Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
File:                     2E280FE4839511F0A13CF851C4F9AE02.roa (raw, json)
Hash identifier:          T6JxQ23nF6nu6igZiptqJrekrjIGNlEpDC+DdF+V8UE=
Subject key identifier:   66:A2:47:3B:40:FC:A2:C9:62:AA:17:57:E0:40:B8:6D:E7:74:F3:8F
Certificate issuer:       /CN=A9134E06/serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Certificate serial:       6C
Authority key identifier: B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:59:57 +0000
ROA not before:           Thu 13 Nov 2025 05:53:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        203.17.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
                          rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E06, serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
        Validity
            Not Before: Nov 13 05:53:05 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d5dd-7c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:00:aa:15:37:7c:eb:19:cc:6e:cb:5f:26:
                    93:0f:75:e4:ab:3a:20:29:d2:2a:d2:78:a8:a9:4d:
                    b4:74:d4:23:47:44:c0:a0:69:28:77:1a:fe:67:f1:
                    ac:74:c5:67:bb:70:f4:9f:90:a5:12:e0:a6:21:49:
                    1b:ca:94:2e:7e:9d:54:a1:bb:50:c1:cc:b2:e0:52:
                    99:06:c1:f8:9f:48:12:7e:b7:2d:a0:59:2f:3e:a5:
                    5e:0d:e4:ea:b2:5d:05:da:a3:5d:75:c7:d4:75:51:
                    a2:66:fc:31:d2:f2:5c:87:aa:7d:03:94:57:cc:1f:
                    0e:4b:62:44:57:0a:50:8b:f0:86:0e:02:d7:89:3f:
                    a2:e6:99:4a:b9:23:0e:d2:2e:81:6b:ac:53:28:3a:
                    59:b9:f6:22:f2:96:5b:83:dd:bd:4a:85:e4:23:a9:
                    3d:e0:00:83:0b:24:f5:5f:3c:dd:78:52:4b:8a:dc:
                    73:82:0d:88:0f:01:10:86:45:fa:45:43:3c:61:98:
                    2f:88:a3:59:51:28:a0:83:e8:bb:ad:d3:42:3c:ba:
                    a9:6a:e9:2a:0b:a6:6e:18:7d:8c:f8:17:56:c8:fe:
                    06:5a:0e:a2:2d:ee:c7:bf:bd:36:1c:12:53:80:16:
                    e9:97:b3:9c:a4:03:c6:4d:fe:af:f6:77:16:cf:d8:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:47:3B:40:FC:A2:C9:62:AA:17:57:E0:40:B8:6D:E7:74:F3:8F
            X509v3 Authority Key Identifier:
                keyid:B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/2E280FE4839511F0A13CF851C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:2e:f2:0b:07:63:7a:3c:f4:e5:60:b6:65:ea:1a:66:a2:
         1d:a9:2a:26:a7:25:56:4a:cb:a1:f7:9a:e0:b4:0f:20:12:81:
         5f:66:99:2b:8b:0a:e9:5c:1a:28:81:10:0c:b7:49:4a:30:31:
         27:ce:fd:8b:65:3c:ed:5f:68:5e:e9:25:52:06:94:de:94:2f:
         b7:97:da:12:05:05:46:23:df:b2:e7:10:78:47:f5:94:72:71:
         03:37:ef:ac:fc:b7:90:66:4b:8e:e8:63:e1:be:b7:ee:74:31:
         09:37:6a:63:37:b9:d3:29:14:6b:cb:5a:0d:70:50:2e:78:45:
         10:de:10:72:57:31:a7:2a:96:27:ee:a2:db:29:df:d4:c8:df:
         c9:55:89:6e:9b:60:a0:29:c7:b3:a8:c4:63:1f:f6:4e:65:93:
         44:9c:f9:ba:08:15:58:cb:cd:0c:d1:51:7e:4a:88:8c:15:dc:
         03:6f:29:7f:12:ff:fa:e7:36:4d:ad:95:98:47:b2:3c:3e:5b:
         bd:43:0c:f6:c5:18:5d:e0:ff:72:06:2d:62:1f:1b:33:f8:22:
         49:8c:9a:05:f3:69:3a:2f:d7:ff:dc:15:a1:21:ac:28:7b:03:
         c0:fe:e9:f0:c9:97:1f:24:75:d6:a1:2a:d0:58:51:9d:1d:38:
         e6:a1:3b:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:33 2026 by rpki-client