Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
File:                     A8F83B2E202911F08EABDC87C4F9AE02.roa (raw, json)
Hash identifier:          Rb7qYVEqngyzVprIHtHroEk3Tc1sKvHHk4W+QyxuyQk=
Subject key identifier:   36:EA:FC:C0:E0:91:2F:F3:5E:7D:FC:B1:B4:AC:1F:52:E5:3C:48:84
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       016C
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:11 +0000
ROA not before:           Tue 19 Aug 2025 06:44:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142267
IP address blocks:        103.129.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Aug 19 06:44:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47e6f-c88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:46:d9:c3:11:7d:0b:c9:9f:75:aa:8c:bc:
                    34:f1:e1:c9:6f:d5:a8:18:3d:5d:ed:0e:28:12:9c:
                    fb:52:eb:dd:9c:4e:7f:36:cb:3d:6b:37:a8:c9:48:
                    64:24:33:94:bf:ff:11:03:e2:8c:9e:47:f2:ca:a6:
                    99:94:ee:73:0a:ec:2e:7d:d7:2b:79:dd:e9:29:7a:
                    02:30:1a:5a:cb:c7:c7:93:d8:5f:d3:1b:3a:d0:3c:
                    7b:5e:74:94:b5:2e:46:be:a7:90:a2:54:20:b5:da:
                    61:5c:2c:97:a0:fb:8e:66:12:2e:68:02:d2:5f:9c:
                    d7:89:13:19:a0:fc:78:e3:b8:f1:31:ad:88:3e:91:
                    ad:52:93:df:14:20:05:4c:47:51:3b:ee:eb:15:6f:
                    f5:6e:b2:fc:e9:6a:a3:04:ef:e6:ed:f1:2a:a8:e7:
                    3a:1d:04:c1:a1:cb:d2:4a:18:72:2b:47:39:4f:e6:
                    9f:d0:ae:3d:15:5f:a5:39:5d:52:84:bf:44:5f:ef:
                    c2:cc:1c:07:54:c2:1e:b3:35:fa:8f:fc:26:98:0c:
                    34:6f:d1:9f:be:be:10:c4:49:64:77:02:63:78:d0:
                    b5:e4:49:7f:54:7e:7b:62:36:5e:c2:00:dc:fc:1b:
                    b6:92:b0:f8:86:93:e5:2e:be:f4:85:2d:6c:5b:d2:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EA:FC:C0:E0:91:2F:F3:5E:7D:FC:B1:B4:AC:1F:52:E5:3C:48:84
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:2b:18:4b:5d:84:51:b3:f2:ed:2a:f3:c8:33:a6:35:1a:
         fd:8b:4c:49:ff:50:03:a6:fa:75:d8:ab:ef:25:59:96:a9:1e:
         f2:4d:1a:d4:7f:d3:bb:31:cd:ee:e9:46:69:64:c7:5c:d7:0b:
         3d:7b:28:41:96:7f:ff:e8:bd:b8:41:c1:83:31:88:fc:93:e3:
         d3:ee:9e:af:c9:ca:e4:0d:86:0e:3f:a5:44:96:24:36:99:e2:
         32:03:f4:b6:39:32:35:f8:c5:f0:e9:55:24:1c:fd:cb:97:54:
         b7:7b:3b:65:d4:5a:c2:74:43:08:6e:e2:b7:d7:10:c6:c2:89:
         a0:59:4b:72:0e:99:79:42:e3:da:b5:d1:a1:3e:83:10:9c:ec:
         1d:c2:af:0d:3e:5c:89:2c:8d:a3:95:d4:8b:7d:00:06:8b:d1:
         f5:13:8a:d9:d9:97:9a:0b:ad:76:8b:4d:c2:03:e7:6a:f5:22:
         b2:fe:82:ea:81:f6:05:eb:4f:ee:13:2b:b9:ec:ff:06:0b:08:
         3a:76:c9:4a:b7:4c:3e:a6:b6:a1:a9:bc:f1:8f:4a:5c:83:40:
         a2:06:3d:56:cc:c2:b7:0c:d1:08:16:50:b4:63:7b:8b:66:cd:
         23:8d:f0:72:dc:ac:53:87:c1:4d:50:a5:32:4e:48:ad:a5:15:
         58:95:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:07 2026 by rpki-client