Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/6DEDEF66387A11EA9450A37CC4F9AE02.roa
File:                     6DEDEF66387A11EA9450A37CC4F9AE02.roa (raw, json)
Hash identifier:          ELrRGZxBbx62IbZuq+m878L42woZMXpG8f6EE7+m9cY=
Subject key identifier:   91:39:FA:8C:B0:0C:C1:72:66:B1:E1:08:B5:B6:52:97:43:49:D3:B1
Certificate issuer:       /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial:       0BD2
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/6DEDEF66387A11EA9450A37CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:54:36 +0000
ROA not before:           Wed 02 Apr 2025 19:19:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     63526
IP address blocks:        103.147.162.0/23 maxlen: 24
                          2001:df2:9b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
                          rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
        Validity
            Not Before: Apr  2 19:19:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a428fc-63d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:6a:0c:ca:ae:f4:06:58:6e:42:ec:b3:73:
                    c3:a2:e0:89:5c:b5:1d:39:a7:1b:40:a1:47:15:9a:
                    81:3a:9b:14:75:74:f6:61:30:78:13:18:98:e5:a5:
                    96:f4:20:18:d1:9f:71:cd:06:e1:3c:1c:c0:cc:7c:
                    0d:3b:1a:3d:e8:85:07:09:4c:09:7a:43:f3:f8:9c:
                    58:5c:32:9f:67:48:ea:e1:90:ef:01:67:4b:54:5b:
                    e6:65:2a:b5:d0:b3:67:b1:19:cc:ba:15:c5:cf:cc:
                    04:52:bc:07:89:17:cd:f2:4d:6b:9a:33:1e:41:56:
                    12:67:e4:e9:fb:0a:32:06:75:d4:6d:7b:95:fb:69:
                    fe:e8:27:26:2e:3f:bf:74:49:2c:cf:2f:12:c9:92:
                    20:c6:97:e8:a4:50:eb:a0:01:a0:fd:e6:cb:51:e6:
                    db:a5:23:c9:9d:9d:e3:ac:7a:ca:7d:5d:64:8f:d3:
                    14:6f:ef:3b:28:f1:a3:89:95:28:18:45:40:4d:99:
                    43:61:f5:45:74:40:2b:26:19:c8:b9:e8:04:e6:3f:
                    b1:da:f4:4d:b9:46:7d:67:d1:8e:d7:6c:e7:6b:7a:
                    b3:60:20:c9:b5:92:df:fd:42:fd:6d:00:fb:c5:f4:
                    8e:aa:fe:38:fc:a3:85:b0:f3:0c:3a:32:66:9e:06:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:FA:8C:B0:0C:C1:72:66:B1:E1:08:B5:B6:52:97:43:49:D3:B1
            X509v3 Authority Key Identifier:
                keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/6DEDEF66387A11EA9450A37CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.162.0/23
                IPv6:
                  2001:df2:9b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:cb:5d:37:26:c3:ee:e2:a6:d6:12:fc:3e:a2:46:67:2b:
         5b:35:67:d8:c3:e7:2b:c7:e5:c4:5f:54:d6:ef:09:aa:01:c2:
         d1:2a:1c:0f:04:4b:d7:b8:3d:a0:4c:52:ca:64:38:cd:d7:cd:
         22:8c:ed:c2:2e:da:b7:91:83:da:32:0c:ac:c7:d3:1e:bc:9b:
         c5:a1:41:53:d5:b7:d6:76:c4:9e:e1:35:7a:33:4c:e8:60:7d:
         1e:56:49:cf:3d:47:5b:3d:0c:d4:49:b7:e7:da:2d:bb:36:34:
         45:df:2c:3a:36:d4:79:a7:86:e5:e3:e5:73:15:09:a1:9a:d6:
         4e:b6:6b:b3:68:27:8f:67:98:68:cd:d1:0d:95:11:b0:59:00:
         24:3c:d4:4f:7f:9b:51:63:77:a1:b6:6e:85:c0:ca:cf:3f:fa:
         42:27:83:13:46:a1:d2:bd:f3:0c:7a:85:df:9e:43:e1:a4:0f:
         9b:86:66:93:5d:e1:10:9b:da:81:26:99:d2:b7:3f:fd:32:7a:
         18:38:46:fd:7d:34:5b:7a:e3:c0:45:ef:46:dc:f2:99:f0:28:
         8d:06:21:95:1f:12:99:b8:a3:f2:71:c6:e8:a8:2f:98:5e:fe:
         64:89:84:1c:d8:1e:4d:f8:94:48:1f:f4:a5:98:d3:bb:87:07:
         1b:47:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:41 2026 by rpki-client