Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/C32A7FF6C42511F18EE8D9583511F970.roa
File:                     C32A7FF6C42511F18EE8D9583511F970.roa (raw, json)
Hash identifier:          TeVRfWDD0hs6UdMr4I8IdWlabaip3ntHMPQoxUnkKkM=
Subject key identifier:   C8:56:05:09:DC:D3:90:0B:67:AD:29:35:94:6A:23:F8:61:28:B1:79
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       05E0
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/C32A7FF6C42511F18EE8D9583511F970.roa
Signing time:             Fri 09 Oct 2026 21:09:49 +0000
ROA not before:           Fri 09 Oct 2026 21:09:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     43969
IP address blocks:        103.173.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Oct  9 21:09:49 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ac9581d-b2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:4b:db:82:14:86:b1:0a:33:50:46:c8:30:
                    c2:e5:1c:44:f1:21:96:83:67:3d:73:54:2c:01:9a:
                    58:34:57:81:ce:38:ee:28:ad:59:20:6e:83:83:0e:
                    63:58:d3:26:af:31:b2:10:cc:66:86:d8:7b:20:32:
                    4e:12:3c:f6:6b:ef:77:a3:ca:19:39:73:34:13:03:
                    9a:b6:ca:a3:1b:20:0d:96:5f:b7:c0:2f:09:89:1b:
                    78:56:96:63:37:42:c6:c1:09:df:67:c0:ed:bf:55:
                    bf:4d:b6:ec:b4:9e:66:36:90:52:2c:f8:0d:b5:82:
                    4f:7a:b7:04:56:5f:72:70:ab:b7:d3:99:a1:7c:5c:
                    1c:95:cb:bf:82:0f:4b:ee:a0:6c:38:3d:fd:e0:10:
                    09:31:15:af:67:3d:2e:3a:9d:a5:54:19:40:40:39:
                    dc:66:b6:9b:59:87:29:be:c1:41:74:7d:11:15:41:
                    ab:32:c5:55:9e:b0:5f:92:74:0d:0a:c2:91:cf:e2:
                    a6:59:06:c8:5d:90:e6:0f:3d:8d:aa:19:94:43:76:
                    73:54:b3:20:91:f8:20:3a:17:b2:27:a1:7e:d3:72:
                    54:f1:ab:9b:35:75:9c:76:0c:73:f9:9a:7e:27:42:
                    84:89:20:0c:5c:09:2d:91:c1:b6:5f:1a:ee:a0:25:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:05:09:DC:D3:90:0B:67:AD:29:35:94:6A:23:F8:61:28:B1:79
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/C32A7FF6C42511F18EE8D9583511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:62:e1:2d:8b:70:00:d8:0f:14:25:ce:02:f7:09:ce:d5:70:
         d7:ca:22:fd:7b:a2:09:2d:45:1d:57:ce:cd:04:d4:58:53:cd:
         93:12:d8:8a:f3:fd:8c:1d:58:75:1b:97:1a:c0:32:26:80:af:
         7a:10:16:85:d6:55:94:2e:a2:19:9d:f7:00:02:e2:1a:3e:62:
         f4:c5:d7:79:5a:59:ff:9f:de:52:6a:3c:33:6a:fc:0d:97:29:
         8d:e1:19:e4:e5:e6:d7:b3:82:ba:99:bc:71:ef:32:45:2e:4a:
         ef:5c:9b:7c:52:b9:31:b2:15:8b:b2:2f:22:d0:fa:e7:92:65:
         f0:88:83:f0:74:02:9d:b6:bb:3b:9b:65:f6:f9:bf:e5:ec:22:
         13:e2:e8:d5:5e:04:5c:d4:9f:bc:26:9f:9a:b6:c2:06:d8:f3:
         f3:88:4a:c7:f7:7a:90:a5:a6:17:51:af:19:fd:02:fc:d9:f2:
         e5:44:c9:ad:ab:ad:d9:e3:81:84:44:7b:c2:36:3b:11:48:d4:
         f9:9a:56:e6:2a:27:93:d0:34:ea:7e:6a:a3:a6:83:a1:2f:c5:
         95:d0:aa:f0:c3:bc:06:bd:4d:45:b9:9f:ac:a0:76:38:9c:2c:
         75:65:3f:0f:fc:eb:14:77:56:63:00:72:6e:61:11:48:ae:7a:
         c9:a9:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:50:59 2026 by rpki-client