Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
File:                     274A12F696FD11EF88F06237C4F9AE02.roa (raw, json)
Hash identifier:          MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=
Subject key identifier:   DA:6A:FA:6A:41:19:78:95:F1:A9:D2:03:95:EA:5A:42:06:85:51:69
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       0551
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:00:50 +0000
ROA not before:           Sun 02 Nov 2025 23:43:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     26548
IP address blocks:        103.175.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Nov  2 23:43:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a454a2-9fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:42:22:7c:4a:c8:89:a5:7d:30:09:ef:d6:
                    ce:7f:2c:aa:fe:85:86:2a:2b:78:36:30:33:9c:c8:
                    bd:a2:93:be:ae:33:ae:8c:a8:48:17:96:94:61:6c:
                    00:36:5d:c1:bc:98:46:c9:71:1f:b9:91:de:9b:3e:
                    ee:3d:3e:6d:70:35:da:f5:d6:18:b4:a9:ae:94:d9:
                    35:ff:ad:33:66:49:a8:94:73:2d:28:99:5f:95:ce:
                    9c:62:f7:7f:b4:1b:26:d3:94:df:9f:92:a2:1e:da:
                    c6:7b:b4:a0:f3:d0:ed:05:95:14:ca:80:21:e1:bf:
                    48:e1:3e:44:88:cc:36:7f:52:d8:ac:46:a2:a4:ff:
                    cd:79:d1:23:57:8d:65:e8:d4:91:90:4c:14:5d:b7:
                    d7:b4:6d:b0:74:35:80:37:58:d9:53:0d:48:2d:a6:
                    06:39:6e:d9:0f:9a:fb:a0:ae:17:70:44:2e:44:83:
                    a2:0b:52:0b:5d:43:2f:45:4c:d8:be:2a:e7:9f:de:
                    42:16:3b:b8:ff:2f:9a:69:83:a3:51:6b:25:79:d0:
                    cc:b6:63:57:ab:90:a2:07:76:cf:51:dd:b3:7e:aa:
                    54:db:de:78:da:f6:15:dd:eb:59:bf:4e:ae:19:c1:
                    c7:a3:44:89:93:cc:66:39:f5:d6:84:08:67:4f:ee:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:FA:6A:41:19:78:95:F1:A9:D2:03:95:EA:5A:42:06:85:51:69
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:b5:74:2b:04:9c:f9:7d:8a:96:8a:ff:aa:84:19:23:a3:
         9e:02:d2:a9:be:45:44:2d:fd:7a:57:70:44:e8:b5:27:39:a7:
         e9:34:67:8d:42:45:5d:24:98:a8:2f:27:d5:87:05:c5:83:fa:
         70:4c:ce:2b:8a:63:b1:79:19:13:ce:bc:24:67:6d:84:4c:2a:
         91:6e:61:b5:eb:4a:6c:55:f5:69:ab:73:4f:fa:0a:54:16:93:
         a5:62:9f:6c:9a:52:97:81:6e:36:1a:8b:24:f9:8b:70:c9:86:
         46:26:0c:cb:a6:c3:ce:61:75:82:ee:8c:5d:70:32:44:65:94:
         b2:45:27:ef:59:8c:cf:2d:2b:e6:c3:4d:c2:36:42:73:dc:bb:
         ea:61:d1:d9:f7:a5:28:5b:42:18:02:70:26:bf:7c:16:cd:c5:
         c7:32:84:e8:a3:5e:4c:6b:65:31:5e:6a:5c:45:f8:ce:f4:e2:
         8c:95:a5:42:ac:16:3a:a8:0d:fa:8a:cd:8d:b2:9e:92:4c:a5:
         88:df:bb:9c:de:3b:35:4b:a8:c8:9e:e6:49:6d:5c:d2:bb:0a:
         32:89:7a:c2:82:a2:61:8c:6d:c2:f2:b3:7d:3c:e3:ae:fd:b0:
         16:b5:96:c5:fb:a3:d1:c6:ee:69:f3:a1:b6:8f:9b:54:b2:1d:
         de:34:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:29 2026 by rpki-client