Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1E7D7344419811EAA268D964C4F9AE02.roa
File:                     1E7D7344419811EAA268D964C4F9AE02.roa (raw, json)
Hash identifier:          Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=
Subject key identifier:   60:4D:37:56:9D:9E:D2:69:73:26:B1:FF:CB:BA:A0:E5:23:D5:DF:0A
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0BBE
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1E7D7344419811EAA268D964C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:02:30 +0000
ROA not before:           Tue 02 Sep 2025 19:39:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17408
IP address blocks:        103.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Sep  2 19:39:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47125-576e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:6a:76:9d:6f:e0:b3:81:31:89:03:69:b5:
                    d7:22:01:6b:c8:e2:94:ff:81:9c:8c:07:1d:b2:6c:
                    d4:a8:ea:3c:d4:6e:4a:e9:9a:49:25:c4:10:a4:80:
                    69:7a:ca:5d:7d:b9:2f:f9:27:32:05:5d:48:57:09:
                    f2:50:fe:1a:9b:5b:24:5d:8c:10:fd:eb:1b:cd:2f:
                    6d:20:28:4f:98:ec:e0:1d:cd:a7:24:c8:cf:61:41:
                    c1:e0:35:5a:7d:64:86:9b:ec:a0:08:51:b2:4c:6c:
                    f3:df:d0:4d:97:a4:ed:07:f4:01:bc:d4:54:ec:e0:
                    59:c7:43:4d:5d:de:bf:e3:5c:80:70:5b:1d:2f:7e:
                    a3:78:0d:5f:13:b0:9a:3d:2c:94:a4:5b:a9:34:66:
                    ca:92:78:f0:7c:5a:e3:b5:fc:34:96:82:94:ba:82:
                    a0:be:da:77:9e:ec:17:6b:ec:23:1a:b2:e9:0c:c9:
                    ab:a1:ba:35:98:74:05:ed:6c:ca:c1:34:52:45:4e:
                    ff:68:24:e0:9b:1b:fc:a7:2d:67:5e:68:94:55:d8:
                    b9:a5:cd:0c:93:49:43:02:10:f8:d5:11:7a:df:9d:
                    52:9f:f9:67:1c:9b:91:81:c2:f8:b6:29:e8:76:8c:
                    e6:0b:c9:0e:22:fe:51:ce:82:4c:f8:79:a2:74:c2:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:37:56:9D:9E:D2:69:73:26:B1:FF:CB:BA:A0:E5:23:D5:DF:0A
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1E7D7344419811EAA268D964C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:33:95:b5:a7:ba:1d:81:b5:36:40:75:b4:2b:94:91:12:1e:
         7b:e2:ca:a5:48:28:0a:c8:c6:5f:96:5f:f4:bf:47:be:f5:92:
         0d:ea:5e:01:08:5d:1d:b4:54:2a:3c:fe:fc:ba:21:e2:c9:65:
         70:b4:71:6b:69:10:ad:0c:a0:c6:32:82:40:91:b2:64:a2:86:
         a7:2e:8f:e4:5a:f2:2e:69:6e:93:ff:f1:fb:a6:f1:0a:d3:9f:
         7a:c3:6b:90:d4:5d:ac:db:fb:dd:87:44:7b:db:22:78:3f:b3:
         40:45:0f:b3:d0:4b:11:d4:ae:0a:b5:7c:31:b1:2a:a7:7c:08:
         25:03:f5:ed:2c:31:a6:0a:87:c3:bb:b6:38:81:5f:f0:8d:3c:
         8c:56:fd:77:ae:9e:e3:54:16:68:21:42:d6:db:1b:6d:f5:7a:
         34:01:0c:db:97:fe:5b:0b:36:90:3f:85:63:bc:b6:af:8c:c8:
         22:00:93:25:9d:a8:98:9c:5b:77:8a:06:9e:a4:6a:05:6f:43:
         47:37:65:18:40:9c:28:03:15:33:e7:14:2c:0e:c3:91:09:ba:
         21:91:d0:16:09:c3:7e:b9:06:5b:21:39:e2:04:6c:c5:a4:40:
         70:e6:e8:df:87:3c:d6:66:d0:41:23:1a:90:16:5c:0c:ba:2a:
         20:78:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:45 2026 by rpki-client