Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
File:                     AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (raw, json)
Hash identifier:          EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=
Subject key identifier:   DA:B9:F4:58:B0:C6:36:00:93:1F:C3:89:D8:57:86:CC:9A:CF:84:FE
Certificate issuer:       /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial:       052D
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:05:01 +0000
ROA not before:           Sat 27 Sep 2025 00:27:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138186
IP address blocks:        103.173.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
        Validity
            Not Before: Sep 27 00:27:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a51a7d-7598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:fb:52:a2:77:93:2e:15:54:e7:10:2c:ce:
                    39:8e:2d:c8:87:d6:13:bd:de:69:c4:ba:66:94:73:
                    be:37:9d:19:47:81:13:a2:66:6c:78:cc:b1:72:b3:
                    83:b4:60:02:75:68:4c:e9:17:51:de:0c:85:98:1e:
                    c4:06:b5:96:8e:69:99:0c:57:f8:7d:fc:06:6d:e5:
                    75:90:e4:a0:8c:66:6c:29:fc:f8:eb:9c:7e:78:98:
                    f1:0d:eb:5d:95:d3:9f:68:e3:97:84:29:f2:46:63:
                    53:fc:0f:f4:4c:3b:4c:15:5b:4b:45:f4:ca:bf:da:
                    0f:52:8a:58:3b:21:c2:11:c8:b5:7e:d6:73:26:c8:
                    84:a0:d0:24:17:21:cb:7c:1c:0f:52:16:cb:27:91:
                    7e:ff:ff:2f:d1:d6:38:c3:2d:7a:8d:b4:d5:49:57:
                    41:4a:7a:4b:01:f7:d2:73:cc:b2:e1:6e:f9:ef:10:
                    44:62:c2:ff:00:cd:d1:68:3d:1d:a2:fc:85:fb:46:
                    8e:c1:ee:59:c9:0a:c0:78:6a:50:0a:71:c9:c8:d3:
                    ea:76:2b:86:24:25:ea:b2:e8:50:cc:a5:d6:e1:17:
                    0d:d5:d6:cd:f7:21:da:22:44:f3:44:ae:33:e5:03:
                    1f:15:6f:41:37:22:cd:78:2d:91:c2:76:3d:35:eb:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B9:F4:58:B0:C6:36:00:93:1F:C3:89:D8:57:86:CC:9A:CF:84:FE
            X509v3 Authority Key Identifier:
                keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:a9:98:1e:9f:dc:43:3c:c5:a6:4f:59:e8:2a:57:c2:74:
         f5:27:a1:77:00:f2:d9:45:15:1a:c4:49:9d:46:64:ab:25:81:
         fd:4a:21:71:17:06:de:ea:a5:67:14:40:aa:2c:f1:08:d5:dd:
         63:70:c3:8a:fe:4f:84:77:f0:b3:0b:f0:31:ac:16:0c:62:dd:
         28:6e:6b:83:87:1d:38:1d:09:f6:e3:cb:ce:1c:32:89:5c:0d:
         36:4b:e3:35:ad:b5:a2:e7:a1:81:48:1a:72:12:00:af:08:6a:
         9d:3a:72:cf:1d:50:76:83:56:a9:4f:f5:36:55:17:06:8c:58:
         44:3a:e3:ea:16:d5:06:a7:35:e1:35:92:4c:07:26:4f:4f:fb:
         4a:ed:31:ff:7d:72:89:7a:e2:1d:72:ad:ee:dd:13:c9:5e:28:
         22:0e:f5:06:98:e9:15:a4:b4:58:e6:dc:57:7c:96:4d:ad:ef:
         e0:d3:20:d6:be:1b:1d:f4:ee:fc:d2:45:60:7f:ed:31:49:10:
         75:0a:6b:75:e6:32:ae:31:b0:4e:f3:f9:ae:c5:7a:7b:b5:37:
         f1:e5:82:55:c7:6c:8e:90:6a:d7:b0:90:9a:74:a3:4f:5d:51:
         2a:42:de:e5:56:5a:c8:4e:aa:7b:7b:b9:94:e6:fe:eb:a6:20:
         9f:81:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:10:47 2026 by rpki-client