Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/78CFD3CC225E11EA8BD18A62C4F9AE02.roa
File:                     78CFD3CC225E11EA8BD18A62C4F9AE02.roa (raw, json)
Hash identifier:          LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=
Subject key identifier:   74:FE:92:A8:B4:86:83:33:D3:55:39:1E:2B:36:05:C0:67:E3:3A:FD
Certificate issuer:       /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial:       0C5C
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/78CFD3CC225E11EA8BD18A62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:22:08 +0000
ROA not before:           Tue 10 Feb 2026 19:15:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.145.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
                          rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
        Validity
            Not Before: Feb 10 19:15:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a475c0-4fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:c0:a9:65:6b:53:ac:50:fc:db:6e:1b:e7:
                    c2:3e:be:50:91:39:20:b1:b6:c4:10:06:9c:94:81:
                    77:7f:13:3a:c7:93:3c:88:d9:39:fb:ac:5a:5b:11:
                    39:6d:f1:92:8a:79:a8:7d:dd:52:73:3d:af:2a:7a:
                    ef:8c:b9:87:73:91:e6:cb:d7:f9:fc:7a:c9:9a:2e:
                    30:9d:b8:3d:9b:6b:cd:ca:90:02:1e:ed:f6:5c:9b:
                    a4:5f:1c:dd:76:49:81:8c:4c:78:a8:f0:76:6e:ab:
                    42:3e:27:c5:64:40:a4:08:4b:ce:c1:43:93:13:1c:
                    2b:fd:80:6e:5a:7c:d0:49:f1:8b:e7:c4:25:2f:b1:
                    63:e1:df:ef:a9:25:84:8b:47:51:28:4f:52:37:bd:
                    69:bc:f1:a5:ba:5f:02:7c:04:2c:ac:30:fe:15:86:
                    f3:07:9f:51:8e:bb:1c:91:c8:15:0f:d4:d6:b1:32:
                    53:4c:ed:8f:e7:e6:3e:64:54:59:66:c7:0a:d8:0e:
                    42:58:61:91:48:b6:6e:5d:a8:5e:73:5a:6a:b4:0f:
                    72:be:08:6a:fe:1c:fe:b8:6e:3d:b7:d1:0c:0e:f5:
                    e9:50:d0:b9:2c:dd:f4:66:7d:22:4b:17:e2:55:db:
                    52:a4:77:63:72:f3:a6:e9:7f:46:18:4b:3a:1f:6f:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:92:A8:B4:86:83:33:D3:55:39:1E:2B:36:05:C0:67:E3:3A:FD
            X509v3 Authority Key Identifier:
                keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/78CFD3CC225E11EA8BD18A62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5d:37:1e:b0:75:05:4e:c1:9a:2a:e9:54:b3:a6:65:ad:4c:
         db:62:83:28:79:2f:65:fd:3a:02:6e:8c:d9:81:f7:fa:07:90:
         5f:0a:78:2c:ac:d8:2d:c1:4f:ec:58:54:4e:4c:77:a5:cd:b1:
         00:a8:f5:79:b8:2c:8e:59:b6:8b:a4:35:dc:ef:7a:87:45:83:
         c0:7b:d7:e4:91:67:59:8a:f4:1c:b0:d1:7b:2e:0e:db:4a:d2:
         cf:d8:1c:22:0a:60:c8:f3:33:55:3c:7a:c4:27:bc:66:20:b1:
         28:f6:b8:fe:e9:91:82:39:39:5d:84:73:90:56:cd:3c:fb:e6:
         f0:9c:28:f2:53:ea:84:d1:06:9b:da:17:e1:6d:74:18:c4:2f:
         79:29:58:23:75:10:d4:2d:80:6b:d7:94:57:4d:ca:ed:4a:74:
         8d:5c:82:7c:e1:fa:3a:e8:03:49:e1:23:5d:a5:b1:08:7f:d6:
         20:a6:62:85:d2:4d:ff:8e:bf:04:82:9e:4e:07:9a:40:22:c4:
         27:16:6d:16:49:97:9d:ae:73:26:c5:de:45:e0:86:c9:34:a0:
         3a:48:7b:13:d0:5d:93:99:3c:15:51:e8:a9:f6:da:d5:8b:d3:
         fe:a9:62:ba:f7:8b:3d:40:2f:19:50:13:7c:b2:8a:a4:f2:4f:
         63:47:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:40 2026 by rpki-client