Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
File:                     81EEF49E801711EF8566D481C4F9AE02.roa (raw, json)
Hash identifier:          a7Uc10RsC/6X5xYgwb5Nexm+ur9FxSvPei0w6c1QDm8=
Subject key identifier:   C6:4A:63:92:C2:57:33:25:F7:B9:A3:93:4D:7D:2E:7E:13:0D:95:93
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       03A3
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:51:22 +0000
ROA not before:           Mon 01 Sep 2025 01:48:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140934
IP address blocks:        103.190.16.0/23 maxlen: 24
                          2401:c8a0::/32 maxlen: 32
                          2401:c8a0::/48 maxlen: 48
                          2401:c8a0:1::/48 maxlen: 48
                          2401:c8a0:2::/48 maxlen: 48
                          2401:c8a0:3::/48 maxlen: 48
                          2401:c8a0:4::/48 maxlen: 48
                          2401:c8a0:5::/48 maxlen: 48
                          2401:c8a0:6::/48 maxlen: 48
                          2401:c8a0:7::/48 maxlen: 48
                          2401:c8a0:8::/48 maxlen: 48
                          2401:c8a0:9::/48 maxlen: 48
                          2401:c8a0:a::/48 maxlen: 48
                          2401:c8a0:b::/48 maxlen: 48
                          2401:c8a0:c::/48 maxlen: 48
                          2401:c8a0:d::/48 maxlen: 48
                          2401:c8a0:e::/48 maxlen: 48
                          2401:c8a0:f::/48 maxlen: 48
                          2401:c8a0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Sep  1 01:48:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46e8a-ae70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:dd:5b:59:c5:fa:18:2e:29:74:cc:35:e3:
                    82:ba:37:5a:ce:c6:06:6e:0f:0a:d8:5b:d3:72:0a:
                    35:ec:94:ba:d0:67:51:c1:df:da:61:52:d2:fe:05:
                    b4:d5:93:bb:01:b6:f0:ab:57:47:15:79:7b:9f:e1:
                    a3:e9:9f:c8:46:4f:44:30:c5:3c:78:9e:55:46:38:
                    e4:73:c0:1d:d2:5a:22:02:02:36:2b:87:49:49:c7:
                    94:21:b4:68:57:f8:54:11:cc:30:4a:da:48:97:d7:
                    3e:88:4f:1a:1a:66:89:fc:df:79:13:98:1d:07:0a:
                    44:bb:66:ad:35:45:e2:39:18:3b:24:8e:f7:34:2d:
                    46:61:29:70:00:24:7d:2b:1a:39:8f:25:12:14:ba:
                    99:bd:a3:e3:f1:3d:f5:c6:3d:1c:f8:67:6d:c7:1d:
                    36:db:13:74:1f:d2:64:6b:96:99:27:be:8a:16:79:
                    65:83:7e:b1:2b:a2:57:7b:ba:0f:47:33:82:95:67:
                    5e:a7:07:a8:8b:33:b7:cc:c8:57:1f:02:47:d0:77:
                    46:68:79:85:18:09:67:fb:6b:24:f5:6b:4f:cb:e6:
                    28:1d:02:fa:29:57:f0:96:45:19:d5:1d:46:4a:8a:
                    22:86:c1:84:81:2e:83:2a:3f:ae:df:d7:f2:bd:f5:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:63:92:C2:57:33:25:F7:B9:A3:93:4D:7D:2E:7E:13:0D:95:93
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23
                IPv6:
                  2401:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:c4:8a:7e:a5:c0:6b:97:cf:8c:d1:c6:5b:cb:81:77:c0:
         2c:ef:09:91:8a:56:99:c4:12:1e:69:f6:58:cd:70:01:ba:6b:
         d8:e3:e9:e1:81:97:cb:a6:dc:ce:5c:69:58:5f:4d:54:80:bc:
         c4:44:7b:00:05:22:e6:c0:0d:4e:75:1b:e6:7b:3e:64:a5:ed:
         a8:d2:de:be:ee:b6:08:ff:cd:b6:ef:51:e9:34:23:2d:92:ed:
         10:db:69:4b:c5:fd:5b:14:bc:a3:b3:bb:8f:ef:c7:3e:5c:e0:
         99:57:21:50:cb:1b:1a:03:c3:6b:63:08:91:d9:72:d2:5b:92:
         06:27:d8:54:4d:49:55:12:1f:5a:69:12:ac:c7:03:7c:67:60:
         41:a5:80:d5:33:88:a5:2c:96:c4:d7:3e:62:ef:16:de:73:73:
         6b:44:3e:2b:79:21:0e:d1:9f:9c:39:d0:41:8a:6e:b5:1d:c0:
         0e:b7:23:0f:be:dd:bb:b8:26:6d:aa:12:e4:9e:b7:67:5d:2f:
         18:c9:8d:e3:6d:4f:3f:78:92:74:cf:6a:5b:8e:a8:a0:79:91:
         3c:38:c4:c7:bf:b2:da:42:07:f7:b0:52:4e:8a:a1:62:33:f8:
         2c:ac:d8:6d:02:22:cc:15:e4:2c:8c:73:ad:76:25:0f:0f:db:
         30:13:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:28 2026 by rpki-client