Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa
File:                     C6FF76A0000C11F1BBD3B1413E6F56BC.roa (raw, json)
Hash identifier:          Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=
Subject key identifier:   6E:A1:D2:5D:ED:9F:A7:E9:91:7C:AF:14:FB:87:43:FF:CA:7A:F6:3D
Certificate issuer:       /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial:       29A8
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:36:34 +0000
ROA not before:           Mon 02 Feb 2026 07:57:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58746
IP address blocks:        203.101.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10664 (0x29a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
        Validity
            Not Before: Feb  2 07:57:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48732-9492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:e4:3a:37:3d:57:ff:b6:1f:04:d4:63:33:
                    fa:14:3c:9f:29:92:d7:1c:15:b3:d1:ff:d9:92:cb:
                    c7:16:0b:68:95:81:c3:1f:e2:3f:54:b9:e6:77:6f:
                    f8:ba:13:db:cb:d8:b4:4a:58:bd:b8:fd:2c:39:85:
                    af:fc:bd:a7:49:e4:9b:fb:08:04:74:2a:fd:f9:7c:
                    0f:e9:ab:14:61:f2:5c:c5:fd:39:82:73:ac:ac:3a:
                    ad:95:f9:72:2b:99:45:14:34:45:3a:17:02:68:08:
                    6f:cf:6f:8e:70:4a:4e:12:0a:4d:33:4b:ee:54:47:
                    66:0c:6e:3d:d0:21:60:55:c6:7a:c6:49:0b:37:6a:
                    9f:ea:62:60:0a:53:dc:e9:af:6c:91:d6:ed:30:4c:
                    92:14:ac:94:ac:0a:62:e8:4c:2c:61:b2:c5:48:af:
                    4c:84:9f:95:2a:43:a2:2b:78:ac:75:82:53:e4:f2:
                    f0:e4:56:83:19:65:64:65:1d:f2:13:ea:eb:9d:17:
                    43:34:e8:67:16:22:a0:65:18:15:08:b6:9b:77:39:
                    f0:4c:6c:21:f0:9b:cb:8c:aa:78:18:08:3e:bf:8f:
                    ba:38:00:4b:3c:b0:ea:d3:78:2b:5d:5e:7e:55:84:
                    64:8e:20:6d:e0:ac:76:94:76:df:ca:ab:7c:af:c5:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A1:D2:5D:ED:9F:A7:E9:91:7C:AF:14:FB:87:43:FF:CA:7A:F6:3D
            X509v3 Authority Key Identifier:
                keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.101.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:66:96:0d:22:a3:db:23:a9:0f:2c:2b:94:15:d2:1f:33:
         e7:75:95:ad:f4:9a:b7:c1:3e:0f:38:23:43:15:86:53:b9:1a:
         a3:94:39:f4:40:e3:b4:6b:76:a0:a2:02:95:b1:4c:76:37:47:
         9d:36:d6:f6:9e:63:ba:ac:ff:03:49:14:c9:99:3e:e4:29:94:
         a5:f0:d2:d1:65:9a:5c:b3:33:36:32:d9:d0:49:af:07:d8:03:
         f6:79:f1:53:9b:31:09:00:29:83:ec:24:ad:7c:39:2d:61:c6:
         52:e5:7d:2a:cd:85:56:71:10:27:5f:66:00:9b:d3:a5:95:02:
         17:56:b7:ea:46:16:2c:06:65:a0:eb:10:fc:ec:5c:5c:5a:9d:
         3d:1a:f0:ed:aa:07:ba:c1:11:3a:46:cf:21:75:b8:74:b5:dd:
         92:22:e0:ec:28:f6:47:ef:b2:56:5d:d3:4d:54:bc:8d:08:ed:
         4c:88:c4:ec:05:ec:d2:dd:92:c5:bf:19:40:9e:d4:fa:c5:ad:
         10:9c:5c:a8:c0:e2:3a:03:a5:f1:aa:ea:77:5e:04:70:c0:dc:
         65:58:fc:f9:26:ca:4f:a4:81:41:de:6c:01:10:26:93:e0:95:
         d6:e3:d3:e0:81:30:cc:ea:91:bc:be:57:09:6f:5f:6e:f9:25:
         53:f1:aa:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF
QzUwNDhDRjcwHhcNMjYwMjAyMDc1NzEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODczMi05NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCfkOjc9V/+2HwTUYzP6FDyfKZLXHBWz0f/ZksvHFgtolYHDH+I/VLnmd2/4
uhPby9i0Sli9uP0sOYWv/L2nSeSb+wgEdCr9+XwP6asUYfJcxf05gnOsrDqtlfly
K5lFFDRFOhcCaAhvz2+OcEpOEgpNM0vuVEdmDG490CFgVcZ6xkkLN2qf6mJgClPc
6a9skdbtMEySFKyUrApi6EwsYbLFSK9MhJ+VKkOiK3isdYJT5PLw5FaDGWVkZR3y
E+rrnRdDNOhnFiKgZRgVCLabdznwTGwh8JvLjKp4GAg+v4+6OABLPLDq03grXV5+
VYRkjiBt4Kx2lHbfyqt8r8USDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG6h0l3t
n6fpkXyvFPuHQ//KevY9MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx
NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBGNjYvQkMxREMxRjZDMTc1MTFFNEEyQzdCNzRDQzRGOUFFMDIvQzZGRjc2QTAw
MDBDMTFGMUJCRDNCMTQxM0U2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy2WtMA0GCSqGSIb3DQEBCwUAA4IBAQAxbmaWDSKj2yOpDywrlBXS
HzPndZWt9Jq3wT4POCNDFYZTuRqjlDn0QOO0a3agogKVsUx2N0edNtb2nmO6rP8D
SRTJmT7kKZSl8NLRZZpcszM2MtnQSa8H2AP2efFTmzEJACmD7CStfDktYcZS5X0q
zYVWcRAnX2YAm9OllQIXVrfqRhYsBmWg6xD87FxcWp09GvDtqge6wRE6Rs8hdbh0
td2SIuDsKPZH77JWXdNNVLyNCO1MiMTsBezS3ZLFvxlAntT6xa0QnFyowOI6A6Xx
qup3XgRwwNxlWPz5JspPpIFB3mwBECaT4JXW49PggTDM6pG8vlcJb19u+SVT8aqt
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:58 2026 by rpki-client