Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa
File:                     A6168350176711EFA13E2C6DC4F9AE02.roa (raw, json)
Hash identifier:          qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=
Subject key identifier:   8F:41:2C:3C:54:64:1E:57:D8:5E:DC:79:BC:C9:A2:29:A4:4B:D8:2C
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0400
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:31:12 +0000
ROA not before:           Sun 15 Feb 2026 00:21:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149055
IP address blocks:        103.177.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Feb 15 00:21:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a477e0-1513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:f0:64:8e:c2:1c:73:17:f1:f2:3c:d7:e2:
                    6b:95:15:e3:60:de:e7:2a:97:5f:e4:d7:a2:8f:2c:
                    90:99:d5:4f:f3:38:f0:2b:d8:07:1e:84:9d:c1:a7:
                    42:b9:c4:a6:bb:fc:65:8d:e6:5b:6a:d0:ec:ae:45:
                    0c:9a:56:43:56:be:e2:0a:ce:ce:79:d7:e4:dd:77:
                    42:b4:08:4b:db:16:1c:50:8f:83:f6:5a:f5:43:fa:
                    6e:0c:89:ca:65:1f:61:61:3b:ba:bf:41:f9:02:af:
                    85:14:27:30:c6:90:cb:c4:2e:01:e4:97:fd:d0:73:
                    e4:bb:b4:22:4a:28:4e:cd:3f:38:5e:59:e7:9f:e6:
                    66:9e:a3:8a:0a:0a:53:e4:b8:9a:f9:9f:9c:e9:d2:
                    22:f0:28:8c:f6:5b:1d:c4:1c:e7:7f:f6:93:ea:5d:
                    0a:6a:b8:80:05:10:d8:2c:4f:dc:7c:ae:3b:32:71:
                    fc:e0:36:d4:a5:39:80:47:cd:6c:1e:63:3c:94:21:
                    74:9b:6a:d4:01:e3:79:d3:72:9b:54:4b:3e:f3:b4:
                    89:01:20:30:5e:75:d2:23:d7:6a:96:94:89:62:fd:
                    a3:bd:58:cf:7b:08:e6:a9:f6:e2:b6:54:3e:55:d9:
                    e3:b8:aa:98:b6:78:a1:52:dc:95:f2:19:74:61:56:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:2C:3C:54:64:1E:57:D8:5E:DC:79:BC:C9:A2:29:A4:4B:D8:2C
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:cb:d7:05:c1:3e:96:a6:67:89:d0:2e:8c:77:2b:07:4d:
         c1:66:ef:61:a0:15:6d:3b:c2:e7:b8:3e:80:3e:dc:79:fc:a0:
         42:b9:86:94:ee:da:7a:d8:fa:d6:26:99:55:e9:fe:e9:d3:8c:
         84:2e:3e:30:4e:bc:18:02:73:57:b6:09:ab:61:da:3c:f8:53:
         ab:71:9f:c1:94:f6:4c:23:8b:ac:47:d1:08:96:25:d9:01:94:
         11:8e:82:b3:43:d1:f3:87:8e:17:51:57:7b:31:6c:41:c1:7f:
         33:79:10:0d:55:ae:d1:62:58:8b:d0:2e:f1:50:0e:a3:73:dc:
         5c:ed:69:ee:7f:3e:0e:f8:82:d2:94:73:e8:6b:aa:f2:35:4c:
         05:e8:c1:dd:c4:e0:2d:ef:4b:30:94:75:88:ca:00:a7:ec:ff:
         38:10:1c:b0:73:03:08:65:3c:2d:29:7e:7c:a9:a5:5c:2a:17:
         76:1a:31:a8:44:10:70:b0:2d:80:7a:d2:67:4b:7c:88:d2:af:
         cd:94:e5:bd:94:43:57:f3:7e:fd:e1:b4:67:06:c4:e9:c8:6b:
         5a:0d:9c:2f:14:30:e5:21:c1:71:32:c0:94:4b:29:16:72:b8:
         c2:b2:1f:e3:64:63:28:38:fc:5b:09:be:b6:c9:1c:eb:ae:96:
         e9:fa:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:51 2026 by rpki-client