Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
File:                     AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (raw, json)
Hash identifier:          ormMJPG1gPtLW2EAcQsDQkK5zcF+AGy43Ug4aJDV41E=
Subject key identifier:   5E:04:F2:42:C2:FA:29:B8:2B:EF:73:07:32:63:DE:B0:D8:34:53:EA
Certificate issuer:       /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial:       0513
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:19 +0000
ROA not before:           Sat 27 Sep 2025 00:27:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138186
IP address blocks:        103.173.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
        Validity
            Not Before: Sep 27 00:27:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a481bf-1d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:58:df:89:51:e2:bf:10:36:cd:24:1a:6e:
                    ec:74:c8:a3:10:63:51:c1:c5:61:a1:be:36:5d:d3:
                    3e:b7:b2:c0:ba:31:a2:e6:34:51:99:d8:12:50:33:
                    87:fa:f2:ed:a6:bf:0a:3b:12:00:69:6a:42:f5:39:
                    0e:5f:f5:e1:b7:ec:71:3c:d2:35:08:c3:9a:b1:72:
                    14:7c:a4:c1:15:ff:1a:c7:ab:c4:d0:d7:b7:84:c7:
                    fd:3f:42:60:ab:21:ee:b0:38:ca:b6:7a:93:fb:68:
                    53:d1:89:34:b6:77:e6:50:4e:c1:79:5c:ce:de:1e:
                    30:47:44:89:06:d0:8f:27:1e:e7:7e:85:47:ee:9e:
                    2e:6d:36:6a:30:ce:f4:54:ec:f2:84:67:5f:5a:6b:
                    8e:02:5b:72:a9:6c:f0:04:0f:67:2a:fd:85:8c:90:
                    bf:a7:22:63:bc:c2:9a:ac:ef:fc:1d:cd:da:b9:2d:
                    57:b2:5c:bb:8a:51:bd:b4:33:56:2b:d8:a0:a5:07:
                    c7:95:9a:35:37:a2:22:cb:89:fc:13:d3:2a:02:06:
                    7d:1d:f3:a4:57:82:2c:85:07:f7:6b:0a:13:3b:f7:
                    68:1f:05:e5:ed:6c:f3:59:0d:b6:1f:a9:91:84:8c:
                    5c:32:81:3d:80:70:51:a6:12:17:ca:a1:a3:ac:23:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:F2:42:C2:FA:29:B8:2B:EF:73:07:32:63:DE:B0:D8:34:53:EA
            X509v3 Authority Key Identifier:
                keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:78:79:fd:3a:2f:f5:a9:04:51:f0:af:2d:fc:de:8f:2b:
         14:d0:aa:23:ce:d8:2a:3d:fe:06:79:c9:c1:7d:6f:aa:c5:de:
         db:b3:fc:76:58:f5:5c:eb:82:41:89:cc:bc:a1:70:63:e9:77:
         dc:02:03:79:f1:d6:bf:ba:6d:06:af:ce:91:4b:78:cb:29:6b:
         2e:92:f4:fe:cf:f4:52:47:6c:ec:e3:97:9b:cb:76:50:41:b0:
         50:3c:7b:01:f2:36:16:8d:b1:5e:4a:ed:ce:1d:f4:ae:a2:49:
         58:1c:5d:a8:9e:a3:e1:44:82:0c:d8:19:5d:1f:c0:cc:66:dd:
         e0:b8:76:a3:f8:81:f2:5e:9e:0f:c3:07:e1:ec:43:41:9b:a7:
         b2:ab:91:12:19:fc:84:b2:36:4c:98:fa:95:2b:2d:d9:dd:c0:
         1b:6c:a7:81:43:25:1c:00:03:b4:6e:39:6f:ab:0c:ce:f8:f1:
         08:a0:31:44:10:8f:7e:ab:44:d5:64:0a:92:f5:50:da:5d:06:
         2e:83:71:d8:a7:b0:b3:9a:b0:e8:1a:bd:94:cc:f7:f8:67:13:
         e5:09:d2:b5:a4:de:37:fd:90:51:d0:52:41:78:fa:57:9a:c0:
         66:84:b5:bf:a5:67:6a:a1:c1:aa:1f:05:59:59:80:e7:ba:71:
         3c:17:9b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:21 2026 by rpki-client