Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa
File:                     CDD1E222775711EF95F9762FC4F9AE02.roa (raw, json)
Hash identifier:          VbHqiDCTZn+Ao56QabmWal8oQa9EkahnHvyq/y587WI=
Subject key identifier:   CF:3B:CC:5E:F6:E2:F9:55:33:BA:6A:2A:CC:5C:EE:F7:AA:29:13:E2
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A7A
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:29:47 +0000
ROA not before:           Wed 20 Aug 2025 16:54:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153319
IP address blocks:        103.115.6.0/24 maxlen: 24
                          2001:df4:45c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6778 (0x1a7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Aug 20 16:54:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45b6a-4e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:a7:4c:60:1d:cc:ff:b8:4a:9a:a8:0a:d7:
                    79:7a:52:ad:33:8c:c9:87:bb:3c:aa:a3:ca:80:ee:
                    9c:c3:b7:e7:5f:fc:4e:e1:7b:fd:ac:88:f8:e6:ea:
                    3d:b1:b1:33:72:20:cf:ad:a0:90:c1:3c:8e:3b:9e:
                    b3:95:c2:f1:50:2a:ea:7e:c3:09:b4:46:f7:ea:1b:
                    72:ad:42:c7:26:7a:a5:7c:a8:aa:1b:92:9c:0a:12:
                    79:37:9c:ab:36:52:23:9b:bc:1f:42:c6:f7:38:86:
                    52:8a:d2:6a:9e:e5:35:94:6e:2e:e7:2c:45:35:08:
                    9f:d6:f6:91:66:88:da:ce:62:45:e2:3a:42:e1:de:
                    cc:04:d1:aa:d6:8a:bb:9d:9e:54:d4:84:b5:3d:96:
                    05:98:09:89:7c:15:c8:20:23:ba:b0:24:fb:6f:c7:
                    aa:d0:00:86:3d:d9:19:0a:23:22:98:4d:23:27:77:
                    49:2c:58:20:1c:f6:d7:65:bc:f9:59:39:21:11:61:
                    1a:94:d7:83:a7:76:00:86:48:bf:ba:38:67:63:c4:
                    ce:5a:e9:c0:ba:65:a1:dc:fe:06:38:a7:99:2f:c0:
                    71:f0:15:ef:5a:c1:95:82:80:51:1f:06:fd:d0:2e:
                    2f:93:cd:6d:1e:14:e7:6a:c5:2a:d8:97:5f:1e:cf:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3B:CC:5E:F6:E2:F9:55:33:BA:6A:2A:CC:5C:EE:F7:AA:29:13:E2
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.6.0/24
                IPv6:
                  2001:df4:45c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:18:b4:0f:44:bc:f6:9e:e5:26:39:ed:77:42:2b:09:f8:ca:
         08:7f:2c:e7:9e:dc:17:79:c9:35:f6:d1:4a:b0:81:23:c3:68:
         e4:46:8d:28:71:b8:93:0c:0b:8d:e1:0b:fd:85:d0:26:88:44:
         4c:20:d1:3b:c6:43:ad:d7:00:b4:8c:80:30:ad:10:7b:1d:79:
         f8:4f:b1:32:14:2f:b0:ef:78:c7:63:5e:41:4d:f4:57:42:93:
         93:de:a1:50:34:ae:cb:fd:a7:b0:9c:92:84:9e:de:02:3a:db:
         c0:e9:c5:d1:5b:e5:e2:c0:bd:f0:1c:ce:f4:e5:ca:e4:5d:a5:
         a4:da:bf:b3:6c:f5:fb:db:f4:b5:93:d7:ec:12:e5:e1:f2:e8:
         e9:03:d6:b3:41:f0:41:5b:b9:fc:eb:fb:33:30:8b:33:19:f3:
         5a:e2:85:61:f0:74:e0:c4:ab:cb:ac:4c:b0:ab:c8:7e:ae:a7:
         54:fc:ae:8c:4f:09:27:8a:00:d7:9c:fa:4c:53:0d:a1:36:94:
         0f:1f:4e:e4:c6:f8:3c:f7:7d:99:b7:55:d4:f3:b3:e9:21:58:
         12:37:28:4c:02:d1:1b:44:77:09:f2:f1:5e:f8:a1:af:19:e7:
         7c:0e:e4:c7:25:08:77:27:b2:f5:49:17:5a:ab:c1:01:ec:b7:
         a0:34:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:36 2026 by rpki-client