Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa
File:                     D0A263DCB09A11F0937ACB4DC4F9AE02.roa (raw, json)
Hash identifier:          HLyGdrwWXwCBnZJJVCOhFQ5qmYx93HTxVRxNqG5BuFM=
Subject key identifier:   C1:B6:2A:98:DF:AC:37:DC:74:11:D9:EF:F4:F1:A7:DE:A6:7F:4C:26
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       0246
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:18:10 +0000
ROA not before:           Fri 23 Jan 2026 01:22:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24323
IP address blocks:        103.39.196.0/23 maxlen: 23
                          103.39.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
        Validity
            Not Before: Jan 23 01:22:33 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a458b2-f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:58:58:62:6f:9d:da:26:16:f7:83:a4:f8:
                    ca:24:a4:49:c1:e2:75:4c:a4:f5:ce:90:33:5b:9e:
                    44:c3:7c:7c:54:23:cc:7b:d5:42:2b:45:19:12:c3:
                    3f:88:c7:c6:1a:98:0f:04:0d:fa:5e:d8:12:d3:16:
                    e7:46:12:ea:ae:f4:d3:ed:f3:79:0d:39:31:87:a6:
                    d3:08:ac:c3:71:1e:e2:94:40:75:a1:54:7a:a5:70:
                    de:08:92:9d:92:5c:d2:f2:8f:70:80:2a:8e:8e:be:
                    35:d6:c0:24:3d:7e:66:f1:21:1b:ac:22:3e:9f:3a:
                    24:f3:f7:04:17:b3:8c:a0:08:df:57:49:b1:18:ec:
                    b4:8a:b4:45:de:e9:81:46:2c:d6:8c:89:a5:f2:29:
                    a9:a5:e6:12:ea:88:64:0c:a8:4c:a7:2f:e7:d4:25:
                    09:c9:1e:60:d4:27:20:b3:4f:8d:f5:c1:e7:54:a3:
                    76:68:b1:f3:74:b3:f4:72:9f:9e:8b:7c:1d:0c:55:
                    9c:41:3a:8e:0e:bb:81:f7:8b:10:a4:23:42:17:ec:
                    63:cf:2f:cf:9e:4b:a3:6e:5c:84:11:41:d0:21:d8:
                    ef:3f:1c:a3:51:41:60:03:c7:a3:a0:d9:d1:8b:34:
                    1f:9e:ca:9c:07:76:22:ca:1b:98:3e:89:1e:d6:08:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:2A:98:DF:AC:37:DC:74:11:D9:EF:F4:F1:A7:DE:A6:7F:4C:26
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:78:9b:a5:3e:e2:51:42:88:42:80:68:84:b2:d8:29:a2:
         ae:7f:d9:f0:42:1b:f9:71:50:61:ba:6f:6f:76:61:9a:4e:32:
         90:61:cf:1c:77:cd:42:b1:f3:15:9e:ed:2a:fb:46:ef:ee:28:
         43:42:5e:fb:e3:d9:74:ac:7b:26:19:62:3f:c6:fb:ab:f8:04:
         bf:54:9b:e6:aa:4c:89:0d:5e:1a:73:02:9e:0c:c8:d8:da:15:
         89:e1:2f:58:e1:e9:df:73:72:4c:3e:87:23:cb:b9:71:ad:e9:
         87:22:72:4b:85:dd:ab:48:8e:84:aa:bc:7b:59:b2:a8:41:4b:
         b3:40:00:02:9a:5f:75:a1:fc:6f:46:6d:be:67:89:8e:e1:7a:
         a3:db:ca:bc:c3:82:c3:9f:8c:d4:97:a2:ff:bf:3d:7f:bb:a2:
         23:37:fa:86:c2:a5:6e:cb:d3:11:0f:7d:0f:34:59:e0:55:49:
         ad:49:25:17:80:99:82:c2:80:dc:e2:1f:18:36:db:a0:2f:a3:
         f4:5e:05:b4:e9:e9:b8:e6:f1:95:ae:ce:b6:b3:b8:59:bf:af:
         a9:d4:09:9a:53:1f:9e:c4:dd:db:94:e0:e2:7e:36:76:fe:94:
         fb:0d:68:61:43:2e:43:06:25:a8:fd:9c:07:df:13:1e:d2:60:
         8d:25:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:42 2026 by rpki-client