Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
File:                     C4D7F9DA584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier:          K10RKm2RSVVX5jRTjbz83WeVsyTCfxe5LfA+X5JE7CE=
Subject key identifier:   28:1F:7E:2C:5E:EF:6C:EF:C4:C4:2A:B3:C1:A6:53:29:C4:DB:18:78
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       01F3
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:39 +0000
ROA not before:           Fri 05 Dec 2025 00:11:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137427
IP address blocks:        103.151.172.0/23 maxlen: 23
                          103.151.172.0/24 maxlen: 24
                          103.151.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Dec  5 00:11:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48f2f-d799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:d5:d5:17:5c:a6:0d:c1:83:5f:35:4a:50:
                    53:5e:97:76:bf:3b:04:de:46:f6:09:1e:f6:89:9f:
                    24:ac:bb:58:61:0b:fa:5e:22:0f:96:6e:ca:ae:34:
                    0b:28:66:df:ba:a5:c5:d6:b2:b1:1c:0a:78:f5:ff:
                    b7:7d:2a:40:20:1e:7c:3b:fc:95:de:f3:7f:5f:0c:
                    37:14:c1:f2:c0:1c:5b:09:dd:53:9d:3d:89:90:76:
                    37:3c:38:fa:79:d2:45:44:cb:fc:64:47:4b:bf:a4:
                    04:bb:2d:ca:71:9c:63:ad:d6:e9:84:33:67:be:ec:
                    43:1b:fe:5b:fc:30:1e:51:38:43:03:0b:5b:93:ef:
                    b4:37:74:41:57:ac:5c:98:99:63:68:30:00:ef:56:
                    fb:db:ab:44:40:bc:dd:03:17:77:fc:91:d1:78:7b:
                    1c:30:20:99:59:ea:f9:28:6a:08:83:b5:54:8e:bc:
                    79:21:b7:b0:d6:a4:89:7f:f4:48:b1:0b:97:bd:d6:
                    24:ba:9d:28:b4:2c:cb:29:4b:0d:cd:b6:cd:33:b5:
                    18:61:75:57:be:5c:3f:87:ab:9d:fb:da:49:a0:f4:
                    4d:45:9c:1a:85:22:f6:23:71:c4:48:4e:f6:c6:6b:
                    30:4b:57:55:68:f4:c6:8c:ba:a6:9e:d2:69:21:d8:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:7E:2C:5E:EF:6C:EF:C4:C4:2A:B3:C1:A6:53:29:C4:DB:18:78
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C4D7F9DA584111EE85E40820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:24:5d:cf:e5:a3:ee:98:4e:dd:51:f6:95:3b:1d:4b:a2:f2:
         0d:9f:f2:a2:20:6e:43:3f:54:48:ad:eb:ec:b0:4f:d2:2c:ea:
         03:2d:bd:69:0f:78:49:a9:fd:8a:c3:37:04:83:3f:3f:bb:99:
         1d:d5:e3:5e:5c:ea:27:88:58:17:f7:48:57:11:1f:87:39:29:
         a2:c2:77:7b:7d:12:0a:a3:2a:9e:ea:d6:3e:c8:d4:d1:f6:32:
         9f:a3:53:ea:cf:ec:7a:38:19:24:b6:2e:05:b8:d0:3a:b9:78:
         b6:ee:8c:a5:bc:a4:8d:af:a1:59:a3:af:c0:3c:7a:90:89:f9:
         a4:95:6b:bc:80:85:8c:0c:2d:bf:db:0f:4f:6c:21:ad:72:e1:
         48:0b:3a:f2:02:dd:44:a7:a9:b0:8d:05:03:56:6b:b7:c9:04:
         d9:34:c3:3e:e4:f6:cf:8e:8b:8d:47:02:0d:bf:00:3a:88:42:
         6d:ed:b6:19:6f:0e:69:aa:11:36:6b:82:2a:78:e4:1c:2a:97:
         27:d9:56:8b:50:5d:86:93:1c:7b:fb:82:08:82:25:8c:21:53:
         1d:07:04:27:36:e3:d4:79:7c:c0:d4:ea:fe:74:98:6f:f6:ac:
         ee:b6:88:a7:6b:e6:72:b6:71:1c:41:74:ec:de:58:c6:c3:6b:
         89:5c:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:26:59 2026 by rpki-client