Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa
File:                     9085F6C0B78911EFB9994180C4F9AE02.roa (raw, json)
Hash identifier:          u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=
Subject key identifier:   E2:8F:48:11:B4:4E:79:F2:17:9D:EB:5B:0B:E6:DA:28:A0:F9:78:FC
Certificate issuer:       /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial:       0ADF
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:38:59 +0000
ROA not before:           Fri 28 Nov 2025 18:52:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58895
IP address blocks:        103.102.156.0/24 maxlen: 24
                          103.102.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
                          rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
        Validity
            Not Before: Nov 28 18:52:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45d93-3b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:79:57:19:03:be:b5:af:3d:e2:b4:52:93:
                    19:4e:a6:96:08:15:64:b0:58:df:38:04:bf:88:65:
                    7a:b1:0a:e1:77:d1:d5:d8:51:02:9a:e8:3f:d5:f2:
                    cb:d3:d7:32:96:56:83:e1:9d:5f:c9:0a:84:12:ac:
                    2f:71:30:90:a4:3c:1f:dd:69:46:a9:13:2a:45:23:
                    74:20:d1:dd:47:21:58:17:70:db:3c:71:90:72:c9:
                    72:46:84:22:f4:e2:11:5c:64:a3:2d:03:6e:39:6c:
                    65:f6:c5:e9:32:ec:bc:b6:96:9c:8c:8d:73:62:2e:
                    20:0c:7b:10:a6:cb:1c:5a:18:54:22:d5:d3:11:9c:
                    dd:9c:d1:11:88:ca:ed:7d:2e:7d:14:63:0e:b7:80:
                    61:47:67:9a:0e:c3:ad:77:96:a7:dc:7a:ee:b7:2c:
                    e8:6f:7c:a2:29:fb:1d:bc:6d:7f:e4:0c:b9:23:fd:
                    4f:a7:fa:de:81:3f:11:e7:ff:a6:c5:ad:fb:b3:8f:
                    52:f1:b1:55:7f:1b:53:6a:8d:1e:bf:ef:05:ef:99:
                    76:4c:66:ba:d0:b6:17:80:2b:85:e5:57:75:93:bb:
                    ea:c8:19:54:bb:07:9e:e7:29:f6:ed:e8:b8:22:95:
                    e5:6c:a6:df:e0:81:a8:f5:9c:d5:53:c1:be:a1:d5:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:48:11:B4:4E:79:F2:17:9D:EB:5B:0B:E6:DA:28:A0:F9:78:FC
            X509v3 Authority Key Identifier:
                keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/9085F6C0B78911EFB9994180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:c6:e3:97:8c:be:b4:45:fc:44:a2:62:3d:29:68:34:92:
         21:cf:42:20:69:d6:a9:c7:7a:8a:93:35:53:5e:76:fe:64:f5:
         40:02:1f:b0:c8:28:03:59:41:2f:ce:59:14:e7:e2:00:42:26:
         b3:02:0a:6b:98:45:e3:73:0f:6e:8c:79:a7:f9:df:87:03:ec:
         17:4c:6a:fe:11:56:20:91:66:63:27:ad:4a:56:63:72:63:d0:
         a0:56:87:85:16:5b:04:80:04:e6:98:94:d8:65:b5:44:58:fd:
         7d:dd:aa:fd:6b:c5:c3:f3:3c:83:36:26:1c:4a:11:6c:b7:a4:
         1f:f6:4c:9c:0b:69:2f:14:02:2e:2c:fc:5e:70:da:2f:22:d8:
         32:d9:d2:ac:9b:88:8c:fb:9b:10:b1:37:05:2d:2f:6e:33:2c:
         b3:55:e0:97:c0:50:13:e1:96:0f:ed:fb:98:82:43:b2:dd:b7:
         d6:fc:e7:08:31:38:9d:fd:16:38:f3:c0:76:ae:13:7f:17:b8:
         30:64:6e:03:3f:19:fd:74:3a:7d:94:42:d1:dd:62:46:e7:99:
         ae:6e:67:a1:61:44:fb:42:e2:59:c1:36:3f:63:de:d0:30:05:
         5d:68:cb:8b:67:9e:f4:68:1d:cf:81:e1:e3:21:e5:00:1d:0a:
         09:b4:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:35 2026 by rpki-client