Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa
File:                     04A9BC6EDAC011EE94B8705AC4F9AE02.roa (raw, json)
Hash identifier:          CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=
Subject key identifier:   A5:6E:02:D7:E6:C4:31:81:4D:25:57:45:30:DB:B7:2F:E5:30:2D:D8
Certificate issuer:       /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial:       01AC
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:45:41 +0000
ROA not before:           Thu 29 Jan 2026 03:23:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     199524
IP address blocks:        103.178.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
                          rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
        Validity
            Not Before: Jan 29 03:23:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a295-7f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:53:b5:90:9a:23:1b:ca:97:94:a4:fa:c0:
                    71:1a:19:3e:3f:44:dd:fb:3b:66:e1:57:e2:cd:c9:
                    04:fd:48:3e:8e:7a:8c:d3:0e:af:92:f4:63:19:7d:
                    4c:b2:58:c6:37:1d:08:30:42:69:2f:e3:22:54:de:
                    b1:d8:9d:e1:1a:bc:cb:96:c0:c5:1a:9b:3c:56:b0:
                    71:54:50:89:e8:12:b2:09:1b:66:63:57:51:c0:e3:
                    4a:71:de:df:1d:5c:55:24:35:4e:8f:4a:4f:4d:dd:
                    9d:10:8a:63:0c:41:d6:48:21:c9:51:21:5f:77:fe:
                    fe:2f:5b:a7:a6:92:61:1b:d1:bc:31:b9:11:de:28:
                    70:c4:ce:9b:7d:65:9d:d2:3f:be:fd:be:ac:db:85:
                    60:b2:97:41:4f:ed:89:9c:f3:71:a3:6a:0f:45:0d:
                    3b:01:70:d9:94:c6:68:5d:15:8b:5f:1d:9d:30:42:
                    5c:4f:58:ff:48:12:a7:c9:04:bd:19:46:d9:6e:0b:
                    d1:eb:6c:6e:56:4c:a9:68:9c:ae:2f:4e:9f:af:01:
                    11:65:c0:b7:a3:05:61:3b:f2:87:e8:ae:21:3d:33:
                    05:df:7c:2a:6e:18:c3:ca:bb:50:9f:6a:db:27:0e:
                    47:ab:bc:c1:31:f3:bd:c8:48:52:d0:0d:40:a4:6e:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:02:D7:E6:C4:31:81:4D:25:57:45:30:DB:B7:2F:E5:30:2D:D8
            X509v3 Authority Key Identifier:
                keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:b9:4e:08:d4:c1:46:b9:2f:d9:f1:57:c3:c8:43:06:b9:
         46:fd:3f:82:e4:ef:c2:92:0e:25:58:ad:c9:1c:66:20:24:19:
         db:d7:ea:c0:65:de:95:a0:95:e1:8d:8f:86:72:ed:73:0e:1d:
         4b:82:5d:96:9e:fd:d5:29:c7:4a:1c:27:1c:bf:70:d4:84:61:
         00:91:f8:16:d1:8f:01:fe:d3:29:fc:2c:81:84:fe:13:67:85:
         71:ff:67:61:8e:32:60:12:71:92:c2:cc:77:61:42:a0:1e:4d:
         63:0c:d9:66:6c:84:7f:a8:2b:f8:ce:35:bc:2d:34:9d:67:6e:
         bc:18:d7:2c:bb:43:89:47:2b:1a:4d:ed:a2:78:69:8a:e8:33:
         35:f3:99:95:e4:61:5d:d4:87:52:e7:b6:46:94:8a:f1:4d:46:
         d7:f5:02:7d:a5:84:55:e7:62:3e:9d:68:81:59:8f:c6:92:51:
         40:dc:45:85:7a:3c:26:2e:3c:2d:5f:f6:9a:e2:36:02:30:b6:
         e1:fb:8b:73:83:a0:a9:9c:ec:07:b4:b9:cb:ee:16:d1:1a:91:
         87:84:f6:f8:ae:a8:be:2d:5e:f3:1b:0c:ba:15:23:6b:82:16:
         d9:47:74:64:53:36:e1:72:6e:c3:93:00:27:47:56:29:a1:51:
         da:c0:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:00 2026 by rpki-client