Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File:                     B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier:          gcy8Fq5tVijcJKVaFyBlkLcenhJ0nLFXzBAhm0P+3TU=
Subject key identifier:   EE:96:C9:03:BF:19:44:F8:1A:BA:5F:8C:A1:C4:1B:32:B9:21:3E:FD
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       0202
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:22:12 +0000
ROA not before:           Wed 24 Dec 2025 09:24:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142132
IP address blocks:        103.166.174.0/24 maxlen: 24
                          103.166.175.0/24 maxlen: 24
                          2401:b0e0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Dec 24 09:24:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a51e84-9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:98:58:c1:75:43:51:bf:8b:b7:d7:7f:6c:
                    68:35:35:4c:49:64:87:93:51:b6:f6:42:1f:9d:46:
                    02:7f:12:7d:e0:30:00:40:ed:d4:76:58:c3:53:08:
                    d4:2f:68:cb:5a:cd:bc:75:30:bf:c1:2b:94:d9:ed:
                    29:f9:76:ed:25:cb:9d:8b:be:80:3f:74:e6:69:a7:
                    db:cb:d3:72:27:61:29:66:63:2f:6d:6a:e6:cd:48:
                    b8:cf:25:4a:de:90:60:64:63:a9:07:d0:ea:48:0c:
                    9d:ed:3a:4e:75:22:70:35:71:48:76:0a:5e:88:3a:
                    0f:2f:bc:e9:87:7a:07:4c:9a:ec:e2:ec:98:a2:ef:
                    1f:1d:15:b0:41:f2:88:85:32:bf:13:08:82:ed:6f:
                    f4:4c:13:23:4a:43:51:56:bb:6d:66:ca:d0:a6:bb:
                    dc:92:69:dd:fa:b9:49:d8:a0:6e:88:a6:da:20:70:
                    1e:9e:3d:f6:03:e4:f4:14:97:95:49:fa:09:c0:63:
                    e6:ef:29:7d:ea:9f:c7:de:cc:16:5c:21:96:8a:1b:
                    94:c2:ae:d8:0c:e0:22:d1:a0:4c:32:f3:3b:64:f7:
                    3b:d4:49:ec:34:f6:95:e5:a8:0b:63:2e:23:4b:1c:
                    1f:3e:58:f8:15:f8:90:7c:b4:8a:bf:08:b3:91:e3:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:C9:03:BF:19:44:F8:1A:BA:5F:8C:A1:C4:1B:32:B9:21:3E:FD
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.174.0/23
                IPv6:
                  2401:b0e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:72:b9:fd:1b:4b:02:e3:69:1c:37:93:45:83:1c:7d:ee:3e:
         98:f9:76:2a:91:02:53:11:4d:d2:2b:54:f9:ef:30:b2:94:7c:
         30:a1:7e:c4:8f:6c:86:5c:aa:e4:66:bb:70:a8:ff:1f:ad:bb:
         c7:9c:ad:27:da:ed:03:f1:21:1d:06:6a:1d:93:07:6f:b1:8d:
         7c:38:05:a5:bb:d9:5e:65:88:14:d4:82:83:ee:ee:5e:7d:43:
         59:ad:e0:ca:af:62:45:7a:58:b0:4d:ec:b5:24:60:fc:ed:1b:
         d7:70:c3:f8:5e:61:e4:6a:61:12:20:11:b7:99:15:a4:34:f4:
         80:3d:c8:c1:12:29:75:15:58:35:f5:d9:23:71:d2:df:91:4f:
         0e:a5:2a:09:21:db:c6:15:e4:62:f4:20:46:dd:a3:49:b3:06:
         ef:aa:2e:a4:ef:b6:74:ce:b0:2d:6a:a0:8c:8d:eb:84:3e:b6:
         f5:ad:40:6e:25:fd:d9:85:ac:97:ae:8e:83:ba:3c:62:fb:be:
         d9:ab:0c:9c:a3:13:bd:7b:a4:a7:25:62:04:ae:70:67:f1:84:
         84:1b:31:ae:fb:6a:5e:7b:c0:d5:b6:e1:9a:09:a9:57:1d:17:
         14:d7:ce:67:22:9b:98:8a:e4:d7:f9:db:64:21:f5:f6:4e:7a:
         32:a0:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:45 2026 by rpki-client