Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa
File:                     7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (raw, json)
Hash identifier:          RNOiyIzbKTB4ZVG6uJRWT45MJtr9H4xdATELouVGdxk=
Subject key identifier:   9D:F5:4E:17:FD:B9:39:D7:88:4F:24:B0:84:39:61:D0:19:CF:98:85
Certificate issuer:       /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial:       0616
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:52:01 +0000
ROA not before:           Tue 29 Jul 2025 00:05:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142557
IP address blocks:        103.169.94.0/24 maxlen: 24
                          103.169.95.0/24 maxlen: 24
                          2001:df6:f380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
                          rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
        Validity
            Not Before: Jul 29 00:05:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40c41-1322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:47:5e:77:36:27:4a:ca:2e:f5:e7:0a:15:
                    21:ab:9c:49:f6:b8:93:6a:5f:87:29:1d:65:c8:6f:
                    8b:b5:8b:3b:49:04:65:a4:c9:9b:fb:02:d1:8b:dc:
                    13:6e:09:2b:d5:c5:67:0a:44:75:4f:56:ee:f1:9f:
                    9c:48:fc:f8:4d:a3:82:f2:73:37:66:d0:35:3c:55:
                    ad:30:b7:2d:35:e9:65:e7:03:94:7b:58:93:c3:2a:
                    f9:db:d0:5d:6d:ff:a5:a0:2d:36:8c:2b:ae:c3:08:
                    33:3c:f5:ab:3b:ac:13:b6:bc:29:a6:14:2e:f6:1b:
                    0d:a9:37:9f:d3:97:bd:01:b8:09:ee:2c:13:9d:72:
                    b0:73:d4:d2:6f:21:d5:3f:00:c1:ba:d6:f2:23:42:
                    29:4d:26:cb:af:50:f6:5c:fb:e3:a4:24:1d:96:d9:
                    04:72:5c:99:e3:c3:fd:d6:61:53:99:9c:87:c1:9a:
                    d6:84:5b:2e:a0:60:5b:b5:9a:10:84:fa:59:05:d9:
                    a8:74:39:14:b0:d7:69:2d:e1:52:f1:01:1a:19:64:
                    c7:32:af:d4:76:28:1f:34:49:2a:8b:2e:51:dd:07:
                    7b:72:ae:cf:ca:b2:9f:63:a7:c6:e9:5b:2c:ae:00:
                    63:67:92:06:87:b6:e3:c4:69:4b:88:31:ac:08:17:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F5:4E:17:FD:B9:39:D7:88:4F:24:B0:84:39:61:D0:19:CF:98:85
            X509v3 Authority Key Identifier:
                keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.94.0/23
                IPv6:
                  2001:df6:f380::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:87:9a:7a:3f:68:58:83:db:11:8a:2a:9d:ad:3e:8a:3f:3c:
         93:cf:54:2a:14:bb:08:4a:fc:42:d1:41:81:ef:f5:49:f8:d8:
         e4:9a:e6:be:cb:e9:9c:b6:fd:74:64:89:d2:ac:7b:39:74:c1:
         d3:20:89:03:38:40:b2:21:10:90:00:ef:cf:a0:c4:0b:1d:bf:
         4d:ed:01:f4:38:aa:c4:67:e6:76:cf:88:ce:63:d0:21:2e:22:
         f9:59:08:44:f6:f4:f5:61:53:d8:3d:e7:e0:9a:58:a8:92:ff:
         22:3b:f2:10:9a:92:c4:cd:c4:dd:5e:57:f5:3b:4a:21:30:8c:
         c9:69:ef:63:97:df:28:9e:3e:37:ec:55:79:44:b0:4b:a0:28:
         f8:f7:5c:84:3d:e3:e2:1f:fd:63:68:89:f7:fc:ad:56:03:03:
         8e:db:cc:6e:26:7c:0c:ec:3b:1f:ea:7b:9f:99:47:7d:ca:07:
         16:d7:ca:b3:14:0f:82:10:29:d9:4c:27:c4:74:c9:97:ab:3c:
         f6:25:20:2d:c5:3b:65:35:a1:8a:3f:03:03:00:a7:63:14:a0:
         8d:db:69:53:4f:cd:28:db:2a:9f:ab:62:60:54:a9:1b:2d:72:
         c7:4d:fb:e3:92:0a:87:58:d0:6e:c4:ed:a4:4a:18:9f:ab:45:
         91:5f:10:ce
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2
QTEwNEMxMTIwHhcNMjUwNzI5MDAwNTQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGM0MS0xMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFJHXnc2J0rKLvXnChUhq5xJ9riTal+HKR1lyG+LtYs7SQRlpMmb+wLRi9wT
bgkr1cVnCkR1T1bu8Z+cSPz4TaOC8nM3ZtA1PFWtMLctNell5wOUe1iTwyr529Bd
bf+loC02jCuuwwgzPPWrO6wTtrwpphQu9hsNqTef05e9AbgJ7iwTnXKwc9TSbyHV
PwDButbyI0IpTSbLr1D2XPvjpCQdltkEclyZ48P91mFTmZyHwZrWhFsuoGBbtZoQ
hPpZBdmodDkUsNdpLeFS8QEaGWTHMq/UdigfNEkqiy5R3Qd7cq7PyrKfY6fG6Vss
rgBjZ5IGh7bjxGlLiDGsCBeddwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJ31Thf9
uTnXiE8ksIQ5YdAZz5iFMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD
MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFDMjMvQzZCRDFFMkNEQzEyMTFFQjhDMURBNjRBQzRGOUFFMDIvN0NDMTlGQkNE
Q0FBMTFFQkI4N0RBRDQ0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6leMA8EAgACMAkDBwAgAQ3284AwDQYJKoZIhvcNAQELBQADggEB
ACKHmno/aFiD2xGKKp2tPoo/PJPPVCoUuwhK/ELRQYHv9Un42OSa5r7L6Zy2/XRk
idKsezl0wdMgiQM4QLIhEJAA78+gxAsdv03tAfQ4qsRn5nbPiM5j0CEuIvlZCET2
9PVhU9g95+CaWKiS/yI78hCaksTNxN1eV/U7SiEwjMlp72OX3yiePjfsVXlEsEug
KPj3XIQ94+If/WNoiff8rVYDA47bzG4mfAzsOx/qe5+ZR33KBxbXyrMUD4IQKdlM
J8R0yZerPPYlIC3FO2U1oYo/AwMAp2MUoI3baVNPzSjbKp+rYmBUqRstcsdN++OS
CodY0G7E7aRKGJ+rRZFfEM4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:35 2026 by rpki-client