Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
File:                     6063C75CB6E411EE94471D14C4F9AE02.roa (raw, json)
Hash identifier:          ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=
Subject key identifier:   CD:8D:E5:BA:DA:03:C2:0C:9C:D3:31:96:E6:EB:DD:47:4D:DC:CC:B8
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       01B0
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:41:26 +0000
ROA not before:           Sun 13 Jul 2025 05:10:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151406
IP address blocks:        103.224.93.0/24 maxlen: 24
                          115.187.22.0/24 maxlen: 24
                          2001:df2:9540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Jul 13 05:10:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3eda6-414c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:8b:57:8d:db:eb:2d:e9:24:c1:33:af:72:
                    8d:fd:06:5d:9f:6f:48:38:73:c5:1a:ae:81:87:88:
                    13:2e:2b:1b:40:39:04:3b:a2:09:52:7d:b7:2e:77:
                    93:71:2c:93:9a:56:c7:76:2f:1e:27:bf:29:fe:d4:
                    04:45:9b:f0:02:3d:24:95:c0:3e:9c:5d:66:be:59:
                    02:b0:fd:f8:ae:48:ef:64:e2:ee:75:19:4a:19:11:
                    91:4e:3c:f1:15:2e:d3:45:8f:3f:5a:ce:88:53:6c:
                    84:58:1a:01:0f:51:ce:cd:54:af:ee:f7:d9:d1:6f:
                    b4:b3:50:59:2f:06:5b:d9:d4:75:1b:37:40:ca:8f:
                    c9:e1:b3:8b:a9:8f:ac:7f:83:af:2d:ba:41:68:4e:
                    19:dc:f1:0b:e5:80:33:2f:69:7f:e7:d8:ce:ac:14:
                    4d:3e:dd:c6:88:1a:5f:34:61:83:d0:03:cb:8d:7a:
                    c8:ec:aa:45:99:9a:a1:fa:fe:e8:6d:bb:05:31:51:
                    7a:44:10:8c:d6:2c:33:35:72:90:e6:2a:6c:0d:1b:
                    73:a4:a6:9b:9d:fb:60:3e:62:23:22:b2:4d:9c:b6:
                    09:a8:97:41:62:7e:dc:c4:12:1c:bd:43:73:7a:1e:
                    49:5d:78:45:06:a7:b1:31:39:c2:e8:66:20:85:12:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8D:E5:BA:DA:03:C2:0C:9C:D3:31:96:E6:EB:DD:47:4D:DC:CC:B8
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.93.0/24
                  115.187.22.0/24
                IPv6:
                  2001:df2:9540::/48

    Signature Algorithm: sha256WithRSAEncryption
         ee:c6:e0:c3:c0:f8:47:d5:61:26:48:45:39:3e:c8:0b:fd:e6:
         96:93:5d:36:db:ed:0d:6e:91:d5:58:33:17:e9:a3:b0:ca:d3:
         cd:e4:52:cc:f4:66:75:d4:e2:23:64:da:6b:15:27:08:c0:36:
         6a:88:db:40:d7:0f:a8:58:f6:e3:b7:7c:89:48:60:92:18:af:
         e9:6a:d1:c8:04:2e:27:91:61:c7:f2:2f:84:f6:3a:3c:20:08:
         ab:77:9d:6d:9b:12:32:2b:61:7a:c7:6a:f3:fc:24:5c:a3:a9:
         0b:26:33:96:7e:a7:a6:4e:08:92:f3:e7:99:f0:2f:5b:1c:30:
         e1:06:1f:a9:40:b5:69:ff:72:4b:16:8c:a0:6b:b2:a0:b9:1d:
         04:f7:58:4b:bf:b4:da:56:9d:05:c8:bc:b4:96:64:1c:11:08:
         06:ba:a2:58:00:52:2a:d4:49:a0:30:f7:fd:f0:7d:da:a9:7c:
         f3:90:55:27:03:fe:37:a3:83:b2:65:65:7b:27:7f:2f:5a:66:
         ed:25:4c:9e:88:de:ad:ab:05:da:ab:75:3a:c0:ca:f6:d7:53:
         b5:bb:e2:a0:3a:98:ec:b4:07:ec:e5:7d:40:c1:be:28:f5:9a:
         fd:1a:e8:f7:d0:73:fc:81:41:e1:6e:08:3f:fd:09:7e:df:06:
         60:c8:02:5b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw
NUVFODY4Q0EwHhcNMjUwNzEzMDUxMDU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWRhNi00MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApg6LV43b6y3pJMEzr3KN/QZdn29IOHPFGq6Bh4gTLisbQDkEO6IJUn23LneT
cSyTmlbHdi8eJ78p/tQERZvwAj0klcA+nF1mvlkCsP34rkjvZOLudRlKGRGRTjzx
FS7TRY8/Ws6IU2yEWBoBD1HOzVSv7vfZ0W+0s1BZLwZb2dR1GzdAyo/J4bOLqY+s
f4OvLbpBaE4Z3PEL5YAzL2l/59jOrBRNPt3GiBpfNGGD0APLjXrI7KpFmZqh+v7o
bbsFMVF6RBCM1iwzNXKQ5ipsDRtzpKabnftgPmIjIrJNnLYJqJdBYn7cxBIcvUNz
eh5JXXhFBqexMTnC6GYghRKaiwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFM2N5bra
A8IMnNMxlubr3UdN3My4MB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1
ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc3MjQvRDczOTg3Mjg5NTg3MTFFRUFEM0JCMjYyQzRGOUFFMDIvNjA2M0M3NUNC
NkU0MTFFRTk0NDcxRDE0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAZ+BdAwQAc7sWMA8EAgACMAkDBwAgAQ3ylUAwDQYJKoZIhvcNAQEL
BQADggEBAO7G4MPA+EfVYSZIRTk+yAv95paTXTbb7Q1ukdVYMxfpo7DK083kUsz0
ZnXU4iNk2msVJwjANmqI20DXD6hY9uO3fIlIYJIYr+lq0cgELieRYcfyL4T2Ojwg
CKt3nW2bEjIrYXrHavP8JFyjqQsmM5Z+p6ZOCJLz55nwL1scMOEGH6lAtWn/cksW
jKBrsqC5HQT3WEu/tNpWnQXIvLSWZBwRCAa6olgAUirUSaAw9/3wfdqpfPOQVScD
/jejg7JlZXsnfy9aZu0lTJ6I3q2rBdqrdTrAyvbXU7W74qA6mOy0B+zlfUDBvij1
mv0a6PfQc/yBQeFuCD/9CX7fBmDIAls=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:12 2026 by rpki-client