Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
File:                     405A719A173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier:          ycIts+8Ia700vDczkR/7GuhTNSPscycs9CC9TZP5S1c=
Subject key identifier:   74:D4:53:39:89:E5:C4:C7:5C:CA:43:DA:10:4D:A4:95:C3:46:50:AB
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       058A
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:00:01 +0000
ROA not before:           Thu 18 Dec 2025 23:19:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17993
IP address blocks:        103.131.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec 18 23:19:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45471-9b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:71:0a:7c:eb:1d:03:05:70:f2:5d:11:d6:
                    80:be:77:d8:4d:12:63:fe:70:fa:4f:4e:12:10:c1:
                    65:ab:1b:05:1e:ba:22:b9:73:88:8c:06:fb:62:ca:
                    19:60:b8:b9:fa:04:d6:55:c7:dd:db:73:92:17:12:
                    6f:40:3d:f3:9c:89:99:96:9d:03:fb:b8:d1:f3:4e:
                    26:df:c4:22:59:b7:91:f6:e6:d9:16:86:71:21:3d:
                    8b:95:4c:75:d4:e8:5c:ac:73:4a:5c:9d:2d:d4:1a:
                    f8:2f:c5:32:76:03:61:f2:3e:5e:4e:6c:e2:7d:e2:
                    10:98:93:4c:d9:69:78:31:5d:fa:65:5b:6a:20:bc:
                    a1:a6:0a:e5:f8:87:83:56:99:f7:0d:69:65:20:d7:
                    6c:aa:b2:d5:83:de:f8:61:35:a0:67:55:b1:59:85:
                    b3:69:49:4c:95:d0:be:15:ef:46:9d:f5:c5:cb:5a:
                    d3:a3:da:24:11:59:0e:2f:f2:75:ad:c7:77:42:c0:
                    3e:a3:8b:b3:94:0a:45:4f:02:5a:78:3e:94:a8:5f:
                    e9:c7:25:f3:93:f9:0c:a1:c8:89:ea:80:4d:7d:79:
                    5d:78:3a:41:5a:17:21:5a:65:1a:28:11:8d:b5:39:
                    98:90:ba:02:15:9a:84:71:b1:3e:bd:fb:9c:7e:78:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:53:39:89:E5:C4:C7:5C:CA:43:DA:10:4D:A4:95:C3:46:50:AB
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:4c:db:be:bd:1b:1d:71:06:af:ae:4f:e3:ea:08:1d:25:
         6a:18:19:fa:f3:ce:7c:32:eb:c9:49:a3:37:5c:9f:85:4a:06:
         5a:87:35:34:f9:6b:07:92:19:86:aa:cb:54:25:a8:93:b7:e4:
         00:45:45:82:48:a7:1d:66:92:82:d9:54:6f:e7:20:a9:d6:71:
         90:b5:5c:59:93:07:01:1a:33:63:c0:75:16:f6:ee:4a:a6:49:
         0d:a7:8c:3e:5d:04:77:9b:51:1e:ac:1f:0f:0b:ed:a9:78:aa:
         34:51:a1:51:84:7f:8e:34:c2:0a:a1:42:a3:8d:04:3d:84:a1:
         e8:33:24:c6:c3:71:bf:ec:20:6e:57:3b:18:73:82:48:41:14:
         c3:c8:2d:b8:f0:0e:42:ff:e9:d2:99:b9:26:f6:84:8c:9d:1f:
         02:b0:00:19:0a:21:6b:d3:b9:89:63:03:43:34:ed:98:01:25:
         d3:23:bc:2c:3a:97:94:38:63:94:f1:66:c4:53:25:35:58:48:
         f1:e5:44:39:bd:5d:ac:90:0e:f1:80:a2:d6:e5:c1:ae:3d:65:
         e6:31:70:a9:57:1a:30:13:98:7e:16:65:ac:79:cf:18:e1:58:
         cd:53:04:0f:4c:fe:91:6f:32:7e:fe:d5:95:38:5e:29:1f:0a:
         bb:f1:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:36 2026 by rpki-client