Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa
File:                     AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (raw, json)
Hash identifier:          toAgoicPvnytN26APU/UVJy8/sTKyifpzMMMZrUhYGw=
Subject key identifier:   F3:5E:4B:AF:64:C9:C1:B9:92:73:C7:C3:CF:FB:09:81:18:64:A1:DE
Certificate issuer:       /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Certificate serial:       04B2
Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:20:48 +0000
ROA not before:           Thu 12 Feb 2026 23:20:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149415
IP address blocks:        103.178.238.0/23 maxlen: 24
                          2001:df0:4240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
        Validity
            Not Before: Feb 12 23:20:02 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b40-cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:66:77:74:7b:85:4d:ba:9e:b1:26:71:c0:
                    71:69:ba:0b:a7:fb:d8:36:01:9f:df:78:18:b2:fe:
                    c1:a4:e1:42:c2:91:2f:8a:11:e7:68:a2:a4:02:aa:
                    a7:f1:78:4d:14:56:79:31:8e:a7:3c:7c:78:e7:52:
                    02:66:48:e2:e3:a5:31:2e:75:76:b8:f1:3a:8f:52:
                    a7:e8:ff:96:c3:8b:6d:bb:30:bd:32:9c:c1:f7:35:
                    f3:63:6d:f4:91:84:27:5f:ce:4b:65:60:18:28:9e:
                    3c:cd:7d:47:b7:7e:5b:95:08:35:41:38:3b:92:61:
                    cc:dc:0b:30:fe:33:b4:3b:3b:8b:45:97:3d:26:7a:
                    a6:69:d4:e4:df:ee:5f:57:34:d6:d9:2e:6f:b4:06:
                    34:50:b1:54:82:f2:bc:58:9d:62:33:79:a2:f6:0e:
                    fe:b1:12:dd:35:eb:7f:ac:cb:b0:e1:87:e6:a7:7f:
                    d1:99:9c:d8:0b:fc:c5:7f:5c:27:ec:5f:65:3a:65:
                    60:fb:39:98:46:78:d5:c9:8a:54:37:72:a8:96:fd:
                    66:6f:e5:cc:cc:d8:1f:9c:0e:cd:e5:83:7d:6a:bd:
                    02:ba:a8:70:b0:f7:c6:07:7d:e6:c2:b2:bf:9c:58:
                    30:72:75:e2:38:13:d9:70:96:a0:41:75:f3:ba:0b:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:4B:AF:64:C9:C1:B9:92:73:C7:C3:CF:FB:09:81:18:64:A1:DE
            X509v3 Authority Key Identifier:
                keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.238.0/23
                IPv6:
                  2001:df0:4240::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:a8:e6:c2:18:e3:e4:65:7e:9f:56:7a:2d:2b:f3:44:d9:
         73:09:75:96:e6:65:4e:03:0a:fe:06:20:86:9d:9d:bd:47:df:
         dd:5d:e9:e5:6c:2a:51:99:99:a3:96:95:91:de:fa:76:6f:3a:
         d4:4b:45:c4:b6:87:44:57:73:5a:25:a3:a4:37:99:0f:97:13:
         81:67:a9:d9:1c:e5:cd:8a:6b:c6:38:fa:a6:60:7e:41:ea:8d:
         cf:65:3c:bc:b8:a7:35:77:e3:de:2d:dd:a0:b9:c9:bd:e4:9d:
         35:ad:93:34:21:20:2b:1e:81:ad:c6:7c:1d:bc:ef:af:ad:d5:
         47:ac:f7:b9:40:d5:bc:ba:d3:9b:18:1e:10:a6:a2:ec:72:77:
         bf:fb:e8:d4:e2:84:c6:90:50:bc:61:91:46:d3:68:37:0a:3a:
         7f:51:ed:df:d1:29:72:be:8f:2c:c3:0c:68:31:2c:ac:d6:8a:
         cc:6e:c9:83:8f:7c:e6:b8:a9:89:3b:4e:26:8d:99:2f:a8:f9:
         b5:ca:ce:be:06:b4:17:01:ca:6b:a5:69:be:bf:8a:6f:1c:90:
         39:8b:25:81:a1:fe:41:8e:71:98:f6:84:e0:f3:3b:0c:ed:01:
         2c:cb:51:37:76:3f:75:15:7e:29:7e:bb:47:1a:4a:54:ce:af:
         f8:cf:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:17 2026 by rpki-client