Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa
File:                     9682ACDE16A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier:          LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=
Subject key identifier:   DF:2B:9D:81:EC:D9:AE:CC:29:BC:F0:51:0D:AA:C8:25:49:CD:AA:C9
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       02F6
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:53:24 +0000
ROA not before:           Sat 31 Jan 2026 01:20:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56294
IP address blocks:        103.177.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Jan 31 01:20:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a436c4-e725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:ae:ce:0b:7d:ab:91:83:c8:b0:9c:4e:51:
                    23:7a:7d:df:c0:a5:b2:f5:04:f5:1b:ca:91:aa:85:
                    9d:71:54:13:d9:b7:c0:ea:5b:ca:94:e3:53:8b:e0:
                    c3:4b:d2:76:fc:4b:a9:aa:df:26:e2:46:a5:42:fb:
                    ed:48:00:ea:77:97:eb:62:46:29:28:42:57:b4:ca:
                    0d:9b:16:44:e2:c3:f4:92:3d:ce:e6:8b:7a:22:8c:
                    ba:a1:3d:10:5b:ad:88:05:7f:07:10:a3:4d:6a:a9:
                    33:a0:00:33:e8:d9:df:e3:12:ec:2d:05:68:3a:3c:
                    3b:ba:79:62:41:08:ea:d6:99:7e:35:b6:cc:16:7d:
                    77:0a:3e:40:af:83:e9:a6:44:90:ba:36:3f:00:a6:
                    9c:65:19:ba:4f:79:4b:9a:77:8a:6d:25:9b:89:b9:
                    36:9e:e0:e2:b2:18:b4:a0:92:b5:78:63:d1:3d:ea:
                    ad:93:0f:e0:17:9c:7e:0e:5c:38:1f:c6:28:ee:ca:
                    c3:ff:37:53:20:77:09:d7:32:6f:56:ac:5f:4b:41:
                    96:c3:6f:2f:45:90:e2:62:41:a0:1e:8e:43:97:6c:
                    a0:0a:f1:45:47:f6:be:96:78:43:37:5a:ce:95:7c:
                    a3:f3:8a:ff:a4:7a:5d:21:ce:18:84:87:6e:25:51:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2B:9D:81:EC:D9:AE:CC:29:BC:F0:51:0D:AA:C8:25:49:CD:AA:C9
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:a2:d2:ae:8e:55:5c:d6:27:33:ba:5d:8a:bf:35:b9:09:
         67:79:77:83:44:67:a8:51:e9:ec:fc:4e:39:01:a1:1b:d9:08:
         d4:3f:76:f1:27:3e:7d:0f:3a:05:81:d5:52:d5:aa:7b:42:d5:
         7c:ca:ff:e8:c8:a1:96:1a:05:82:0f:28:3f:c4:0e:f4:26:e1:
         d0:76:3c:c9:4f:c1:20:65:3a:c3:6c:d2:a3:ba:47:6e:7a:f2:
         90:d3:9b:27:17:1e:9e:db:31:64:df:5b:5c:5b:1e:73:c5:f5:
         85:c7:8c:d1:b8:75:72:c7:a6:6f:f1:8a:23:96:49:84:83:5f:
         6e:da:1c:ba:5b:4b:95:7c:fc:a5:ec:81:54:15:76:04:af:ea:
         14:b7:af:40:7b:97:6e:77:77:1a:7e:bc:b8:35:e5:92:95:93:
         28:c8:64:fb:74:49:5d:10:96:54:df:60:8a:48:db:59:50:f7:
         2d:18:78:e3:ef:5f:69:36:17:a3:05:50:82:22:c3:9d:6c:9e:
         37:72:ca:6f:2a:e7:ad:a6:a8:2b:68:4c:42:d4:9b:df:09:18:
         6f:3d:c6:3e:7a:7b:f3:69:56:68:50:35:10:45:09:10:2b:20:
         92:8f:a6:4e:b3:39:c4:18:02:3a:d6:dd:ae:e8:4a:db:72:9a:
         a8:3f:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:08 2026 by rpki-client