Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/CF78AD96127811F183C0012F353D8C67.roa
File:                     CF78AD96127811F183C0012F353D8C67.roa (raw, json)
Hash identifier:          yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=
Subject key identifier:   C3:0C:64:05:50:D9:D1:09:95:73:3A:74:B1:D4:28:4A:2A:C7:3B:72
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       04F1
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/CF78AD96127811F183C0012F353D8C67.roa
Signing time:             Sun 01 Mar 2026 18:09:50 +0000
ROA not before:           Wed 25 Feb 2026 18:35:51 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132298
IP address blocks:        103.178.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
                          rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Feb 25 18:35:51 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a480ee-c996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:21:5f:11:be:7e:f2:7f:8c:45:4a:6e:60:
                    3f:4f:06:15:fc:f6:5d:cc:d4:32:96:d5:e8:4b:13:
                    5c:bc:10:7b:0d:f7:ae:81:a6:4a:5f:d5:b2:28:97:
                    19:8e:8e:70:20:23:e5:19:48:ba:f7:8b:b5:03:d8:
                    ed:c0:07:e0:b3:73:e2:97:88:10:91:4c:1b:7f:e8:
                    77:2f:05:26:b2:66:e9:1b:a2:e7:15:2b:dd:c1:c3:
                    00:59:64:6e:f7:5f:f5:34:42:9d:63:d3:62:e7:93:
                    77:02:69:2c:80:b7:18:04:87:67:45:88:eb:87:9f:
                    0e:05:69:d6:1a:49:9e:fe:86:34:84:e3:cc:74:c7:
                    2f:40:cf:e3:4d:6e:03:1c:41:21:cb:76:fc:5b:7d:
                    a4:4d:56:b2:c2:e8:9c:53:5e:1d:3b:3c:bf:ae:06:
                    07:64:92:95:4f:aa:d1:e2:07:31:31:12:0e:f1:56:
                    71:12:22:31:8f:43:e9:40:e3:70:6e:0d:d8:e8:bc:
                    ef:5a:ac:c9:90:67:cd:d5:e7:cb:c0:37:1b:a0:c3:
                    87:db:6c:46:33:b3:66:16:8a:e8:82:c3:3a:31:17:
                    42:df:a3:ba:35:77:9d:22:fe:df:98:b7:27:0e:8d:
                    d7:bc:51:06:43:56:78:43:d1:2a:cf:53:18:f5:bd:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0C:64:05:50:D9:D1:09:95:73:3A:74:B1:D4:28:4A:2A:C7:3B:72
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/CF78AD96127811F183C0012F353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:48:03:51:01:21:ab:3d:b3:16:e9:4a:25:08:76:b1:fe:1e:
         e8:f6:74:6b:cf:bb:8e:07:b4:ea:9f:63:b5:55:a3:96:12:10:
         e2:84:c7:25:5d:7b:42:d8:45:40:d1:2b:fa:54:c5:61:53:8c:
         1e:65:d6:93:ab:b8:2e:55:f7:9e:1b:79:7e:eb:d9:d3:19:ab:
         be:7f:30:d9:29:2c:04:7a:33:3f:75:4d:e3:ff:48:79:70:9f:
         26:6a:ce:ad:ae:59:8b:7c:e6:52:33:6b:43:7f:e4:9d:90:a7:
         9f:3b:a2:15:e9:e8:83:d8:b5:c9:23:94:33:f1:d3:c8:27:fe:
         3d:77:96:f9:3d:13:b1:b5:b1:6c:51:13:0d:94:9a:9c:45:68:
         98:69:d1:50:4c:fc:7f:fa:ad:2d:a0:40:ac:1b:92:f5:bf:9a:
         8f:72:4a:05:d4:bb:b4:35:91:57:bb:90:b1:6b:7e:73:51:1b:
         ec:b8:c0:f0:8c:ab:bb:5f:97:5d:c3:c3:7c:43:14:08:2c:b0:
         81:b1:f8:47:11:a6:0b:b0:fc:b5:f9:83:26:1e:6a:e4:9e:5b:
         3c:dd:bf:29:94:0f:09:84:71:d6:c8:0e:9a:c7:80:06:1f:94:
         16:5b:8d:a9:d3:23:d6:a0:f0:6d:b0:6b:cf:a7:25:91:d5:72:
         25:98:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:55:46 2026 by rpki-client