Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa
File:                     5D7779A6108A11EC9E1F3D49C4F9AE02.roa (raw, json)
Hash identifier:          MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=
Subject key identifier:   B1:D8:D0:C4:3C:B4:3C:60:95:7D:3C:A8:C9:07:19:7F:97:84:66:48
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       058E
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:08:40 +0000
ROA not before:           Fri 26 Sep 2025 23:56:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147017
IP address blocks:        103.173.2.0/23 maxlen: 23
                          103.173.2.0/24 maxlen: 24
                          103.173.3.0/24 maxlen: 24
                          2001:df7:8280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Sep 26 23:56:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a7f8-22fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:be:8b:a0:23:7d:d5:7a:57:d8:09:a1:a8:
                    6d:9c:b8:33:cb:8e:e5:8a:c1:c6:9f:95:eb:c7:d6:
                    01:3d:b7:28:e6:6f:10:9e:59:94:51:29:f6:5a:35:
                    af:5a:d2:00:ad:72:78:7c:87:dd:7d:0a:f6:12:11:
                    71:a2:7d:4a:95:e9:2f:8b:a5:80:18:d1:29:e5:16:
                    5a:43:57:84:61:2f:16:c2:71:83:0b:9b:a5:ec:cc:
                    df:da:92:76:0b:84:c7:9a:cb:3f:da:e6:41:de:55:
                    60:a1:fb:15:10:aa:e1:ce:f7:5a:65:68:bd:e5:0e:
                    69:56:97:a9:11:80:26:28:5c:2b:57:a6:19:d0:cc:
                    13:d3:c5:36:f2:da:fa:6d:95:bc:43:7b:bd:99:e8:
                    e8:73:77:79:9f:12:4e:3c:63:99:be:56:4f:1c:c7:
                    3b:42:6b:ce:ea:8f:46:3a:4a:62:0e:78:20:ca:a4:
                    ac:1a:06:5f:9c:b8:50:35:0d:fb:d8:c4:7b:35:9d:
                    70:11:a9:7c:65:59:4d:4f:f1:1e:9a:2f:1b:ba:b6:
                    90:c9:ba:54:ab:a7:f9:1d:ad:a7:cd:f7:ff:a9:14:
                    e8:b0:ed:07:70:8d:9d:51:b4:bd:d7:0c:a7:41:8b:
                    32:c2:ad:51:3b:0d:95:cc:57:f2:ac:59:cf:b3:f4:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:D0:C4:3C:B4:3C:60:95:7D:3C:A8:C9:07:19:7F:97:84:66:48
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/5D7779A6108A11EC9E1F3D49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.2.0/23
                IPv6:
                  2001:df7:8280::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:5d:8d:63:80:0c:c3:0b:b8:34:13:00:a4:37:e9:86:88:
         3a:41:e7:af:39:de:43:30:95:91:47:35:cb:34:d4:8d:72:b3:
         0a:d5:ad:d5:42:ea:14:49:e8:f4:08:27:cf:10:98:2e:79:c9:
         b4:1d:8e:e6:c7:50:c5:95:4f:e8:5c:33:40:4e:d1:bd:84:01:
         ef:41:95:70:e2:a5:c6:b7:1c:02:41:52:42:3e:03:03:f6:78:
         40:ad:fb:b7:1c:06:c0:56:ef:8b:cd:bc:df:59:44:16:42:4d:
         6c:53:5a:f4:e1:53:5d:20:db:da:98:5e:85:dc:dc:90:17:bb:
         0e:20:97:c6:d4:fb:d7:d6:77:b3:e6:50:81:25:2d:ee:1f:92:
         82:fb:d5:9c:17:57:6b:5a:8d:36:4a:c9:1a:88:e4:91:db:d9:
         94:cd:f7:16:ab:73:39:fd:d5:13:9b:c4:00:ce:7c:e5:b2:b2:
         7e:aa:85:1d:7f:b8:60:63:00:38:60:9b:bc:0f:8f:a7:12:59:
         12:75:43:ec:12:0f:f7:ef:50:f1:ce:86:40:0d:a2:ca:30:bd:
         98:16:e4:cf:b1:d0:d8:7e:c8:f5:66:24:57:13:10:6d:d6:ec:
         b0:e6:50:08:5f:d4:92:b1:93:8e:19:83:26:e5:7a:29:1a:1c:
         1c:86:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:12 2026 by rpki-client