Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
File:                     41969D1C8F3011EEA61ACF62C4F9AE02.roa (raw, json)
Hash identifier:          gg1NxyOoVbC4W+3Hh9sYPb23rvpu8aUKKSd8lTa2xx4=
Subject key identifier:   9F:AE:B2:39:D9:65:5C:38:F0:18:97:03:9F:CC:BC:8E:7C:44:D8:A5
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       01C6
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:24:59 +0000
ROA not before:           Fri 27 Feb 2026 03:22:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.150.252.0/24 maxlen: 24
                          202.74.46.0/24 maxlen: 24
                          2400:a4a0:1::/48 maxlen: 48
                          2400:a4a0:30::/48 maxlen: 48
                          2400:a4a0:40::/48 maxlen: 48
                          2400:a4a0:41::/48 maxlen: 48
                          2400:a4a0:42::/48 maxlen: 48
                          2400:a4a0:90::/48 maxlen: 48
                          2400:a4a0:100::/48 maxlen: 48
                          2400:a4a0:101::/48 maxlen: 48
                          2400:a4a0:115::/48 maxlen: 48
                          2400:a4a0:a100::/48 maxlen: 48
                          2400:a4a0:aaa2::/48 maxlen: 48
                          2400:a4a0:aaa3::/48 maxlen: 48
                          2400:a4a0:aaa4::/48 maxlen: 48
                          2400:a4a0:aaa5::/48 maxlen: 48
                          2400:a4a0:b100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: Feb 27 03:22:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a61c4b-3143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:61:f4:89:70:b7:2c:7a:e0:4b:9f:95:a2:
                    f7:c8:c4:27:7b:f0:40:a5:01:2f:18:81:a3:cf:36:
                    31:ea:27:43:4f:0d:9a:98:f9:3b:f7:10:be:b6:86:
                    59:9d:53:b3:2f:61:8b:2d:26:7d:ff:a3:5b:e0:ec:
                    83:79:75:af:26:29:2e:f0:cf:ab:c7:52:28:3a:09:
                    ed:44:e2:8c:fd:b5:fb:0a:8b:7d:9c:24:61:90:6a:
                    6a:d0:85:be:97:0c:78:de:37:4c:06:02:8b:02:ac:
                    e3:5b:ef:3e:08:6a:f3:01:7b:8f:68:cb:0c:23:e9:
                    99:a6:25:51:73:a0:8f:eb:d5:64:1b:ed:61:c1:07:
                    33:d1:0f:73:f0:03:4b:36:ba:69:87:be:01:cd:0c:
                    e4:ef:f1:ef:ac:7d:1b:94:ad:07:45:0a:84:cb:d9:
                    f3:78:20:36:5b:19:e4:61:7e:b7:84:2a:90:df:5e:
                    93:bb:b2:2f:42:fe:f5:ad:79:5e:97:7f:69:20:70:
                    f2:38:e7:a2:89:a2:12:8c:8c:98:ca:80:fa:d6:39:
                    ea:72:fb:93:ee:a7:56:1d:ad:34:78:66:4c:17:a4:
                    f6:59:d1:7e:9c:bd:dd:01:84:ab:29:ea:33:f6:cd:
                    1e:78:34:b9:fd:63:3b:36:91:5a:7f:bc:be:5a:79:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AE:B2:39:D9:65:5C:38:F0:18:97:03:9F:CC:BC:8E:7C:44:D8:A5
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.252.0/24
                  202.74.46.0/24
                IPv6:
                  2400:a4a0:1::/48
                  2400:a4a0:30::/48
                  2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff
                  2400:a4a0:90::/48
                  2400:a4a0:100::/47
                  2400:a4a0:115::/48
                  2400:a4a0:a100::/48
                  2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff
                  2400:a4a0:b100::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:02:3a:9c:74:99:6d:80:ea:f1:7b:c1:d8:f2:d8:b4:69:
         42:67:3c:f8:7e:0e:a3:48:42:c4:36:8d:ae:0a:b6:36:cc:51:
         d6:41:0c:bd:d8:82:96:53:5b:b2:86:1a:e9:f8:47:b4:3f:e3:
         63:78:91:d0:dc:6f:73:c2:6f:ec:c8:ee:5d:71:09:95:31:40:
         da:16:fd:c8:f6:bc:52:b9:6f:03:f6:5c:65:aa:d7:c0:e7:ef:
         47:d2:9e:aa:6a:b5:ef:3c:04:e4:9e:64:74:5a:bb:e7:2e:2f:
         d1:71:b3:eb:fe:aa:e2:e2:31:03:56:3b:71:38:78:ff:27:cc:
         e4:a3:4d:89:2f:07:f8:3f:77:fd:6f:14:72:8f:d0:33:58:48:
         a1:0d:78:e5:a6:2f:7d:4c:0f:10:26:9b:07:b0:92:1a:0a:a2:
         97:2e:d5:04:1b:fb:be:cb:5a:8a:2e:d0:7d:e4:b7:87:a1:61:
         b2:50:5a:c5:be:80:2f:df:6c:41:9b:b5:77:c2:5c:c8:e0:7b:
         7c:81:af:02:74:8e:3f:cd:7a:46:21:a6:cb:af:10:f3:aa:a3:
         74:83:79:f2:b4:0b:97:93:d1:17:79:71:b3:6d:c0:56:4f:79:
         d4:f4:91:56:78:a7:8f:14:d2:33:22:28:26:18:e4:44:f0:32:
         7b:98:a0:c8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx
M0Y4MEZCQkIwHhcNMjYwMjI3MDMyMjU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWM0Yi0zMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA46Rh9Ilwtyx64EuflaL3yMQne/BApQEvGIGjzzYx6idDTw2amPk79xC+toZZ
nVOzL2GLLSZ9/6Nb4OyDeXWvJiku8M+rx1IoOgntROKM/bX7Cot9nCRhkGpq0IW+
lwx43jdMBgKLAqzjW+8+CGrzAXuPaMsMI+mZpiVRc6CP69VkG+1hwQcz0Q9z8ANL
Nrpph74BzQzk7/HvrH0blK0HRQqEy9nzeCA2WxnkYX63hCqQ316Tu7IvQv71rXle
l39pIHDyOOeiiaISjIyYyoD61jnqcvuT7qdWHa00eGZMF6T2WdF+nL3dAYSrKeoz
9s0eeDS5/WM7NpFaf7y+WnkwZwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFJ+usjnZ
ZVw48BiXA5/MvI58RNilMB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzlGMjIvQ0Y5QkY1RkU4RjJGMTFFRTlDQkZEOTYxQzRGOUFFMDIvNDE5NjlEMUM4
RjMwMTFFRUE2MUFDRjYyQzRGOUFFMDIucm9hMIGWBggrBgEFBQcBBwEB/wSBhjCB
gzASBAIAATAMAwQAZ5b8AwQAykouMG0EAgACMGcDBwAkAKSgAAEDBwAkAKSgADAw
EgMHBiQApKAAQAMHACQApKAAQgMHACQApKAAkAMHASQApKABAAMHACQApKABFQMH
ACQApKChADASAwcBJACkoKqiAwcBJACkoKqkAwcAJACkoLEAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdMAI6nHSZbYDq8XvB2PLYtGlCZzz4fg6jSELENo2uCrY2zFHWQQy9
2IKWU1uyhhrp+Ee0P+NjeJHQ3G9zwm/syO5dcQmVMUDaFv3I9rxSuW8D9lxlqtfA
5+9H0p6qarXvPATknmR0WrvnLi/RcbPr/qri4jEDVjtxOHj/J8zko02JLwf4P3f9
bxRyj9AzWEihDXjlpi99TA8QJpsHsJIaCqKXLtUEG/u+y1qKLtB95LeHoWGyUFrF
voAv32xBm7V3wlzI4Ht8ga8CdI4/zXpGIabLrxDzqqN0g3nytAuXk9EXeXGzbcBW
T3nU9JFWeKePFNIzIigmGORE8DJ7mKDI
-----END CERTIFICATE-----
Generated at Wed Mar 4 04:59:35 2026 by rpki-client