Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa
File:                     2664BB64A4FE11ECBAF38E5BC4F9AE02.roa (raw, json)
Hash identifier:          TCdNteXnQsTSER2uOJLH0btkfwYJA4o4Y+7gnzo/0cY=
Subject key identifier:   CE:27:1C:73:7D:B0:64:27:6C:69:58:FB:A4:4D:30:C2:93:C3:6D:AA
Certificate issuer:       /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial:       047B
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa
Signing time:             Sat 21 Mar 2026 00:32:49 +0000
ROA not before:           Sat 21 Mar 2026 00:32:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136969
IP address blocks:        103.178.120.0/24 maxlen: 24
                          103.178.121.0/24 maxlen: 24
                          2001:df0:39c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
                          rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
        Validity
            Not Before: Mar 21 00:32:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69bde731-e69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:df:96:7b:00:fb:9a:32:92:40:90:41:d5:
                    86:b3:6f:b6:e7:25:c0:ce:4d:e6:3f:d6:f1:74:90:
                    13:a1:b5:49:c5:29:2f:1a:7c:41:1b:4a:09:87:09:
                    66:4d:3c:e8:e4:51:06:50:a1:df:9e:c1:2e:76:d9:
                    35:9a:e6:70:7c:25:bc:2e:cb:40:18:dc:7f:e2:0f:
                    f0:6c:b3:d4:ce:63:5f:0a:ea:bf:7f:d6:be:a2:9e:
                    e5:f7:21:90:c6:92:73:a5:23:45:32:b9:80:ad:33:
                    58:29:7d:42:af:94:3f:93:a5:ee:e2:b5:1d:d2:3f:
                    f3:1a:e7:42:26:b4:83:50:89:be:eb:51:b8:1a:01:
                    e1:c5:b6:b6:3a:fb:c0:5a:ff:cf:71:a1:78:cb:b7:
                    d4:57:4f:00:30:92:3a:19:08:67:9f:ff:35:1b:6b:
                    85:a8:4c:20:7f:52:11:45:b5:1f:6f:d5:9d:ae:0d:
                    c8:15:4c:f8:0a:0a:47:15:19:6a:86:5b:d6:6a:86:
                    1a:24:6c:a3:69:9b:50:8e:d6:9f:f1:17:db:5a:d0:
                    ec:20:9b:2b:ce:ee:52:ed:d8:81:9f:7b:ce:92:32:
                    09:77:60:e7:61:a2:54:41:33:84:8a:9a:27:ad:99:
                    14:1c:d8:ab:b8:2b:5a:09:1c:64:ab:26:04:99:e8:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:1C:73:7D:B0:64:27:6C:69:58:FB:A4:4D:30:C2:93:C3:6D:AA
            X509v3 Authority Key Identifier:
                keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.120.0/23
                IPv6:
                  2001:df0:39c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:65:c4:18:58:fb:80:bd:6c:d3:f7:7c:fa:7d:90:45:b5:c9:
         80:6c:d3:57:4b:53:83:02:81:0d:38:ce:1f:14:71:3a:ff:d4:
         14:7a:82:a2:14:bc:c2:03:a0:ad:96:fa:5a:66:d4:cc:0b:f0:
         db:e1:a6:c7:02:ff:0e:43:99:19:05:ec:65:2a:be:20:69:0b:
         c0:40:d1:d1:32:9b:62:42:3a:1f:f0:45:e3:4e:58:e3:c4:1c:
         42:84:2b:11:4f:69:2b:6e:f9:a9:16:c2:3c:ae:cb:c1:33:cb:
         d4:df:d2:d9:6a:13:20:06:f4:d4:66:9e:af:5e:6b:05:42:70:
         f7:c9:d6:3d:c8:2c:01:2d:0e:f1:e6:fa:c2:45:06:27:6c:c8:
         cb:f8:69:4e:10:32:0a:e4:bf:30:c9:72:2a:7d:07:1c:61:1e:
         71:11:f2:2c:d7:bc:44:6c:79:4a:a8:fe:44:4e:ec:6d:9d:95:
         b4:26:46:0c:a7:6f:dd:5e:6d:bd:6c:88:d0:1f:9d:f2:8e:2d:
         4f:cc:4a:50:10:ef:03:3f:e1:04:c0:2f:e8:b9:43:5e:1d:ae:
         9d:b5:41:97:af:8f:94:e3:0c:30:fb:56:3b:c0:6c:92:6b:31:
         73:ce:93:d3:71:77:09:99:9f:01:92:e7:12:d3:d5:cc:77:16:
         56:4e:a4:7a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBGNUQxMTAvBgNVBAUTKDE1RUNCRUI4NUI2OTNGMTI1OEE5MDM2NjdBRjAyQzYy
N0Y2OUFEQzkwHhcNMjYwMzIxMDAzMjQ5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJkZTczMS1lNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4/flnsA+5oykkCQQdWGs2+25yXAzk3mP9bxdJATobVJxSkvGnxBG0oJhwlm
TTzo5FEGUKHfnsEudtk1muZwfCW8LstAGNx/4g/wbLPUzmNfCuq/f9a+op7l9yGQ
xpJzpSNFMrmArTNYKX1Cr5Q/k6Xu4rUd0j/zGudCJrSDUIm+61G4GgHhxba2OvvA
Wv/PcaF4y7fUV08AMJI6GQhnn/81G2uFqEwgf1IRRbUfb9Wdrg3IFUz4CgpHFRlq
hlvWaoYaJGyjaZtQjtaf8RfbWtDsIJsrzu5S7diBn3vOkjIJd2DnYaJUQTOEipon
rZkUHNiruCtaCRxkqyYEmegftwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM4nHHN9
sGQnbGlY+6RNMMKTw22qMB8GA1UdIwQYMBaAFBXsvrhbaT8SWKkDZnrwLGJ/aa3J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEY1RC85RDU0QzE3Qzg4
QkQxMUVDOTFCODY5NDlDNEY5QUUwMi9GZXktdUZ0cFB4SllxUU5tZXZBc1luOXBy
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZleS11RnRwUHhKWXFRTm1ldkFzWW45cHJjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBGNUQvOUQ1NEMxN0M4OEJEMTFFQzkxQjg2OTQ5QzRGOUFFMDIvMjY2NEJCNjRB
NEZFMTFFQ0JBRjM4RTVCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7J4MA8EAgACMAkDBwAgAQ3wOcAwDQYJKoZIhvcNAQELBQADggEB
AHBlxBhY+4C9bNP3fPp9kEW1yYBs01dLU4MCgQ04zh8UcTr/1BR6gqIUvMIDoK2W
+lpm1MwL8NvhpscC/w5DmRkF7GUqviBpC8BA0dEym2JCOh/wReNOWOPEHEKEKxFP
aStu+akWwjyuy8Ezy9Tf0tlqEyAG9NRmnq9eawVCcPfJ1j3ILAEtDvHm+sJFBids
yMv4aU4QMgrkvzDJcip9BxxhHnER8izXvERseUqo/kRO7G2dlbQmRgynb91ebb1s
iNAfnfKOLU/MSlAQ7wM/4QTAL+i5Q14drp21QZevj5TjDDD7VjvAbJJrMXPOk9Nx
dwmZnwGS5xLT1cx3FlZOpHo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:02 2026 by rpki-client