Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa
File:                     2664BB64A4FE11ECBAF38E5BC4F9AE02.roa (raw, json)
Hash identifier:          wPIzFmGNMvNZZkMKPm+3GcuLJhxYqlaqD6XW7GOP3+Y=
Subject key identifier:   91:07:8F:16:7D:00:28:2B:C9:54:B9:04:D5:67:29:23:D4:FE:13:DF
Certificate issuer:       /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial:       046E
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:26:07 +0000
ROA not before:           Sun 01 Mar 2026 01:21:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136969
IP address blocks:        103.178.120.0/24 maxlen: 24
                          103.178.121.0/24 maxlen: 24
                          2001:df0:39c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
                          rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
        Validity
            Not Before: Mar  1 01:21:53 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a61c8f-95b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:d3:86:44:27:dd:e7:cb:47:74:42:f5:5f:
                    cc:1e:1e:39:44:e8:f5:f1:9c:30:c2:23:42:14:11:
                    d0:3c:5d:0f:40:e8:36:6a:15:65:cd:3c:c8:c8:65:
                    43:66:59:94:76:24:8d:57:5f:1d:46:44:4b:34:b9:
                    04:e6:b4:4a:9c:2d:b0:d9:ec:00:b4:0d:0d:85:44:
                    9b:9f:ea:35:f7:05:ec:d3:b2:f5:89:5e:97:68:75:
                    79:2d:ce:1d:a0:3b:d0:b6:ef:10:4b:13:23:d2:18:
                    21:03:5b:08:bb:62:e6:ad:42:c6:97:9c:03:cb:c9:
                    56:ab:93:18:f5:0f:e3:76:3c:85:44:29:1b:3d:a1:
                    5f:53:a4:18:ed:45:07:eb:fe:66:5b:c7:aa:65:14:
                    d1:a9:9e:2a:cb:63:0d:3c:32:f7:00:3a:9e:c6:a8:
                    78:4b:35:42:66:75:c0:5a:3f:37:d0:86:f3:14:5d:
                    48:11:b2:0c:a3:7e:a1:4e:04:b5:ae:22:6e:ff:1d:
                    7e:df:9c:65:45:71:e0:c2:41:60:75:61:ab:6c:e1:
                    fc:e7:35:09:44:c0:d2:f4:a0:72:b6:7c:8b:72:81:
                    a0:bc:7c:ba:c5:99:d9:ff:70:16:c3:2c:9d:b6:bd:
                    ed:aa:c8:88:2a:3c:7a:92:50:f2:5f:a7:31:1a:60:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:8F:16:7D:00:28:2B:C9:54:B9:04:D5:67:29:23:D4:FE:13:DF
            X509v3 Authority Key Identifier:
                keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.120.0/23
                IPv6:
                  2001:df0:39c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:65:cb:1b:3e:4a:52:ab:38:9f:0a:4e:b4:a3:a0:86:37:
         9b:d6:dc:54:54:19:0f:b6:3c:c5:af:dd:8e:95:71:7c:b1:8f:
         5e:a2:90:62:84:10:ea:2a:34:62:3e:79:87:1d:ea:5a:ea:6e:
         0f:33:2c:1d:73:8f:2b:a2:93:cc:de:3f:7e:d8:ae:7b:d6:ce:
         87:81:af:15:ac:4d:f5:b0:3c:99:5e:b8:3f:fe:3d:7d:8b:c4:
         0e:fc:50:44:9a:f2:b7:91:6e:cb:c8:09:ba:5c:a2:be:1e:af:
         24:cf:f4:dc:bd:a1:bf:27:e6:fa:c2:95:20:25:2f:ef:ad:79:
         cb:7c:c4:38:7f:60:4c:10:ee:40:de:b3:47:ec:75:ad:31:34:
         d3:90:84:d4:70:20:90:f7:b4:ba:bf:05:26:0c:13:77:c2:3f:
         0d:6b:7f:28:3a:56:c0:4d:d5:f7:d2:bd:f6:5b:a8:3d:79:0c:
         c4:e6:10:4d:2f:07:0d:7e:40:cb:58:7f:33:9f:a5:c2:71:f9:
         fd:68:b0:26:44:c5:ea:38:72:f8:b5:66:02:ed:10:66:df:1e:
         02:2c:32:a6:3b:bf:fa:b9:95:03:55:ed:b5:b5:ea:4b:81:0e:
         38:82:21:27:a1:e8:b9:87:83:09:b4:c0:5a:4e:bc:7f:c4:6e:
         8b:85:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:29:02 2026 by rpki-client