c8:c0:0d:b4:ea:dc:52:8e:2f:3d:13:
                    5c:d1:08:58:15:5d:41:d9:c3:fb:60:0a:4b:c2:42:
                    90:0f:6f:2f:18:df:b1:3a:a1:bf:ae:a4:e7:ee:e9:
                    23:e1:0b:c8:7c:ba:da:18:8f:ec:64:c7:99:f3:38:
                    63:35:02:92:68:9a:07:41:fa:15:32:9d:6f:58:6f:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C8:63:45:4F:14:4C:E0:FA:7A:22:CB:1A:F7:36:4D:FE:A4:B5:62
            X509v3 Authority Key Identifier:
                keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/ABD9CB4630C711ECA2491515C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.8.0/22
                  123.253.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:c6:9c:b0:50:0e:29:24:49:73:54:42:9a:49:34:54:f0:
         f0:7f:c8:74:c6:b5:9f:22:9d:91:66:e2:2f:24:42:83:9e:ba:
         aa:97:ce:91:00:08:4f:c4:3c:21:1f:5b:f2:d2:8f:7a:b1:a5:
         e5:fd:13:fa:65:85:95:3b:a9:a2:0b:d0:86:58:12:b6:bb:1d:
         29:aa:63:91:08:80:18:c7:14:03:c2:b7:ac:4e:6f:a0:f0:28:
         fc:f0:f1:f6:16:a5:71:8e:98:67:2e:cf:4e:9d:9a:6e:ad:18:
         3c:8c:c4:1c:1c:57:46:01:19:b8:7d:29:5b:d8:de:d2:da:25:
         76:f8:fe:e0:92:30:07:00:11:2d:07:0a:f3:00:23:d6:c9:cb:
         a6:15:57:32:e4:f6:6e:c1:67:40:53:26:e6:8f:28:3a:b0:ea:
         cb:0c:6f:37:aa:fb:40:98:cc:39:a9:68:ab:74:20:57:b2:98:
         05:6a:c5:f1:27:5d:7d:d3:ed:13:d4:cd:bb:ca:21:3f:74:99:
         54:be:30:5e:9b:2f:05:c9:f3:a5:e5:00:78:42:1d:66:8c:cb:
         62:ce:f8:bf:19:8f:95:c9:a1:7f:72:84:6a:b0:2a:c4:2d:e3:
         bc:8b:62:a5:34:37:a0:c7:58:ae:58:a4:6e:fe:aa:9f:6b:62:
         76:51:70:76
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw
OTFCOEZCOTQwHhcNMjUwNTAzMDAwNTUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmUxNy1lOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAZDAsWZxWSQgBJxzYVvPlQrVdRUMjthQ2d1fCr5VC8t9pBkDSclZ87spB+d
AIuggxFW+6bv7DvLGy5Jbde9qmZIOq2XIaDnzT6fkWoFqNt0PtzDkZCkqFb/3MeU
btSKbwDFJypFJ32yqKKjlRkqk59KzBpUtWCvTnS4063rQW/c0LmzoEPZyZbnE4MQ
ZNbW68wy4FhnWSHv0qNwlYhnVnz7n2U1h6TGTlBDOO1HNRkM0JjG6GoDyMANtOrc
Uo4vPRNc0QhYFV1B2cP7YApLwkKQD28vGN+xOqG/rqTn7ukj4QvIfLraGI/sZMeZ
8zhjNQKSaJoHQfoVMp1vWG+2PwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDbIY0VP
FEzg+noiyxr3Nk3+pLViMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw
QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFBNTkvOEFCOTMzRUEzMEM1MTFFQzhBNjdBQTdDQzRGOUFFMDIvQUJEOUNCNDYz
MEM3MTFFQ0EyNDkxNTE1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ1sIAwQCe/0YMA0GCSqGSIb3DQEBCwUAA4IBAQBwLsacsFAOKSRJ
c1RCmkk0VPDwf8h0xrWfIp2RZuIvJEKDnrqql86RAAhPxDwhH1vy0o96saXl/RP6
ZYWVO6miC9CGWBK2ux0pqmORCIAYxxQDwresTm+g8Cj88PH2FqVxjphnLs9OnZpu
rRg8jMQcHFdGARm4fSlb2N7S2iV2+P7gkjAHABEtBwrzACPWycumFVcy5PZuwWdA
Uybmjyg6sOrLDG83qvtAmMw5qWirdCBXspgFasXxJ1190+0T1M27yiE/dJlUvjBe
my8FyfOl5QB4Qh1mjMtizvi/GY+VyaF/coRqsCrELeO8i2KlNDegx1iuWKRu/qqf
a2J2UXB2
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:30 2026 by rpki-client