Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/4580DDDEEA0A11F09D7A92E76F6F56BC.roa
File:                     4580DDDEEA0A11F09D7A92E76F6F56BC.roa (raw, json)
Hash identifier:          dP56HqiOS0iPtAVucNZ2wR/KoNuwl+rRD4b0wwXFjDs=
Subject key identifier:   52:61:80:DF:5A:CC:57:40:42:07:9B:A1:3A:0B:34:F1:68:AB:F7:D8
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0BC6
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/4580DDDEEA0A11F09D7A92E76F6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:07:00 +0000
ROA not before:           Mon 05 Jan 2026 07:47:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23532
IP address blocks:        103.6.20.0/24 maxlen: 24
                          103.6.21.0/24 maxlen: 24
                          103.6.22.0/24 maxlen: 24
                          103.6.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Jan  5 07:47:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48043-a7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:b3:36:b3:3d:c1:22:c7:da:36:61:77:ec:
                    e5:3c:c8:6e:60:43:26:48:8e:34:5d:41:56:ec:fa:
                    9f:c4:80:ad:e4:0a:03:9a:10:e0:66:f4:1b:d1:f0:
                    27:27:c3:35:cb:d2:32:3b:31:ef:80:ac:1e:de:53:
                    bb:71:1f:2e:2a:ee:59:7c:9e:b1:ad:d1:f7:51:5f:
                    fd:10:31:fe:40:b6:1b:a4:cc:50:cc:79:27:16:25:
                    f9:eb:a8:4b:8d:64:47:f9:ee:ea:12:0c:34:c2:8c:
                    a6:96:a1:76:5b:6d:88:e4:1d:67:61:f7:04:63:54:
                    3e:69:10:36:d0:a6:75:44:6a:35:bd:a6:5a:c2:9e:
                    1b:c1:4d:db:57:e2:b0:0c:bb:40:6e:da:4f:ce:8f:
                    c7:e2:d6:b6:c0:be:22:99:d4:89:17:e6:21:ae:7d:
                    4a:37:dd:10:07:a5:36:0f:0e:ef:2a:61:b2:7b:0a:
                    3d:ee:14:8e:93:9a:86:c1:0b:b7:bc:b9:47:32:fc:
                    c6:b7:e1:42:14:0a:d4:a6:0c:b3:d0:45:eb:01:61:
                    f8:0e:56:68:a0:e2:5f:64:3c:8a:dc:7b:a6:d4:c9:
                    9f:f1:12:39:78:4d:34:f0:31:3e:6e:34:29:a4:89:
                    28:a5:78:ed:8b:5c:21:65:df:3f:7f:c4:3f:55:f9:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:80:DF:5A:CC:57:40:42:07:9B:A1:3A:0B:34:F1:68:AB:F7:D8
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/4580DDDEEA0A11F09D7A92E76F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:b1:d3:5d:51:3c:b8:dc:31:c8:41:e5:d3:dd:dd:d8:c3:
         36:19:db:7e:b8:dc:1c:d3:60:6a:1e:0f:a4:53:d6:76:03:b4:
         20:5c:bf:f3:7f:ef:2c:7b:eb:8e:e5:ed:1e:fa:66:3a:14:ce:
         82:80:e0:16:66:34:c5:b6:44:97:85:60:da:5b:5d:a7:9b:93:
         ad:7d:8f:e4:03:a3:27:f3:07:b6:c1:a4:dd:fc:52:ca:7c:c7:
         a3:14:04:0b:5a:72:ab:e7:2a:70:42:1d:e4:c6:0a:58:5c:17:
         67:4c:dc:71:52:01:ff:84:61:f0:3d:14:86:f0:e6:74:07:cf:
         d1:80:b1:2f:9a:89:52:ea:5a:6d:42:59:5a:41:42:21:5a:45:
         85:c5:d2:e3:e3:ba:14:54:f5:ce:34:24:6b:9e:9c:a7:3a:cc:
         e5:0f:19:dc:f5:35:87:6c:a7:0a:a4:f8:4c:6e:ca:da:a9:a5:
         7f:0c:b3:80:4c:d8:20:b5:78:79:13:6f:ea:c0:78:c5:b6:ec:
         2d:67:8d:c5:37:c4:7d:8d:ba:3f:aa:ad:6d:42:ae:95:7d:ff:
         09:bd:27:53:e3:43:3a:2b:9c:bb:fe:52:8c:55:87:58:1b:ea:
         f3:92:15:49:91:62:ec:c9:2f:66:41:de:5d:f2:b9:f0:6e:41:
         c7:a8:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:43 2026 by rpki-client