Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/4FD9C050F53411EFBF7FCA34C4F9AE02.roa
File:                     4FD9C050F53411EFBF7FCA34C4F9AE02.roa (raw, json)
Hash identifier:          4j2H8uU7/aRuPDnI28o6Sv8nL9kjvWfBPDjQZsso1iI=
Subject key identifier:   31:F4:E1:F7:98:B8:D7:88:27:5D:9D:97:C3:74:17:5D:34:86:16:4D
Certificate issuer:       /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial:       04D3
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/4FD9C050F53411EFBF7FCA34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:37 +0000
ROA not before:           Sun 22 Feb 2026 23:20:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138004
IP address blocks:        103.178.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
        Validity
            Not Before: Feb 22 23:20:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45fd5-0dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:79:d9:3c:63:60:e6:92:e7:4c:75:2a:60:
                    30:37:00:3b:7e:af:3d:03:16:10:19:6b:8b:1a:8f:
                    2d:b6:a2:f7:ea:0c:cb:39:cd:40:0d:86:60:b3:c8:
                    94:44:01:62:e5:30:51:32:58:0e:01:e0:9b:22:88:
                    22:0d:2b:98:d5:f6:e7:01:25:ea:0b:90:d6:c8:d8:
                    82:d8:b6:0c:c0:df:96:84:8e:a6:c9:e5:f1:ae:ea:
                    58:73:d5:0b:28:cd:b2:2a:bf:72:b7:d2:7b:75:30:
                    05:3e:f9:22:54:b5:31:8e:bf:bd:ab:f6:54:c6:a9:
                    73:40:a3:12:cc:7b:91:37:d3:79:42:a9:b6:03:23:
                    56:4b:df:ae:a1:91:5b:7d:5c:39:dc:44:a2:8e:4c:
                    7c:01:84:88:fa:56:41:c6:cc:6f:92:18:85:08:27:
                    dc:fa:f9:98:f2:08:0f:c6:f6:0c:1a:15:75:93:91:
                    69:0c:e8:52:e6:56:7a:e3:ec:c8:32:f2:1d:10:1c:
                    72:e9:5d:c8:c9:03:8a:2c:1b:e6:64:c0:d9:7c:d6:
                    a1:1f:f9:1d:4f:19:a5:45:42:b7:67:b0:e7:05:30:
                    8f:e8:08:09:f6:d1:57:75:db:44:6a:b6:e7:6c:df:
                    99:6b:b0:d8:54:ae:1c:d8:b9:b7:3c:57:36:cd:6f:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:E1:F7:98:B8:D7:88:27:5D:9D:97:C3:74:17:5D:34:86:16:4D
            X509v3 Authority Key Identifier:
                keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/4FD9C050F53411EFBF7FCA34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:14:16:af:59:fd:3e:5a:e7:ee:b0:be:4e:e8:c8:0d:e9:
         07:28:bf:5e:9f:c7:19:fb:cf:ee:0f:2e:39:6a:74:1b:40:01:
         ce:9b:ba:2d:7c:c0:07:cd:80:05:9d:4d:78:55:3d:2b:e7:7d:
         9c:2d:6e:1a:f7:29:89:85:3e:0e:ec:1d:2a:ae:fd:0f:6d:75:
         0b:82:be:1d:90:49:6d:ec:b8:dc:70:3d:9e:24:44:64:53:1d:
         f5:80:17:29:4e:8a:d5:f2:bd:7b:21:2b:bb:b9:64:c6:6a:69:
         68:62:4f:5c:91:7d:c9:38:66:d8:a8:b4:22:b4:03:75:46:30:
         52:89:a8:58:ac:1f:f0:75:4e:8a:1e:15:cc:ad:b2:03:79:3a:
         7a:8e:84:31:8e:dc:b2:62:f1:8a:c1:7b:04:13:ba:60:27:d2:
         1d:d7:a4:c0:8c:a6:a7:52:9d:86:c1:3a:c9:a3:93:9a:b4:85:
         91:74:4e:0d:c2:eb:c6:87:c6:15:4d:d4:5c:b8:1d:20:d0:b0:
         d5:59:aa:44:57:d8:0c:51:43:04:22:1a:3c:c7:bb:22:a4:4c:
         c5:df:ee:20:2d:4a:47:2f:87:0c:9b:0b:64:68:ed:57:20:f9:
         5a:41:ab:c1:60:7f:1d:5a:22:e4:47:84:50:08:22:aa:d4:cd:
         4b:09:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:34 2026 by rpki-client