Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/FF170F921D0011F1B83A0561033D8C67.roa
File:                     FF170F921D0011F1B83A0561033D8C67.roa (raw, json)
Hash identifier:          1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=
Subject key identifier:   21:49:58:66:BE:B3:8B:D0:70:60:D3:CE:A6:BE:79:75:F8:9E:1C:5B
Certificate issuer:       /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
Certificate serial:       03
Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/FF170F921D0011F1B83A0561033D8C67.roa
Signing time:             Wed 11 Mar 2026 04:15:54 +0000
ROA not before:           Wed 11 Mar 2026 04:15:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9268
IP address blocks:        103.81.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl
                          rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
        Validity
            Not Before: Mar 11 04:15:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b0ec7a-19f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:d7:82:90:b4:8a:a7:4e:17:d6:69:9d:cb:
                    16:f6:00:d4:e1:2a:7f:62:13:f8:59:b2:2f:0a:87:
                    05:4a:d8:c9:30:0c:32:a2:72:32:e2:75:38:18:15:
                    a2:06:80:ae:17:b2:a8:9e:96:1a:50:04:b1:ad:8d:
                    ac:54:e0:97:02:e1:52:27:45:b5:b8:f8:22:bc:69:
                    11:0f:76:80:b9:e5:9c:86:51:84:60:6b:b8:78:14:
                    51:0d:35:7b:8d:41:52:1c:cb:fc:49:f0:c3:83:43:
                    ab:a1:8f:54:3e:5b:8e:9c:c3:ab:bb:ca:1c:71:b7:
                    87:ac:12:79:de:af:33:e9:34:04:97:cb:14:0a:0f:
                    30:be:4e:46:35:db:17:5c:79:93:0d:8d:08:42:63:
                    eb:b4:fb:af:f1:47:47:47:13:1f:00:c2:83:e0:15:
                    31:cd:47:49:7a:35:09:60:b2:00:18:9f:d4:f2:55:
                    b1:05:65:b2:db:f8:1b:92:b6:ce:1f:67:7e:f3:79:
                    f4:f5:91:86:52:96:d4:c0:26:60:34:bf:1d:28:34:
                    e6:99:40:99:d1:65:26:1d:e7:74:58:84:10:91:3c:
                    af:a4:38:72:e7:5c:d8:76:25:7d:52:45:9a:20:c1:
                    44:83:00:f4:79:cb:c7:8e:29:26:ba:69:c5:3f:fb:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:58:66:BE:B3:8B:D0:70:60:D3:CE:A6:BE:79:75:F8:9E:1C:5B
            X509v3 Authority Key Identifier:
                keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/FF170F921D0011F1B83A0561033D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:2d:2a:88:ca:02:58:13:9b:bd:a2:91:b6:c6:30:db:28:
         40:e8:38:b1:46:17:21:4c:9e:4f:0e:4b:c4:6d:0d:f2:79:c9:
         40:0d:6b:57:4f:6c:15:52:dd:ed:53:d9:91:99:fd:94:59:3d:
         e5:50:46:02:44:96:21:bf:b4:e4:6d:9b:01:03:5c:91:31:56:
         17:58:3e:0d:b2:ca:82:8e:8e:5d:51:05:73:04:c8:eb:1f:5c:
         52:46:dc:7f:72:4c:1e:e4:01:2b:7c:7a:ba:34:75:cc:33:4f:
         58:bd:c5:78:6e:16:d7:5b:d4:b3:52:a5:a9:62:e8:f0:e0:9a:
         34:42:e6:0f:51:88:e5:76:25:59:70:73:f7:46:d2:df:22:a7:
         f0:bc:9b:c1:78:db:0f:4a:b8:1a:b6:50:ee:96:5a:a8:06:6a:
         e8:d4:46:9f:43:38:c5:df:db:bd:79:27:28:b8:cc:b9:26:ed:
         17:5a:df:92:86:56:1b:16:99:ce:90:c8:f2:9a:ac:69:7c:1e:
         e4:d2:96:2a:56:d5:d3:28:db:3f:1e:a9:a9:5d:37:61:07:a6:
         6d:b2:d4:24:08:30:01:1c:e0:67:99:a5:b9:7d:58:b3:97:da:
         cd:2f:f6:42:f9:77:61:24:80:ee:c4:77:a1:30:dd:db:fb:3f:
         09:35:b2:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:30 2026 by rpki-client