Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa
File:                     A2ED9CA2619D11EE8699DD20C4F9AE02.roa (raw, json)
Hash identifier:          1wIk3kcgrTRBgKQ9TL+iP9Cn+WNURQcXGuQAAZ6U/j0=
Subject key identifier:   1A:A4:4E:05:C3:3C:E4:AD:A6:A7:08:3A:E5:FB:D1:48:AE:CB:09:95
Certificate issuer:       /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial:       01CC
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:39:01 +0000
ROA not before:           Sat 09 Aug 2025 04:41:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151795
IP address blocks:        103.77.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
                          rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
        Validity
            Not Before: Aug  9 04:41:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3ed15-6060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:89:03:c3:cf:7d:56:2b:8f:62:d7:f2:bb:
                    17:e4:f9:0c:ed:02:d9:89:2e:4a:8f:70:e9:86:71:
                    8f:a2:9d:14:c1:7b:ed:ba:d8:1f:2c:86:6b:3e:78:
                    12:30:d4:67:4d:97:64:92:ac:e3:b8:27:ae:3a:11:
                    73:ed:56:b7:ae:e6:13:cc:86:41:29:7b:ed:ac:83:
                    fc:88:c8:59:91:81:10:4d:59:82:98:f7:6f:f1:55:
                    b9:d9:f5:92:47:de:cc:3f:36:10:2b:c6:31:7f:b7:
                    95:12:61:b3:23:9b:c3:37:83:8c:90:5a:e8:f3:f9:
                    bc:17:1d:b4:c3:9b:ee:1b:23:35:72:e1:19:83:1c:
                    06:3c:71:17:30:d3:df:aa:6d:fc:2d:98:bb:dc:14:
                    31:86:a3:7b:c0:d9:7a:22:d3:fe:98:65:83:e5:c9:
                    57:2c:21:60:3e:46:8c:93:12:7a:30:00:b2:96:f7:
                    7a:a2:13:9b:5f:2b:a9:ab:85:5b:ea:02:88:7a:1b:
                    8a:11:fa:1f:d7:5c:9d:30:cf:af:fc:42:1e:6a:0c:
                    f6:b2:d9:63:0d:e2:11:2a:45:3e:e9:b8:80:35:18:
                    3f:3f:73:6f:30:d6:32:7e:6e:41:88:6a:1b:39:f3:
                    fa:bd:f1:75:2f:3e:23:cd:4f:02:e8:44:4d:e6:79:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:4E:05:C3:3C:E4:AD:A6:A7:08:3A:E5:FB:D1:48:AE:CB:09:95
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:ee:14:46:c8:2b:02:eb:00:00:8a:86:5f:16:61:df:e9:
         e9:b5:40:8f:c1:1a:67:63:21:fe:b4:43:86:af:ce:85:4d:00:
         0e:16:53:45:6c:80:20:ac:b4:e1:a5:a5:c4:6b:c8:cd:3c:4f:
         54:cf:59:de:0e:e8:ff:ce:3c:45:61:39:06:d6:49:50:95:e9:
         39:4c:2e:53:98:39:f5:63:99:22:88:19:75:f7:49:59:c2:d5:
         2f:8b:72:cc:26:e1:3a:5c:76:c6:ca:a2:19:7f:84:89:20:da:
         c0:28:4c:c5:7e:84:9c:35:aa:a4:89:63:77:ac:30:24:60:ee:
         9a:e2:5c:bd:ab:df:1a:0e:25:35:8b:5f:aa:d8:e8:ad:a7:4d:
         db:0b:73:69:2b:43:94:0a:77:d0:2c:f3:58:1e:15:72:ba:41:
         59:50:ae:ff:c2:c2:ac:f6:20:01:9f:02:3d:66:9b:db:36:9d:
         b7:60:bc:93:b3:68:21:6d:42:2e:e8:d7:0b:fc:26:49:4e:6a:
         51:7f:a4:c9:3c:a4:af:b7:46:8c:6e:f6:d9:aa:e2:cb:37:de:
         ee:0b:52:32:d8:e2:1b:57:7c:20:12:5e:e3:c3:79:fc:b0:70:
         ee:7a:5f:01:64:fa:33:ea:8a:f6:2f:58:ca:2e:02:60:ac:52:
         db:6d:d9:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF
Qzg3REQxNEIwHhcNMjUwODA5MDQ0MTIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWQxNS02MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVeJA8PPfVYrj2LX8rsX5PkM7QLZiS5Kj3DphnGPop0UwXvtutgfLIZrPngS
MNRnTZdkkqzjuCeuOhFz7Va3ruYTzIZBKXvtrIP8iMhZkYEQTVmCmPdv8VW52fWS
R97MPzYQK8Yxf7eVEmGzI5vDN4OMkFro8/m8Fx20w5vuGyM1cuEZgxwGPHEXMNPf
qm38LZi73BQxhqN7wNl6ItP+mGWD5clXLCFgPkaMkxJ6MACylvd6ohObXyupq4Vb
6gKIehuKEfof11ydMM+v/EIeagz2stljDeIRKkU+6biANRg/P3NvMNYyfm5BiGob
OfP6vfF1Lz4jzU8C6ERN5nmPjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBqkTgXD
POStpqcIOuX70UiuywmVMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx
OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFDOTMvNkQwRjY0MEU2MTk3MTFFRUE2MkEzNjc2QzRGOUFFMDIvQTJFRDlDQTI2
MTlEMTFFRTg2OTlERDIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ02yMA0GCSqGSIb3DQEBCwUAA4IBAQCprO4URsgrAusAAIqGXxZh
3+nptUCPwRpnYyH+tEOGr86FTQAOFlNFbIAgrLThpaXEa8jNPE9Uz1neDuj/zjxF
YTkG1klQlek5TC5TmDn1Y5kiiBl190lZwtUvi3LMJuE6XHbGyqIZf4SJINrAKEzF
foScNaqkiWN3rDAkYO6a4ly9q98aDiU1i1+q2Oitp03bC3NpK0OUCnfQLPNYHhVy
ukFZUK7/wsKs9iABnwI9ZpvbNp23YLyTs2ghbUIu6NcL/CZJTmpRf6TJPKSvt0aM
bvbZquLLN97uC1Iy2OIbV3wgEl7jw3n8sHDuel8BZPoz6or2L1jKLgJgrFLbbdl2
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:25 2026 by rpki-client