Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa
File:                     6E4711FE544F11EFA572D230C4F9AE02.roa (raw, json)
Hash identifier:          gapT1kNW12nUbHr8c3uu1/58dn16AFUjAC6CWS5jWek=
Subject key identifier:   C2:51:3E:66:51:1D:07:B5:58:37:09:29:9F:5E:B2:09:96:02:6B:61
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       03B6
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:58:09 +0000
ROA not before:           Tue 03 Jun 2025 01:55:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153180
IP address blocks:        103.187.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Jun  3 01:55:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ffa1-00a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:cc:05:61:88:a4:6a:ce:0a:ba:b7:34:45:
                    d6:08:91:6e:aa:58:5d:8a:d3:ad:7b:00:0a:71:3f:
                    45:42:6b:7c:e4:2b:5b:62:36:e0:d7:16:dd:90:e5:
                    44:c5:c1:b5:5e:f8:f8:8e:4f:5c:49:29:44:bc:5c:
                    3d:f0:3e:75:80:eb:2c:44:77:0d:ab:68:25:90:58:
                    62:39:73:a3:ab:da:ef:54:d1:97:01:81:bb:61:d1:
                    9a:95:e3:45:48:c8:31:e8:08:f4:05:17:46:72:20:
                    10:de:16:6e:39:66:6c:56:cb:3d:e5:9c:f9:67:e1:
                    f5:92:e0:29:10:b6:7d:70:5e:3f:da:04:77:63:bf:
                    7a:f3:6a:99:f7:10:f7:b4:cb:af:14:9b:6c:f8:31:
                    12:35:3c:18:17:ab:a6:70:2c:1d:eb:57:4a:13:49:
                    aa:c2:de:7e:06:e5:6f:6b:ea:5e:03:dd:b1:02:27:
                    0b:c4:3d:82:92:cf:75:a5:d2:40:98:af:3b:05:51:
                    b1:27:c5:5f:56:eb:a8:18:de:3f:ed:42:18:f8:91:
                    60:be:07:5c:91:f2:70:27:11:d5:c3:43:b1:dc:b2:
                    a5:56:80:61:18:d0:32:22:68:4c:e1:66:b5:2f:36:
                    8d:d6:05:2c:f6:c0:75:57:ad:ea:f0:85:4d:7a:35:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:3E:66:51:1D:07:B5:58:37:09:29:9F:5E:B2:09:96:02:6B:61
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:9b:f7:31:21:ec:8f:0c:56:42:70:1c:14:a7:9b:41:4d:
         47:5d:32:b4:5b:60:cf:b9:cb:a3:31:ae:31:3b:7a:0b:6b:6b:
         26:29:10:89:4d:b1:f9:7f:b4:2e:c7:fa:61:e7:83:cd:24:33:
         1b:2f:ee:b2:82:1d:b5:7b:17:ad:56:94:50:75:af:03:14:16:
         f3:11:ac:6a:6a:44:32:89:bd:05:96:16:9e:fa:43:51:fc:25:
         ce:8f:4f:81:8c:2f:fd:74:f8:ce:ec:b3:a4:61:86:e7:18:af:
         a1:91:e2:46:f4:2d:35:9e:c3:d1:7c:54:ed:18:bc:03:f2:56:
         e5:4d:b7:72:13:73:b0:d6:90:19:33:a4:b4:fc:5c:e1:25:89:
         ec:5c:1b:7c:8f:6a:29:2f:b6:77:cc:1d:10:2c:8c:d2:19:16:
         92:e4:b2:7d:b0:10:db:c3:1c:67:78:5e:60:dc:2d:73:4f:b4:
         08:16:6b:d4:c3:34:f2:ea:0c:6e:2b:56:23:74:d7:41:8e:e5:
         75:4c:68:2b:7c:5a:92:0d:aa:dc:cc:6e:83:d5:93:61:6f:b3:
         7c:05:93:ba:f3:dd:f6:b5:82:bc:fd:1c:6a:3f:95:19:3c:cc:
         90:70:9c:5e:58:04:57:21:dd:d1:54:84:69:77:a2:62:17:00:
         88:f2:bb:21
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC
QTNFODFFMkUwHhcNMjUwNjAzMDE1NTIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmZhMS0wMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWbMBWGIpGrOCrq3NEXWCJFuqlhditOtewAKcT9FQmt85CtbYjbg1xbdkOVE
xcG1Xvj4jk9cSSlEvFw98D51gOssRHcNq2glkFhiOXOjq9rvVNGXAYG7YdGaleNF
SMgx6Aj0BRdGciAQ3hZuOWZsVss95Zz5Z+H1kuApELZ9cF4/2gR3Y79682qZ9xD3
tMuvFJts+DESNTwYF6umcCwd61dKE0mqwt5+BuVva+peA92xAicLxD2Cks91pdJA
mK87BVGxJ8VfVuuoGN4/7UIY+JFgvgdckfJwJxHVw0Ox3LKlVoBhGNAyImhM4Wa1
LzaN1gUs9sB1V63q8IVNejVQcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMJRPmZR
HQe1WDcJKZ9esgmWAmthMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND
MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDk5MDcvRjcxNEJEQ0FDQzJFMTFFQzgyM0JFRTM1QzRGOUFFMDIvNkU0NzExRkU1
NDRGMTFFRkE1NzJEMjMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7sHMA0GCSqGSIb3DQEBCwUAA4IBAQCl1Zv3MSHsjwxWQnAcFKeb
QU1HXTK0W2DPucujMa4xO3oLa2smKRCJTbH5f7Qux/ph54PNJDMbL+6ygh21exet
VpRQda8DFBbzEaxqakQyib0Flhae+kNR/CXOj0+BjC/9dPjO7LOkYYbnGK+hkeJG
9C01nsPRfFTtGLwD8lblTbdyE3Ow1pAZM6S0/FzhJYnsXBt8j2opL7Z3zB0QLIzS
GRaS5LJ9sBDbwxxneF5g3C1zT7QIFmvUwzTy6gxuK1YjdNdBjuV1TGgrfFqSDarc
zG6D1ZNhb7N8BZO68932tYK8/RxqP5UZPMyQcJxeWARXId3RVIRpd6JiFwCI8rsh
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:34 2026 by rpki-client