Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/6BC308A4ABD111F0A03CFC15C4F9AE02.roa
File:                     6BC308A4ABD111F0A03CFC15C4F9AE02.roa (raw, json)
Hash identifier:          suxcTo4pAXO4rfaqZGeW75e6PVUd6BB1qGawp6BjtXw=
Subject key identifier:   56:E8:5D:3D:09:5C:83:FA:CE:EC:10:FA:78:B4:F8:7A:71:78:D4:AF
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       012C
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/6BC308A4ABD111F0A03CFC15C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:11:28 +0000
ROA not before:           Thu 15 Jan 2026 05:23:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.204.108.0/22 maxlen: 24
                          202.160.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
                          rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Jan 15 05:23:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45720-00ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:c1:ce:15:6e:68:87:97:89:42:35:52:ee:
                    33:66:86:9e:5d:8b:77:6c:47:66:cf:d5:26:53:0d:
                    2b:57:e0:97:61:31:72:78:72:c9:8e:36:b9:72:47:
                    9e:72:26:a7:71:be:4d:b8:cb:d5:90:9c:9d:84:99:
                    40:f0:a3:1d:3e:89:2d:5d:d9:30:0b:86:c5:e6:75:
                    e5:cf:45:8a:82:72:a7:ab:b3:da:ec:64:ce:cc:68:
                    89:ac:ca:52:42:ab:05:53:62:bc:ae:22:cf:48:50:
                    43:53:f9:4c:a5:48:d6:2e:fd:17:7a:4c:77:d3:69:
                    eb:52:e6:88:1a:fd:ea:69:03:b4:0b:6b:32:38:07:
                    26:e8:c1:4f:64:cb:4b:36:ca:98:93:9b:8e:ef:73:
                    b1:dc:42:d0:66:c4:ce:38:70:7b:8e:23:85:c6:17:
                    af:24:67:8e:c8:34:2f:9c:da:e8:23:5f:4e:1b:ff:
                    28:fb:2b:de:e5:11:38:21:2d:9a:ef:c6:46:fd:ff:
                    f6:2b:07:fb:82:a4:c4:39:96:87:33:ee:a9:96:2d:
                    4c:46:60:5f:07:90:0d:71:42:24:5e:f7:30:b7:42:
                    4c:0b:24:60:91:63:78:f6:14:9f:40:05:4c:e2:b2:
                    86:51:49:ce:bb:e1:b2:6b:1e:1b:2c:a1:d9:76:be:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:5D:3D:09:5C:83:FA:CE:EC:10:FA:78:B4:F8:7A:71:78:D4:AF
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/6BC308A4ABD111F0A03CFC15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.108.0/22
                  202.160.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:0b:44:ef:84:c4:f7:c1:a5:f1:b6:47:ed:96:b1:62:16:
         b2:fa:d1:78:8f:5a:45:b2:fd:0c:23:fd:67:b3:aa:2c:67:cf:
         9c:0c:e6:fc:00:af:b1:fa:ff:93:81:49:6c:e2:88:6a:6b:b1:
         42:89:d2:a1:a2:1f:3d:aa:87:d7:b1:4e:cc:f3:ff:e3:23:4e:
         c1:55:65:7b:ee:ac:27:1c:54:65:04:82:d9:13:4d:73:f4:87:
         86:07:bc:4e:7e:ce:04:1a:dc:7c:64:96:19:6e:22:e0:53:45:
         32:3a:1f:94:72:f5:ed:3a:29:64:28:49:a5:24:e9:1c:c1:9f:
         56:62:16:d5:04:b7:66:2b:ff:d0:31:9a:5e:ca:03:1b:f6:47:
         51:d5:e3:2d:8b:3a:0a:9b:a2:7e:39:ae:ad:18:5e:8b:fc:51:
         05:9d:cd:a2:8f:56:e9:52:72:83:19:3f:e8:57:bd:89:9f:70:
         7d:a7:db:9d:51:4e:2d:42:02:e2:6a:d4:77:01:5e:86:fd:94:
         8c:a0:c0:c6:e1:24:10:e8:e4:8d:85:c0:c7:94:af:c7:0d:36:
         42:91:07:e6:23:c9:c3:89:75:8b:07:ed:e5:f9:03:1e:af:f4:
         bd:0d:b8:96:0e:9f:5a:b8:87:b3:df:50:5b:58:79:00:dc:8b:
         89:d0:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:45 2026 by rpki-client