Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
File:                     EF1E7F70E82411EE9005BA2DC4F9AE02.roa (raw, json)
Hash identifier:          VeqArLpmDZZ//i0Flmu4xn4xSflQptlUOOEitb5IssE=
Subject key identifier:   6C:1E:78:DC:17:30:4A:15:0F:63:88:30:47:78:ED:BA:0F:EE:C8:04
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       017A
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:28:50 +0000
ROA not before:           Wed 03 Sep 2025 05:54:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Sep  3 05:54:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59ea1-7ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:ef:82:e6:0e:8f:79:a3:15:f3:81:74:2c:
                    e9:6e:68:4b:04:15:fc:a4:91:d5:1a:d1:63:eb:2e:
                    e1:5c:64:22:2c:26:03:cc:3c:e8:9f:4b:e6:17:8b:
                    f1:04:71:f0:e1:2d:f5:6f:cd:40:5b:f3:eb:58:f6:
                    e7:74:ad:4f:74:29:cd:1c:f3:fe:98:2c:05:29:c4:
                    2d:b8:97:b6:84:69:1c:0a:20:b1:b1:9b:01:22:f8:
                    96:f1:6d:a7:de:42:23:da:e3:de:33:a6:78:e3:68:
                    68:12:d7:d2:5d:f7:4f:b9:28:16:73:95:88:f2:34:
                    b0:d7:0e:63:48:94:16:93:53:05:23:4a:22:1d:75:
                    a2:b6:15:7d:f2:9e:5c:58:4b:d3:db:c0:a7:31:03:
                    cb:1a:a3:bb:91:dc:e1:9f:01:e6:f6:af:e0:95:75:
                    fc:47:18:60:da:6f:e5:e1:41:fa:07:af:96:98:30:
                    c3:c1:48:f1:79:e7:39:f7:44:95:2b:53:b7:38:85:
                    21:7f:84:21:d4:d3:b0:01:55:51:c5:50:6a:c8:ef:
                    9c:9e:2c:72:5b:3d:93:e9:26:c8:30:12:88:a3:7d:
                    43:67:75:5c:b3:b3:8b:70:c0:d6:ba:ee:a4:15:80:
                    23:a5:47:78:a0:d5:65:7f:43:64:94:38:62:46:c3:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:78:DC:17:30:4A:15:0F:63:88:30:47:78:ED:BA:0F:EE:C8:04
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:24:89:b5:95:b6:37:77:03:2c:9d:f1:47:e7:89:26:43:
         ea:0a:a5:49:bd:5e:f4:74:eb:2b:d8:b9:e9:1f:82:00:d8:57:
         06:2f:9c:16:9c:42:90:eb:07:a9:d6:a9:cd:44:9a:c2:21:a2:
         06:b8:70:1a:2f:11:65:ac:2f:2d:ea:07:3c:21:2b:32:71:2e:
         0f:43:12:d5:d8:b1:ad:e4:e1:79:52:33:0d:cb:f7:4e:b8:ff:
         c2:a6:2a:d5:7b:fa:56:a2:05:ec:33:b3:ff:66:e3:2a:bd:c0:
         f7:d2:b4:92:b1:2d:c7:4a:be:e5:0b:bb:b9:5c:14:2c:62:8f:
         f8:ca:cb:dd:41:8e:b8:7c:74:04:c4:4e:88:bd:af:e4:22:af:
         f2:91:ae:79:86:a4:dc:5e:fd:2e:66:fb:56:6c:b9:d6:a0:e6:
         ac:70:17:e9:cb:b9:11:e9:69:29:bc:77:82:99:36:e6:20:ca:
         51:22:9c:8a:23:d4:f2:2e:ae:69:24:88:c3:cf:29:55:cd:41:
         a6:12:cb:ef:93:03:bc:ad:4d:6a:b0:d6:c6:6f:8a:54:f3:4e:
         d1:e8:61:96:87:0b:2e:cc:6e:3d:e8:3a:f3:cc:ae:1f:5c:0b:
         e9:ec:aa:d1:0d:37:93:1e:e5:e2:03:94:17:f7:33:b0:0a:79:
         c6:5d:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:26:32 2026 by rpki-client