Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa
File:                     CB89040A73EA11EC8A823312C4F9AE02.roa (raw, json)
Hash identifier:          JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=
Subject key identifier:   68:52:DC:AA:2F:09:E4:4B:09:40:57:A9:52:FE:CE:70:88:57:55:20
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       056C
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:42:44 +0000
ROA not before:           Sat 04 Oct 2025 23:55:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63473
IP address blocks:        103.173.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Oct  4 23:55:26 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43444-3437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:72:e8:1e:30:b9:78:1d:13:13:02:b6:93:
                    02:70:83:16:fc:dc:19:74:11:96:13:ab:39:91:96:
                    f2:1c:99:71:41:25:3e:5b:87:79:26:92:d1:91:a4:
                    7e:ac:27:f8:c9:51:99:26:87:27:2b:9c:a2:7e:76:
                    15:16:9c:18:98:b4:a6:92:f2:8f:22:eb:27:4f:04:
                    36:12:f7:bb:c8:da:db:d6:9d:81:02:6e:21:63:7a:
                    8e:a0:fe:f9:e1:f8:57:54:d0:12:0a:72:8d:d7:18:
                    30:dc:10:42:7a:d1:e1:59:d4:c5:17:9a:07:69:d9:
                    a4:98:59:dc:ac:76:77:8f:e5:5f:17:ee:8c:4f:8f:
                    99:26:2d:59:6b:22:03:27:53:48:43:e6:f5:11:6c:
                    c6:79:fa:13:4d:f5:41:20:88:51:b6:a9:14:30:a7:
                    bf:9d:eb:5d:ea:30:55:d0:f9:3e:d5:8c:9a:3b:f5:
                    ce:b2:ff:fc:56:fe:5c:ac:3a:37:7a:ae:7d:84:ca:
                    44:70:c5:ce:8f:b0:95:80:d8:e3:40:8e:33:36:c5:
                    5c:f1:a8:44:a3:83:d6:e6:5e:3f:4e:ea:50:5e:c9:
                    9a:19:f0:95:c6:0c:5c:ad:c6:c0:28:0c:ba:81:4b:
                    ea:74:1d:db:fa:93:66:4f:90:ff:a5:df:9b:aa:2d:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:52:DC:AA:2F:09:E4:4B:09:40:57:A9:52:FE:CE:70:88:57:55:20
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:44:1e:3e:f0:ab:6d:1a:97:8d:ca:e1:4c:97:c0:f8:54:60:
         5d:05:40:ee:58:15:e4:38:20:64:12:55:ad:36:e2:dd:ca:39:
         09:47:7f:2d:6c:69:a1:28:57:ae:1f:45:00:1f:95:4f:91:55:
         a2:df:66:5a:fd:20:f5:c6:9a:8f:d6:d1:da:f3:b4:bd:47:55:
         92:ff:5c:b2:0e:4c:39:d1:b9:31:91:20:0d:19:7e:b9:5d:3c:
         c1:ce:34:f0:33:51:4c:32:ba:2d:22:1b:30:47:73:17:2c:c1:
         1a:47:59:11:31:88:3b:c9:67:11:79:d6:ab:4b:0b:3f:66:8b:
         19:c6:77:ad:14:bf:05:50:e4:97:43:26:e7:cd:28:5a:69:a3:
         36:7c:2b:64:43:be:89:a0:d3:60:56:55:9b:bc:a1:21:b1:ce:
         71:a0:17:e6:5b:dc:dd:0a:50:01:47:ca:5d:66:06:c5:5e:db:
         bb:cd:12:37:79:96:64:03:75:da:72:58:f3:d9:4b:cf:a9:4e:
         a2:95:2e:f3:b2:6f:89:40:3e:da:aa:79:32:ce:a9:c7:d7:c4:
         20:a0:2d:af:52:82:b7:eb:a0:c3:53:c4:fd:1f:4f:02:5e:75:
         37:9b:b8:c1:16:96:3a:ad:30:cf:43:5a:41:bf:68:8f:78:6c:
         ed:a6:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:50 2026 by rpki-client