Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
File:                     B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          XRwMcTTjDSOyyFcTOr569HHxdOSez2lS7/TiiRb8AfY=
Subject key identifier:   42:B1:1F:30:4C:9B:33:6D:77:BC:EC:44:F0:1E:6B:6F:0B:CE:8B:D6
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       065B
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:37:09 +0000
ROA not before:           Sat 28 Jun 2025 22:42:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     63961
IP address blocks:        103.140.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 28 22:42:22 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a432f5-ec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:d2:53:6d:98:02:f1:18:84:4a:a5:10:c7:
                    1c:4b:09:17:11:29:7b:2a:c4:dc:2b:df:b5:76:34:
                    ea:5e:f9:b9:3e:b5:77:d7:b5:1d:9d:9d:0a:76:03:
                    6b:a4:78:aa:9c:4a:f5:9e:cf:e7:a8:5e:c0:8c:9a:
                    03:f1:da:98:3d:91:f9:59:0f:c4:15:71:46:6c:63:
                    3b:e0:68:99:8e:8f:df:83:d1:e5:82:40:fe:12:72:
                    6f:86:06:88:7a:6c:f1:b9:2a:72:ed:2f:91:47:63:
                    ea:9e:48:c3:6d:5c:02:a5:4c:98:ff:60:8b:cd:f4:
                    dd:95:98:21:0a:ab:cd:f1:f3:42:d1:f9:62:ee:ae:
                    eb:80:54:75:67:7a:df:3a:33:27:68:53:80:2c:f5:
                    73:18:3f:78:48:94:55:c0:38:83:5b:fa:35:ae:40:
                    fe:96:ed:c1:e1:31:db:d3:f9:c6:32:df:42:c2:dc:
                    bf:ca:e0:be:4a:62:94:0a:fd:11:b8:c7:52:0a:c0:
                    5b:55:e0:2c:ec:96:af:91:09:7f:f5:a2:90:f9:70:
                    68:29:f5:61:c1:ea:51:d1:ad:d2:99:2f:2c:91:0d:
                    70:a0:91:09:b2:9d:e6:3d:d9:01:69:2d:c0:b7:f7:
                    35:48:c3:47:07:5c:56:8e:39:fb:c2:94:06:97:09:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B1:1F:30:4C:9B:33:6D:77:BC:EC:44:F0:1E:6B:6F:0B:CE:8B:D6
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:39:67:83:d8:06:ad:65:65:f5:9d:19:b4:cf:7a:79:e3:05:
         9d:c2:16:fa:8f:b3:53:6f:dd:fa:3e:02:3d:a4:61:fc:39:7b:
         f6:03:9d:a6:5e:6f:7c:e3:fc:63:c1:44:bb:43:e2:63:69:b0:
         6e:45:c1:da:cf:eb:7e:04:1b:0a:b2:e0:c7:7a:8b:63:07:f9:
         28:69:4d:d0:4b:8d:d2:b2:f2:03:76:1e:93:86:88:79:f3:8a:
         90:e0:55:ee:af:c8:09:b0:43:ad:dd:be:57:c4:83:ac:c6:9e:
         fa:e4:25:69:10:92:27:bf:50:f9:65:57:66:26:82:9d:83:3c:
         55:d1:23:e3:4e:87:61:7d:f4:47:63:ed:19:9c:c4:74:8f:71:
         66:40:2a:2a:af:8e:f0:e2:c5:76:45:ac:4e:3c:57:0a:21:c7:
         1e:b8:eb:c2:ee:68:b7:27:56:63:27:bd:97:7a:e6:0d:cb:f7:
         9c:a9:f9:e3:2c:a0:31:cb:58:fb:10:0c:10:a1:22:68:df:62:
         26:23:3c:9f:34:be:6e:ab:73:b8:62:c5:40:ff:13:0a:6f:62:
         50:3b:6c:dd:3a:67:d7:89:f4:42:fe:4d:2e:18:23:fe:d2:16:
         04:36:fc:c4:df:5e:f8:17:b2:45:cc:71:00:3e:ef:2d:c9:ba:
         66:20:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:18 2026 by rpki-client