Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
File:                     F6750B60168D11EC89C9CB5DC4F9AE02.roa (raw, json)
Hash identifier:          a2MlG0wEMN1OaH7j49XfTWV8ol9vPnU4AAth6CS9+gs=
Subject key identifier:   21:00:F9:66:1D:CE:58:53:30:F9:93:80:68:E2:99:68:6B:06:3C:58
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       0587
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:41:38 +0000
ROA not before:           Tue 04 Nov 2025 23:44:11 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133434
IP address blocks:        103.172.108.0/24 maxlen: 24
                          103.198.106.0/24 maxlen: 24
                          2407:d0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
        Validity
            Not Before: Nov  4 23:44:11 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43402-70a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:70:49:1f:27:10:e2:27:1d:85:9b:b3:ca:
                    c6:a9:f5:b6:49:f7:45:fe:47:01:8e:59:f0:9f:b3:
                    ab:38:7a:5f:07:3b:29:df:e0:9e:47:58:d3:3a:65:
                    28:c9:dd:fd:92:15:08:6a:06:cf:e3:e5:67:e5:4a:
                    64:17:ca:4a:21:ee:43:5e:93:26:73:8f:10:77:6b:
                    41:70:07:ae:5f:02:81:d3:3e:91:ed:9d:d6:9f:46:
                    80:7a:9e:6a:8d:de:1e:6a:9f:e4:c8:17:b8:bb:96:
                    92:36:c8:5b:d6:d9:f6:60:a1:68:e4:d1:26:94:1f:
                    64:51:c0:00:cf:db:c5:6d:aa:9c:08:42:14:5f:fe:
                    e9:e4:0e:70:54:22:33:02:df:e4:0f:88:cc:da:6f:
                    55:12:88:9a:95:3d:b5:01:2e:e7:b0:63:03:c2:d7:
                    17:a6:44:bd:5d:7a:45:b6:e6:76:ad:2f:12:d3:60:
                    a6:64:42:d0:d3:86:1c:24:b5:ff:d7:3b:de:63:ba:
                    7b:21:dc:0e:10:08:58:5c:7a:64:d9:90:38:bc:41:
                    09:c7:61:f4:66:7c:34:77:99:74:4d:58:d4:95:41:
                    c1:1d:8b:e8:5c:71:e1:12:0d:0f:57:36:12:3e:6e:
                    76:42:bb:64:6d:bc:b8:f5:fd:b9:5d:89:e6:4f:d2:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:F9:66:1D:CE:58:53:30:F9:93:80:68:E2:99:68:6B:06:3C:58
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.108.0/24
                  103.198.106.0/24
                IPv6:
                  2407:d0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:87:8e:96:d6:8c:7e:7d:cc:42:ab:b1:e8:37:17:c5:e0:
         44:03:2a:82:85:5d:e7:5e:d2:b1:ea:36:75:0d:60:17:b6:e3:
         92:90:50:67:94:e9:2b:d7:b9:e2:3d:bc:51:0b:65:8f:68:95:
         11:0d:9e:fb:db:8f:78:62:d3:5a:ff:70:3e:fc:04:49:7c:0e:
         16:ea:7b:35:5a:73:11:7d:35:bb:42:3e:2b:47:22:73:4c:dc:
         98:8f:dd:ee:13:91:d2:ad:8d:e1:01:68:76:15:75:2b:3b:a8:
         9a:18:08:bc:8d:2d:d8:bf:a1:aa:74:a0:3b:7d:07:dc:53:ee:
         f3:cb:0d:85:04:57:00:13:cc:f0:01:06:2e:c3:c9:58:d2:c3:
         97:cc:a9:c9:c4:cd:f0:eb:95:ce:0a:80:7b:08:e4:69:d2:48:
         78:ab:a5:4d:0e:60:45:7b:f0:66:09:45:8e:d5:fa:58:e2:96:
         1d:b6:80:1c:9b:b1:ba:3f:29:3d:d4:1d:11:15:ec:2e:c5:c0:
         67:f3:1c:eb:02:d9:cb:a7:5d:c0:08:0f:a4:ae:35:a4:1a:5d:
         47:33:25:91:de:23:39:1c:82:6e:8d:96:4b:16:2d:bf:b3:aa:
         8d:da:46:0b:19:7a:99:c3:ae:0d:60:40:06:7b:45:ff:a4:0d:
         0d:ca:e1:39
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5
OEIyRjhDNTEwHhcNMjUxMTA0MjM0NDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzQwMi03MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3xwSR8nEOInHYWbs8rGqfW2SfdF/kcBjlnwn7OrOHpfBzsp3+CeR1jTOmUo
yd39khUIagbP4+Vn5UpkF8pKIe5DXpMmc48Qd2tBcAeuXwKB0z6R7Z3Wn0aAep5q
jd4eap/kyBe4u5aSNshb1tn2YKFo5NEmlB9kUcAAz9vFbaqcCEIUX/7p5A5wVCIz
At/kD4jM2m9VEoialT21AS7nsGMDwtcXpkS9XXpFtuZ2rS8S02CmZELQ04YcJLX/
1zveY7p7IdwOEAhYXHpk2ZA4vEEJx2H0Znw0d5l0TVjUlUHBHYvoXHHhEg0PVzYS
Pm52Qrtkbby49f25XYnmT9JZNQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCEA+WYd
zlhTMPmTgGjimWhrBjxYMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2
ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxNzQvNzlENjY2MkExNjg5MTFFQzgxNjI1ODBDQzRGOUFFMDIvRjY3NTBCNjAx
NjhEMTFFQzg5QzlDQjVEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAZ6xsAwQAZ8ZqMA0EAgACMAcDBQAkB9DAMA0GCSqGSIb3DQEBCwUA
A4IBAQAu1YeOltaMfn3MQqux6DcXxeBEAyqChV3nXtKx6jZ1DWAXtuOSkFBnlOkr
17niPbxRC2WPaJURDZ772494YtNa/3A+/ARJfA4W6ns1WnMRfTW7Qj4rRyJzTNyY
j93uE5HSrY3hAWh2FXUrO6iaGAi8jS3Yv6GqdKA7fQfcU+7zyw2FBFcAE8zwAQYu
w8lY0sOXzKnJxM3w65XOCoB7CORp0kh4q6VNDmBFe/BmCUWO1fpY4pYdtoAcm7G6
Pyk91B0RFewuxcBn8xzrAtnLp13ACA+krjWkGl1HMyWR3iM5HIJujZZLFi2/s6qN
2kYLGXqZw64NYEAGe0X/pA0NyuE5
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:15 2026 by rpki-client