Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
File:                     1FC6B062419811EAA268D964C4F9AE02.roa (raw, json)
Hash identifier:          hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=
Subject key identifier:   2A:0E:78:30:2A:EB:5C:CE:05:9B:23:BD:E7:0D:6F:60:B6:2B:78:36
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0BBF
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:02:30 +0000
ROA not before:           Tue 02 Sep 2025 19:39:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9919
IP address blocks:        103.246.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Sep  2 19:39:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47126-def8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:a0:9c:74:a8:e3:37:8a:21:75:f5:53:7c:
                    b9:17:cc:7d:de:2c:0c:cc:ab:61:c0:07:66:07:0f:
                    f8:70:57:b4:3c:41:31:79:aa:ba:3e:db:97:2c:02:
                    5c:87:3f:e5:fd:aa:80:fb:10:c9:a8:2f:47:22:b5:
                    04:8e:6a:d4:b2:3d:c5:c1:67:44:dd:4f:0b:6a:be:
                    fa:cf:be:f2:23:fe:4b:42:7c:9f:4b:28:6b:0c:1d:
                    a9:e4:8d:61:fd:0b:70:11:ed:d3:6c:35:1c:5b:de:
                    84:eb:9e:0c:9f:b5:3a:b9:38:b3:29:0c:fa:7d:ee:
                    c3:3a:a3:1a:b8:e5:0f:56:59:08:43:a0:ea:bd:44:
                    a3:83:c7:6d:82:c4:50:e9:46:74:cc:34:93:2a:4e:
                    2c:75:7f:da:9e:3b:74:fc:87:2a:93:62:bc:6d:c9:
                    45:d0:c7:f1:5b:c3:04:ba:fc:11:0f:06:8c:a0:4d:
                    7a:3f:f7:4d:1a:fe:d3:81:83:43:67:89:1f:f3:32:
                    a3:56:8d:13:87:5c:e1:e4:dc:fc:64:ae:34:72:71:
                    ca:37:9b:36:b2:b5:67:01:93:59:fb:66:c2:fe:9f:
                    4c:43:1a:d7:1a:b2:33:96:de:60:b7:13:bd:6d:c4:
                    a1:2d:69:ea:d7:e9:98:c4:3a:28:e2:4a:78:8e:55:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0E:78:30:2A:EB:5C:CE:05:9B:23:BD:E7:0D:6F:60:B6:2B:78:36
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:95:88:00:3a:84:87:79:55:f2:30:68:00:52:5d:eb:89:17:
         5f:38:0a:eb:fc:a0:65:ca:7e:6b:87:18:03:c1:d2:8f:6c:3a:
         54:2d:91:d3:65:29:5f:31:03:8a:94:42:17:f3:26:97:87:06:
         e4:52:bf:79:06:77:43:a7:2c:9e:a4:ab:99:fb:ce:0c:53:be:
         1f:c2:2b:03:d6:c2:1d:e4:8a:14:d7:84:1f:dd:b1:c2:1b:7e:
         91:82:d2:ec:fc:ec:56:5c:6c:19:36:d0:bb:ea:24:67:8a:a0:
         3b:fa:a5:93:8e:73:31:8a:92:05:fb:a6:d4:52:ea:40:01:e8:
         9d:a6:de:a0:df:23:a8:93:d1:4a:c4:22:cd:c7:70:ca:65:3a:
         ac:d1:8f:e0:f9:10:06:3f:73:ea:6a:49:36:ab:b1:d5:01:08:
         56:29:d6:48:9d:16:49:17:b1:37:03:51:b7:5f:60:13:1e:aa:
         f1:8d:d1:18:ae:96:ff:c6:2c:44:76:7b:f1:ba:6d:cd:39:04:
         2a:8a:7e:1c:3e:9c:06:e9:11:64:cf:0e:e2:1f:e2:12:9d:2e:
         ca:e4:0f:02:77:3c:cd:3e:49:ad:b2:9e:f1:5e:a6:d4:8c:81:
         92:59:01:98:95:6d:e2:92:82:44:07:92:c3:4f:a2:4c:7a:4f:
         1c:ca:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:58 2026 by rpki-client