Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa
File:                     C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (raw, json)
Hash identifier:          6FR1v3YI0RhGAgeM3+CGgfy+MyKif0LXk1Vk7lh4i/M=
Subject key identifier:   15:71:67:28:C2:D5:BE:D6:51:78:5C:B6:77:84:7C:15:22:74:98:DF
Certificate issuer:       /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Certificate serial:       02E7
Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:45:36 +0000
ROA not before:           Sat 03 May 2025 02:08:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45213
IP address blocks:        203.24.69.0/24 maxlen: 24
                          2402:6780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
        Validity
            Not Before: May  3 02:08:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59480-5df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:a8:55:e9:65:96:b3:77:6a:29:12:4f:64:
                    0b:8b:61:e3:e7:f1:8c:62:34:a4:af:d0:c0:83:8e:
                    7c:0e:2b:d3:16:5a:d7:cb:46:30:98:60:1b:ce:10:
                    25:91:83:aa:12:81:a3:b0:47:ae:c4:01:f7:4e:38:
                    76:58:13:89:70:c2:f7:ac:d0:d2:e4:8f:79:9a:11:
                    55:3e:0a:08:5a:92:32:ca:9a:79:fc:da:99:3d:90:
                    52:4c:30:5f:95:9b:ef:58:e5:36:2f:df:e8:a8:9d:
                    6f:b7:e3:ae:61:d9:12:f2:6a:51:8a:b5:08:1d:27:
                    8e:6d:99:11:fc:45:cc:c6:b8:56:10:62:cf:cb:08:
                    b5:17:c0:a2:be:48:06:4e:84:21:3e:33:d1:7e:25:
                    03:c7:7c:c1:d9:4d:9f:6f:ba:36:36:7e:e4:b5:fe:
                    15:b3:3e:9c:7d:a6:a5:f7:fd:c1:46:c0:6b:e1:f5:
                    30:46:00:ff:57:f0:b7:d6:00:e0:ca:47:56:4e:d4:
                    0e:88:b5:3a:0d:04:d3:45:54:d8:b4:58:9b:64:fc:
                    c7:38:f9:7e:8b:31:d0:91:4a:d1:e6:6a:0e:7f:20:
                    cb:52:f6:b6:32:c9:47:79:e1:ec:35:47:4d:50:c0:
                    ea:03:cf:e9:b2:c6:d2:9d:56:b4:c1:fa:ac:91:25:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:67:28:C2:D5:BE:D6:51:78:5C:B6:77:84:7C:15:22:74:98:DF
            X509v3 Authority Key Identifier:
                keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.69.0/24
                IPv6:
                  2402:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:3a:93:41:8d:73:b5:e8:92:fc:e9:f7:d9:9d:c4:42:da:
         07:67:b2:b7:0a:2c:4e:9d:b2:00:a4:22:bc:01:03:7d:d0:72:
         7f:4a:4d:41:73:8b:c0:9b:6e:a1:9d:ca:71:f8:17:12:c8:ae:
         77:9b:1d:7c:32:fa:63:d8:cb:db:7f:ce:84:e3:61:47:87:9f:
         ae:57:e3:c8:32:99:23:03:ae:58:4b:2c:01:1e:64:67:0c:d5:
         6e:6d:be:03:2f:da:81:b9:4e:b4:79:0e:26:05:80:55:cf:6b:
         eb:6d:9a:1d:03:73:f7:e7:3f:6d:8c:c7:bb:22:47:b0:82:13:
         b7:d4:e9:4b:52:91:6c:32:9c:99:b6:2b:2f:a1:e2:c7:c7:6e:
         1c:86:ba:af:ba:7d:34:62:65:b6:a5:a8:df:de:f5:72:cc:de:
         e3:94:7f:24:61:3f:f4:cf:78:30:e1:6a:7e:1b:6b:77:91:7e:
         5b:02:30:d6:51:f6:92:1c:72:9f:99:09:22:ce:60:5a:fc:0f:
         1e:4f:17:7e:15:f8:18:19:2e:4f:8c:24:6d:de:19:e6:cc:f6:
         ae:7c:31:fa:ce:05:d0:d6:2c:85:a5:dd:9f:a3:c4:3f:a5:31:
         c8:0f:53:74:2a:a8:44:ce:cb:9a:57:a6:a1:3d:e4:72:bb:36:
         92:36:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:14 2026 by rpki-client