Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
File:                     2839F45288C211ECBEA38C0BC4F9AE02.roa (raw, json)
Hash identifier:          KEsYumtGHpVP8el5iopKtOy0PRnMe1nwQiYWH30FtsI=
Subject key identifier:   99:3D:59:0A:8D:6B:45:93:55:A8:5B:14:B5:0F:1B:E8:C6:B0:67:57
Certificate issuer:       /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial:       046D
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:26:04 +0000
ROA not before:           Sun 01 Mar 2026 01:21:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17557
IP address blocks:        103.178.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
                          rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
        Validity
            Not Before: Mar  1 01:21:55 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a61c8c-3b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:68:f4:ac:bb:b3:8e:ab:d0:ea:9d:b6:f4:
                    bd:e3:d5:93:74:ec:c0:a6:6f:a2:70:1b:d9:ff:c9:
                    7b:af:77:35:26:d7:f3:51:14:2a:a5:e6:f4:c9:04:
                    e8:52:e5:c0:f5:19:35:d3:2a:d9:3a:db:5e:77:99:
                    0b:78:a5:93:bf:bf:b0:2d:1e:42:f0:d3:f2:0d:8a:
                    79:d0:2e:84:78:2e:3e:50:4c:9a:41:d9:0b:12:17:
                    97:2e:d5:ad:cf:5b:08:3c:6f:3f:a4:35:1b:be:c1:
                    42:aa:c7:03:e2:db:f0:4d:b6:c4:a2:30:5c:89:1d:
                    75:de:73:56:4f:20:7b:ca:d7:6e:16:db:17:cc:02:
                    c8:94:2a:d8:c8:a5:a9:9b:f2:44:19:ec:c2:b6:84:
                    fb:fd:3f:95:42:f5:93:57:8b:85:ae:26:03:9c:31:
                    28:63:1f:65:32:38:5a:a2:2a:6f:67:3e:ab:21:12:
                    b7:59:b4:f3:7f:f6:a0:ba:5e:a0:28:de:46:04:b4:
                    74:da:ff:82:a9:43:71:0e:01:a6:f7:fa:48:c4:82:
                    65:99:08:d8:10:da:a5:63:49:0e:96:b8:d2:21:7e:
                    4f:c8:26:b0:38:79:48:e2:a4:8d:78:57:8b:18:91:
                    ce:30:05:8b:43:54:76:15:94:f0:4b:15:48:05:c1:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3D:59:0A:8D:6B:45:93:55:A8:5B:14:B5:0F:1B:E8:C6:B0:67:57
            X509v3 Authority Key Identifier:
                keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:c2:0d:f6:53:0f:6f:dc:d6:c1:b7:39:03:ad:d7:c7:97:
         c0:54:64:66:30:d5:21:55:05:16:15:15:b4:0a:59:c3:ac:6c:
         b8:85:a1:d3:fa:d8:79:92:09:ad:4f:a1:a6:b8:39:1c:89:c2:
         5b:c8:42:04:c3:b5:b5:a5:2b:d0:31:45:ba:37:e2:16:4e:f3:
         00:1f:d5:25:06:3e:7a:6a:0d:8e:ae:b9:4d:43:1d:f0:84:cd:
         39:90:15:15:62:92:dc:24:e7:ea:35:75:c9:67:6b:a7:7e:41:
         3c:19:cd:20:9c:65:b6:00:ee:d7:65:32:bc:7f:24:22:6c:14:
         9b:df:83:2e:17:2d:e8:ee:5a:75:6d:37:72:5d:64:13:52:da:
         7e:7e:e8:ba:28:8f:4b:bc:b1:40:96:f4:47:98:75:7c:5a:23:
         26:6d:bf:21:41:af:3d:72:9d:8e:8f:0f:28:a8:84:50:89:81:
         7e:6d:9c:4e:12:12:96:5e:55:1a:09:84:b1:b8:27:6d:41:32:
         85:69:de:3d:a7:ec:a5:d2:b3:4b:73:ca:78:10:35:45:50:f9:
         fe:56:5f:be:e0:5f:13:27:70:da:0e:d6:bc:f1:e7:ac:37:ae:
         74:c5:3e:41:24:8f:0c:7d:5d:7a:3f:0c:95:10:12:bb:38:44:
         b2:36:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:56:15 2026 by rpki-client