Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa
File:                     178E201EA51911EDB711B90AC4F9AE02.roa (raw, json)
Hash identifier:          2y6pngdy3VaJox0s8pfK9rakpIMWuD3VB+a0Z5gajdg=
Subject key identifier:   D5:88:2C:9D:9D:DA:A3:8E:3C:24:68:A7:6B:5F:47:CC:C5:3B:C7:86
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       0756
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:04:44 +0000
ROA not before:           Wed 18 Feb 2026 21:18:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139282
IP address blocks:        103.162.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Feb 18 21:18:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a471ac-e2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:03:21:75:e2:86:88:88:1c:7c:e2:c7:89:
                    f4:1d:0f:79:b5:19:c4:e6:d1:7d:1e:87:00:66:20:
                    ad:7f:00:53:d4:6c:5e:4d:41:62:d8:bd:ab:e8:b1:
                    a6:8f:7c:58:8b:25:c8:f0:bf:5e:b1:b9:1a:a0:ea:
                    2c:4d:b9:ad:7d:ac:29:d8:46:13:ad:a2:3e:c2:f5:
                    5a:9a:8f:1e:ab:f4:f8:5b:db:5b:6e:a0:79:75:cb:
                    4a:89:03:3c:3a:49:bc:81:6e:73:3e:88:99:d0:aa:
                    09:43:81:77:37:1e:c1:f5:1b:25:cf:97:02:fe:32:
                    f8:8c:ec:8f:12:1e:d9:ab:cf:f3:18:5b:c7:7a:5d:
                    aa:1a:53:76:5d:9e:eb:00:2e:5a:c4:5e:b6:b1:51:
                    45:7d:f9:06:aa:f5:33:8c:18:a0:b4:8b:30:1a:4a:
                    08:01:aa:e2:48:aa:a6:90:ca:66:5b:81:8f:6f:ac:
                    2e:ff:de:60:40:07:ec:48:8d:67:f6:2d:7e:c8:24:
                    8d:15:a9:33:be:e7:e8:41:bc:13:e6:43:ec:75:45:
                    fc:ed:73:59:a8:c4:2a:60:8d:87:76:0a:80:ff:d4:
                    f8:4c:4e:fb:4a:2c:27:aa:65:bd:af:36:06:ba:99:
                    58:94:5f:1c:2d:7c:3d:7f:57:c2:0c:67:c2:73:c8:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:2C:9D:9D:DA:A3:8E:3C:24:68:A7:6B:5F:47:CC:C5:3B:C7:86
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:d0:c6:7d:e0:94:a7:f1:d7:c3:42:73:c0:44:b5:21:bb:
         af:59:0e:2c:37:f9:9e:33:e3:b6:dd:5c:44:24:c3:e9:f6:56:
         a8:aa:ad:8d:73:26:e9:dc:e3:53:ee:57:a2:29:25:66:a9:50:
         55:29:50:81:e1:9c:dd:9d:6c:48:fb:e5:71:a5:50:2b:89:8e:
         bc:f4:b7:cf:b4:a5:aa:ce:74:f4:59:fa:65:2a:ca:bf:06:c7:
         af:c6:1a:95:1b:98:83:12:f2:5b:ed:ca:35:4e:a8:76:e9:53:
         69:58:f7:58:70:6b:b2:fc:31:ee:7d:3a:c5:1d:5d:cf:ab:1d:
         f5:72:4e:0a:b7:dd:fc:15:c5:4e:53:97:d0:f6:9b:09:0e:d8:
         fc:6c:21:21:dc:06:ea:a4:28:21:9f:48:57:75:79:35:81:7e:
         d5:11:ea:03:46:bc:90:c3:4c:6a:30:27:3e:37:33:04:98:d6:
         93:9f:4e:d7:67:4c:96:b9:45:be:c3:7e:87:5e:85:94:65:3a:
         ab:e5:a5:97:41:19:e1:e4:ab:8e:25:16:0e:8c:2d:79:db:24:
         ee:96:02:a8:de:24:28:ba:39:88:f7:a9:86:e5:ba:f4:73:5a:
         3b:97:85:3d:f9:7b:8b:b1:c1:55:9c:86:ce:20:3d:8d:b4:e9:
         3b:62:21:37
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1
RjE4MzQ5RjcwHhcNMjYwMjE4MjExODU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzFhYy1lMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAMDIXXihoiIHHzix4n0HQ95tRnE5tF9HocAZiCtfwBT1GxeTUFi2L2r6LGm
j3xYiyXI8L9esbkaoOosTbmtfawp2EYTraI+wvVamo8eq/T4W9tbbqB5dctKiQM8
Okm8gW5zPoiZ0KoJQ4F3Nx7B9Rslz5cC/jL4jOyPEh7Zq8/zGFvHel2qGlN2XZ7r
AC5axF62sVFFffkGqvUzjBigtIswGkoIAariSKqmkMpmW4GPb6wu/95gQAfsSI1n
9i1+yCSNFakzvufoQbwT5kPsdUX87XNZqMQqYI2HdgqA/9T4TE77SiwnqmW9rzYG
uplYlF8cLXw9f1fCDGfCc8gHwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNWILJ2d
2qOOPCRop2tfR8zFO8eGMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG
NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI2QzYvNThFOTlFOTQ2Rjc5MTFFQkE0RDIyMjg3QzRGOUFFMDIvMTc4RTIwMUVB
NTE5MTFFREI3MTFCOTBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6I5MA0GCSqGSIb3DQEBCwUAA4IBAQB8jNDGfeCUp/HXw0JzwES1
IbuvWQ4sN/meM+O23VxEJMPp9laoqq2Ncybp3ONT7leiKSVmqVBVKVCB4ZzdnWxI
++VxpVAriY689LfPtKWqznT0WfplKsq/BsevxhqVG5iDEvJb7co1Tqh26VNpWPdY
cGuy/DHufTrFHV3Pqx31ck4Kt938FcVOU5fQ9psJDtj8bCEh3AbqpCghn0hXdXk1
gX7VEeoDRryQw0xqMCc+NzMEmNaTn07XZ0yWuUW+w36HXoWUZTqr5aWXQRnh5KuO
JRYOjC152yTulgKo3iQoujmI96mG5br0c1o7l4U9+XuLscFVnIbOID2NtOk7YiE3
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:26 2026 by rpki-client