Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
File:                     C09ED7E6804A11EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=
Subject key identifier:   15:62:16:34:32:CC:C7:B0:92:A2:E9:AA:B5:6C:88:B6:8D:84:9D:BE
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       03EE
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:50 +0000
ROA not before:           Fri 13 Feb 2026 00:20:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140224
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Feb 13 00:20:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a473ce-0e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:5f:cc:11:79:46:9e:62:d2:38:13:2f:bf:
                    43:e7:70:55:11:6e:c9:35:a9:3f:1c:29:09:db:c5:
                    a9:09:c5:72:79:2e:6c:5e:8c:fd:dd:c6:0a:14:59:
                    7e:56:89:d8:99:65:ad:c2:d6:c4:09:bd:cf:d5:76:
                    e3:f1:b6:89:c9:9d:89:50:74:33:20:ab:8c:22:08:
                    7e:4d:1d:73:93:ed:38:53:77:b6:c9:2c:3e:08:b6:
                    38:cf:6e:00:99:51:37:6c:5e:c8:20:7b:17:c1:a2:
                    e6:fc:16:d6:7e:05:e9:49:fd:1a:bd:64:6d:fb:84:
                    29:9b:4d:06:d6:83:23:6f:e4:dd:e8:12:c1:e3:eb:
                    b0:4c:4f:af:0b:fc:17:97:db:8c:f0:7a:34:98:b9:
                    b1:29:c6:0c:48:fe:4b:2c:2e:8e:63:0c:0e:c0:b1:
                    ed:45:c7:bc:69:7f:f0:45:4c:48:23:28:1c:56:51:
                    12:1d:10:06:87:24:b8:25:a4:82:11:b0:c4:b4:8b:
                    2d:40:9c:cd:95:dc:b6:5f:60:aa:67:4b:b9:80:98:
                    c8:df:93:8a:61:fe:08:c0:04:99:30:62:75:88:d8:
                    21:8a:77:d2:aa:b1:fe:da:37:05:8c:27:46:5f:38:
                    6a:56:ce:a0:62:ea:21:e3:d6:81:ba:bf:06:9d:0d:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:16:34:32:CC:C7:B0:92:A2:E9:AA:B5:6C:88:B6:8D:84:9D:BE
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:3a:7b:90:16:22:ad:ab:ca:b8:2b:e0:8c:59:f2:ad:13:f7:
         53:08:83:c1:ff:1e:a1:9b:05:b6:b7:d9:af:4a:14:f4:9f:36:
         a2:59:a9:b7:c7:15:88:89:b1:dc:16:b4:dc:b8:78:23:00:5c:
         5d:81:34:ea:77:e4:05:3e:dc:89:c5:b5:4c:eb:bf:38:71:c0:
         9f:97:c3:a1:9b:05:e2:99:a5:c4:4b:60:17:c9:75:ba:8e:6f:
         05:1d:a9:68:6d:be:39:77:9b:4f:cd:2f:9e:53:cd:9f:46:c9:
         4b:ee:96:e4:10:11:35:df:32:e0:3c:ad:4f:b6:62:da:1a:1c:
         84:08:3e:41:03:45:5e:e1:a8:55:68:23:5c:3a:f4:d7:e8:b1:
         26:94:0d:c7:c5:d6:8f:b5:6a:16:89:d7:aa:1e:d5:bc:51:8c:
         1e:4d:ba:4d:bc:4e:5f:51:1d:4f:2a:3a:3f:b2:e3:6c:db:50:
         5a:74:f5:19:dd:34:db:33:f3:26:ce:30:66:ad:60:49:50:15:
         11:db:90:79:43:c2:71:82:f3:01:9d:10:fe:bf:34:b1:16:29:
         47:5c:cb:ca:85:59:81:bb:4d:ad:12:af:97:2a:28:7c:fb:69:
         fc:d7:01:83:fa:3d:72:f0:0a:67:14:95:e1:dd:37:4d:64:3a:
         36:db:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:29 2026 by rpki-client