Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa
File:                     415B7AF8173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier:          tKHm40kFAmhEQ3xybSC4smkjbV5OtY9A09fQhI0PdaY=
Subject key identifier:   23:DD:22:02:A4:2D:D4:6D:DD:FC:AD:5E:EF:89:CA:BA:00:49:34:21
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       058B
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:00:02 +0000
ROA not before:           Thu 18 Dec 2025 23:19:25 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38800
IP address blocks:        103.131.62.0/24 maxlen: 24
                          103.131.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec 18 23:19:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45472-57ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:df:23:f3:0a:b4:38:86:f8:c2:9b:79:85:
                    46:03:60:56:22:b0:df:20:ce:08:55:1c:99:ed:7b:
                    d6:5a:ab:6d:b7:8b:3e:2d:5e:c2:1d:b5:7f:bc:20:
                    3d:44:ab:f0:0d:9d:1e:7e:48:8e:29:fb:51:22:5b:
                    1c:04:8f:c1:72:f4:fc:55:b4:d6:55:03:ae:65:23:
                    4f:4e:8b:09:b4:d0:29:fb:09:40:62:40:49:de:0d:
                    5f:f5:30:df:0e:41:8d:b2:44:2c:da:b8:10:3e:aa:
                    06:64:1a:b4:25:9d:88:fd:66:e2:f0:5c:3d:19:29:
                    94:78:5c:96:e8:58:14:18:9b:4b:27:9d:16:b2:62:
                    29:e6:f3:c8:fb:c6:8e:e8:2d:b1:e1:c2:9d:7e:cf:
                    69:bc:1f:85:46:33:61:88:28:86:22:52:60:57:99:
                    0a:40:68:1c:6e:d7:0a:44:a9:aa:e5:fa:91:af:43:
                    fb:cd:3b:53:b6:2f:4d:9f:3c:fd:4c:36:69:fe:e1:
                    cd:1d:3a:bd:90:9e:6c:47:c9:20:e6:3a:6b:ac:77:
                    e4:13:28:8d:d5:d2:9b:7a:2f:8c:e2:04:01:46:07:
                    a5:00:66:f3:cf:5f:0b:59:2a:28:d8:fc:b3:77:af:
                    6b:2e:e9:86:36:7a:96:4c:ff:25:6b:3d:1f:3b:67:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:22:02:A4:2D:D4:6D:DD:FC:AD:5E:EF:89:CA:BA:00:49:34:21
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:54:1d:41:09:16:75:e5:2b:96:78:58:c7:43:08:40:df:
         f4:23:68:dc:6f:68:be:4a:ce:82:07:a1:fd:e3:93:d5:fb:19:
         f3:c6:21:71:e4:ae:7b:86:de:cf:d6:f2:99:29:a2:48:25:25:
         f1:e2:81:2f:a6:39:89:81:a5:ef:2b:eb:dc:b8:54:89:e5:20:
         40:a0:ab:ef:c5:9b:56:88:75:ae:a0:8c:51:8a:82:08:62:ef:
         db:01:f3:2b:c3:84:94:30:92:ee:f4:99:fb:5b:2c:9a:dc:3b:
         84:fb:55:74:56:27:b3:fa:b4:99:b5:cb:98:1c:4a:89:72:58:
         62:7e:46:40:0a:0f:1c:e5:6b:f5:52:9b:18:f9:c3:f2:76:ea:
         ef:da:ef:a3:83:e5:31:42:a5:c7:0d:8f:ae:f8:db:85:0d:18:
         a5:e8:ab:a0:24:f6:7e:e8:fb:8c:3f:82:aa:10:09:0c:c9:06:
         18:b3:47:be:f8:9a:90:af:74:13:93:e9:71:b8:db:41:df:c5:
         73:9e:85:b3:b7:1f:29:92:e6:27:cf:a1:7d:3a:5a:cc:8e:63:
         a5:7f:73:6e:70:37:4d:35:39:66:15:83:55:0c:eb:c9:bb:1c:
         ab:0b:7a:73:37:a5:ae:fa:f8:21:ab:a0:31:1d:da:cd:3b:f2:
         4e:4d:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:20 2026 by rpki-client