Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/81E94F18F57311EA86849119C4F9AE02.roa
File:                     81E94F18F57311EA86849119C4F9AE02.roa (raw, json)
Hash identifier:          o7hslMVigOY231eahjNEQ0NYOJaFI9mq6NC5ziX7dQc=
Subject key identifier:   BF:F8:5F:B1:DC:41:22:0E:12:40:34:08:5E:E1:C6:81:83:1C:66:EA
Certificate issuer:       /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial:       0876
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/81E94F18F57311EA86849119C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:11:25 +0000
ROA not before:           Sat 10 Jan 2026 20:17:15 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     18254
IP address blocks:        103.145.58.0/23 maxlen: 23
                          103.145.58.0/24 maxlen: 24
                          103.145.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
                          rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
        Validity
            Not Before: Jan 10 20:17:15 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4733c-4cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:5b:ae:10:2d:8e:e9:aa:61:34:6f:e0:b8:
                    fe:f4:ce:0c:5d:ea:8a:7e:b5:91:c7:58:2c:c1:6b:
                    9b:a2:8d:5e:c5:01:2a:78:24:75:a0:df:37:93:5c:
                    03:72:2a:2a:f7:22:74:6c:50:c5:ce:19:09:84:35:
                    17:15:16:c6:c1:a4:2e:58:a8:ea:e0:f3:a6:82:01:
                    f0:5d:9a:f8:0c:04:7a:a5:e1:8f:06:4a:92:fc:ea:
                    c9:dd:7b:7a:a5:8f:64:01:c0:49:ec:80:16:67:fb:
                    21:a2:86:8d:bb:df:32:42:60:05:3d:4b:b0:cf:36:
                    f6:38:ab:a4:df:43:10:b8:1c:27:6c:f1:b4:bc:2b:
                    a5:7d:e1:07:7b:4d:91:43:ec:b0:ce:8a:a5:07:c5:
                    25:51:31:4e:f9:8f:9f:7a:8d:58:78:21:5f:11:d3:
                    d3:e7:0d:93:36:cf:52:06:a4:be:3f:24:d7:5c:4d:
                    73:c6:b6:9a:2a:e3:bf:cb:0c:27:eb:47:7f:9e:6e:
                    cd:55:a4:3e:ad:d1:69:30:d4:79:b4:87:ca:2c:ae:
                    fb:21:f2:54:80:0f:d9:31:3c:62:14:20:c4:e9:dd:
                    8e:01:1e:bb:18:2f:3c:b6:2f:55:42:a4:f9:26:5b:
                    2a:43:c8:be:6e:42:48:9e:d8:ce:33:2d:3f:96:7f:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:5F:B1:DC:41:22:0E:12:40:34:08:5E:E1:C6:81:83:1C:66:EA
            X509v3 Authority Key Identifier:
                keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/81E94F18F57311EA86849119C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:3f:a1:68:5d:63:fa:ab:c0:b1:c3:cc:3a:1d:1e:b2:cc:
         ae:10:5b:5f:39:ea:4a:0a:6b:64:71:79:4f:bb:c8:e3:73:ee:
         a2:b0:c4:e2:82:c9:bf:93:43:59:42:63:fd:09:f5:02:61:9d:
         fe:43:1c:16:c0:b5:36:a1:67:0d:aa:0f:77:1d:1d:b2:2c:30:
         b3:73:94:ab:b7:51:3a:96:91:b7:86:df:39:7b:b1:0a:86:d4:
         d3:15:e2:60:cf:4c:8b:d8:59:94:01:9e:d3:4e:f3:87:18:83:
         7f:74:32:21:af:6f:a3:3f:d1:6f:98:fa:a3:55:7f:7f:fc:65:
         a7:5c:b6:d0:ce:0f:db:a3:52:6c:46:9d:2f:f1:69:5d:64:1e:
         ae:34:fe:4e:d0:29:6a:d9:97:a9:7f:67:8b:4f:a3:f7:56:cc:
         1f:61:cf:53:e2:fe:e5:c2:75:40:f2:a7:fa:46:91:fd:b0:48:
         f2:a3:e4:51:28:32:d1:a3:5b:25:54:46:bd:d2:97:29:94:7a:
         98:bc:f5:48:e9:a2:4e:0c:49:aa:a7:3b:62:2b:f5:d7:a0:19:
         c4:84:c0:0e:56:e9:60:51:09:99:2d:e4:5f:b5:7d:38:51:c9:
         f1:92:68:cb:49:c9:9b:39:ee:c4:6f:60:9d:a5:84:3c:bd:2b:
         da:76:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:15 2026 by rpki-client