Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/6D655B7CAF4F11F0A741B236C4F9AE02.roa
File:                     6D655B7CAF4F11F0A741B236C4F9AE02.roa (raw, json)
Hash identifier:          JOTDaZTtPOulyiXEU8fAlrbO6JcxlY6Sqs1GxFz3+Wc=
Subject key identifier:   66:91:63:53:B2:43:B2:C7:10:7F:71:F4:30:62:42:59:8E:1E:D4:FF
Certificate issuer:       /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial:       0605
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/6D655B7CAF4F11F0A741B236C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:06:11 +0000
ROA not before:           Wed 22 Oct 2025 14:00:12 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     203120
IP address blocks:        103.210.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
                          rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
        Validity
            Not Before: Oct 22 14:00:12 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a463f3-afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:d6:22:1c:45:0b:c9:6d:34:27:fa:08:56:
                    b8:bb:48:bd:82:84:92:7f:d6:71:c2:17:64:55:fb:
                    fb:2f:5c:d3:24:d4:b8:d9:7a:88:e8:98:4a:6f:f4:
                    ee:48:10:02:18:cc:5e:2a:ac:e6:9c:49:b8:6c:be:
                    ae:d5:c4:ba:0c:95:af:9b:73:66:85:89:65:a7:75:
                    3d:00:e5:6e:e7:93:4f:3f:32:69:01:75:20:03:19:
                    d5:06:2a:5e:f4:a6:6d:a2:69:a2:9b:25:40:0e:e4:
                    bd:e5:62:ea:f2:52:b0:46:e8:97:0e:cc:83:54:2b:
                    a0:f4:f0:73:c6:79:f9:48:90:56:63:c5:12:db:44:
                    28:3c:61:77:ac:2a:c1:01:06:d4:9c:b8:2a:e3:db:
                    33:c0:80:a5:1d:0d:46:bc:b2:22:fc:1d:f7:a4:06:
                    bb:cb:de:d6:6f:78:a4:8d:b6:dc:72:82:d4:7b:5e:
                    28:2d:98:9e:74:7f:dd:2d:11:b9:89:d1:be:23:f4:
                    47:49:85:3a:18:d3:af:fe:75:7d:0f:02:88:76:d7:
                    b3:da:23:d9:a0:c7:24:48:ac:d0:0d:cd:fc:20:83:
                    49:71:2d:dc:f4:04:d3:12:3f:54:67:90:57:fe:be:
                    48:3c:6a:06:e8:ef:55:6d:31:ba:38:02:34:6b:39:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:91:63:53:B2:43:B2:C7:10:7F:71:F4:30:62:42:59:8E:1E:D4:FF
            X509v3 Authority Key Identifier:
                keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/6D655B7CAF4F11F0A741B236C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:35:d6:6d:26:32:6c:88:84:d8:aa:fa:d0:2a:05:98:13:
         16:0f:24:aa:6c:ff:6a:9f:ad:22:95:39:f9:fc:5c:f0:d6:6b:
         ad:b7:37:18:51:8a:78:bf:20:3d:05:b4:ff:01:e6:02:52:50:
         81:1d:97:5c:ea:8b:9b:1e:d6:6e:c9:96:1d:67:f2:09:ea:38:
         e9:d0:81:03:9c:61:16:98:c0:04:7c:9e:25:30:f3:05:ba:94:
         f7:96:27:0b:2f:d2:45:6d:d9:b2:72:15:9f:f5:b4:ab:65:46:
         83:a9:d2:61:52:0d:3c:77:62:8d:30:c9:f7:1a:85:1f:8f:ea:
         9f:aa:47:81:c7:9e:04:7b:db:cc:04:c2:af:af:8a:a0:a3:e2:
         b7:5c:4a:46:72:27:bf:ab:55:50:c6:f7:a0:6d:56:7e:f1:e2:
         38:9e:79:6d:78:7c:70:98:c8:68:ee:c6:3e:82:59:1b:0d:a7:
         34:e1:da:15:be:c3:87:9e:01:e4:ea:f7:1e:3f:c1:41:ce:21:
         4f:69:35:ce:66:54:00:97:ef:c0:b9:06:b0:4e:cc:df:da:dc:
         e5:1e:e1:ce:a2:c9:fa:79:3d:18:21:d3:cf:5a:8d:8b:27:c1:
         f7:b1:05:92:f5:d9:c0:a7:ca:9d:40:3f:fd:42:34:6a:52:54:
         be:5d:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:02 2026 by rpki-client