Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa
File:                     63B7CB76D0E511EA9916E053C4F9AE02.roa (raw, json)
Hash identifier:          cdnSLxMfhuwZ6Et2fzD+gihlVu8L05hih+WXS+qI80c=
Subject key identifier:   06:12:1E:5E:3C:F3:3A:24:D8:49:73:BF:A8:1C:E1:E2:7E:F1:2A:05
Certificate issuer:       /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial:       08C4
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:05:28 +0000
ROA not before:           Tue 06 May 2025 21:01:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140659
IP address blocks:        103.151.116.0/23 maxlen: 24
                          2406:19c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
        Validity
            Not Before: May  6 21:01:34 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a447a8-8e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:bb:20:c8:cf:ed:ce:07:f5:9e:bd:35:ec:
                    b4:ab:0c:d2:be:54:b5:5f:8d:a5:88:8a:b1:fb:79:
                    4c:38:d6:47:a6:55:00:21:21:22:d6:e5:82:3e:bf:
                    50:62:e2:b9:65:fa:54:d0:33:e2:9f:4f:8a:9d:59:
                    ef:2d:e8:07:0f:cd:c5:83:54:d2:75:d6:50:d5:9a:
                    52:46:be:68:65:af:35:43:94:eb:37:bc:46:eb:c5:
                    a1:b3:d6:8c:36:f0:4d:41:f8:9b:c4:2f:55:b8:d6:
                    1b:af:9e:14:eb:6f:89:ed:dd:76:13:e9:6e:dc:45:
                    39:ea:c9:89:66:b7:50:97:2c:99:b4:2f:a6:80:2e:
                    03:45:07:9b:53:95:66:93:8b:ed:44:ad:20:d3:de:
                    05:5b:42:54:58:87:63:d1:38:0f:82:b8:dd:6d:79:
                    f0:a8:f9:da:d2:9e:d6:a5:81:e9:58:74:52:1b:7d:
                    5b:83:22:2a:4a:a5:95:7e:9f:e1:85:50:a4:4f:2c:
                    89:ce:79:af:97:12:22:c2:23:c9:cb:b4:7b:b5:e0:
                    e8:7b:c8:d1:ca:19:fe:48:60:d6:c9:5b:63:68:6c:
                    f3:e3:99:82:ee:9f:d1:89:20:6c:ee:63:c4:5a:08:
                    0e:fb:52:f9:1b:8f:f7:e6:f1:09:0b:d4:8c:35:7c:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:12:1E:5E:3C:F3:3A:24:D8:49:73:BF:A8:1C:E1:E2:7E:F1:2A:05
            X509v3 Authority Key Identifier:
                keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.116.0/23
                IPv6:
                  2406:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:37:d1:70:39:16:40:84:89:b6:aa:3c:49:86:05:6c:63:
         16:d6:b6:09:85:03:b2:c7:70:0e:63:54:18:18:26:e4:49:31:
         ae:a5:f3:83:69:b0:b2:bd:4e:fd:20:60:b1:51:b2:ad:8c:6b:
         54:d1:94:53:f9:0c:c6:0b:b6:29:a9:73:3a:7a:ca:02:4f:d0:
         11:fc:63:c7:d0:d4:a5:72:61:92:09:8a:42:ca:8a:5e:ca:d7:
         96:8d:2a:de:fd:23:56:27:4b:2a:af:e7:a8:2e:38:59:60:32:
         bb:d4:f0:4d:00:ec:d4:ce:0d:69:a1:da:89:19:ca:9e:97:fc:
         49:2d:18:c9:c9:1a:06:2d:96:43:c1:77:05:8d:8d:e6:a1:26:
         78:be:d3:d9:72:f3:2f:22:22:93:b3:0a:bc:c2:3d:28:81:c7:
         6d:3d:02:9b:03:e2:2d:61:5c:70:69:f2:e7:b8:cb:69:23:0e:
         a6:89:0f:cb:52:39:a3:d4:c7:65:bf:92:b6:82:8a:9a:c5:f9:
         56:51:89:e7:64:98:49:c0:45:58:1a:c2:84:a6:d5:ff:49:e1:
         ef:d8:fe:87:43:ce:28:18:94:3e:74:68:09:84:4f:e3:84:f0:
         e6:56:63:a3:1c:e8:11:fa:4c:a1:59:51:ca:88:dc:17:bf:2d:
         ac:c0:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:22 2026 by rpki-client