Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa
File:                     451C283AFE4911ED9352E438C4F9AE02.roa (raw, json)
Hash identifier:          0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=
Subject key identifier:   F4:BD:43:2E:A3:59:15:E5:04:5D:9A:B8:37:1B:D8:28:07:3A:2B:99
Certificate issuer:       /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial:       0D52
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:56:47 +0000
ROA not before:           Tue 10 Feb 2026 18:15:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     394811
IP address blocks:        203.23.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3410 (0xd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
        Validity
            Not Before: Feb 10 18:15:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47ddf-2047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:aa:cb:bd:79:8d:f1:91:38:17:67:2a:cf:
                    bc:57:8d:2d:41:1a:fc:91:59:3d:b4:a5:87:d7:fb:
                    eb:fc:86:27:fd:6e:7e:2b:d9:7d:a5:dc:03:8f:10:
                    ba:6f:4d:70:96:94:ee:e1:2d:c1:7c:de:98:10:77:
                    82:0a:f8:28:8a:c7:a5:d5:6a:fd:44:0e:8e:85:2e:
                    d5:72:37:87:96:d2:b6:05:bc:59:73:ca:89:46:2e:
                    83:05:6b:44:52:2b:45:d5:65:bd:2c:e6:5b:a0:56:
                    ea:39:1d:03:23:f8:ec:fb:b4:d4:3b:45:3e:a1:c1:
                    39:be:be:ed:68:83:2a:36:17:93:9b:9d:89:1e:c6:
                    7e:24:3c:ed:72:db:e7:9f:cb:f7:ce:be:f6:17:fa:
                    a9:28:dd:3e:16:40:13:aa:c0:f3:b6:6d:e0:35:e2:
                    de:a1:01:d1:35:e5:48:25:1e:95:5a:2d:98:3e:b8:
                    76:80:e4:84:f3:87:5e:7e:95:6a:f0:47:17:26:33:
                    00:b9:17:6b:37:5f:a2:89:f7:86:af:07:80:d9:8a:
                    0b:1e:60:15:29:25:f4:ea:01:55:d8:f9:ca:bf:2a:
                    dc:fe:c4:dd:cf:81:45:bc:d5:b2:a3:21:22:a3:0f:
                    0c:d9:a3:15:9a:25:ce:c5:a1:eb:50:a0:22:81:c2:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:43:2E:A3:59:15:E5:04:5D:9A:B8:37:1B:D8:28:07:3A:2B:99
            X509v3 Authority Key Identifier:
                keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/451C283AFE4911ED9352E438C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:78:af:e1:6e:b0:80:34:00:06:ec:3e:c9:a0:51:e7:8f:c6:
         fd:0d:8d:fd:10:2e:e6:5c:6e:ac:06:68:d4:43:63:ec:95:3c:
         41:d9:15:b0:c4:e6:a8:fe:64:59:e9:25:d4:c4:c2:90:c2:7f:
         e3:57:22:96:bc:40:86:47:38:c1:18:f6:48:ae:95:ca:78:29:
         6b:26:d4:e0:ac:9b:4c:65:86:97:84:62:14:b8:d2:6f:07:93:
         95:4e:08:b4:a8:3b:b7:3f:35:b6:9d:f0:21:05:01:8d:cc:dc:
         c8:f6:36:81:c7:8b:b4:8c:21:b7:bd:7b:b1:ae:3c:23:47:b2:
         ff:0a:6c:db:a2:34:10:6f:b5:79:1b:8f:e5:18:f2:a0:6a:d2:
         6d:0a:6e:5b:2e:ad:91:dc:50:5a:44:4e:ef:67:8b:0e:30:06:
         b4:7b:25:3b:87:93:10:de:6e:f1:45:ac:18:fd:ba:5e:40:2c:
         4e:7b:5f:ef:6c:d7:5d:7a:2d:44:cc:7a:49:b5:3d:18:14:38:
         31:c2:9d:4c:12:05:de:1c:64:fb:90:bd:25:fc:a7:3f:c5:93:
         62:c5:a1:11:d3:44:25:69:1b:25:c6:75:57:05:e3:be:cb:b8:
         72:d9:7a:e7:99:24:b5:4e:c4:cb:ba:2e:0a:3d:d1:a4:cd:93:
         4d:49:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:25 2026 by rpki-client