Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
File:                     69683D8CC64D11EABD8FD32DC4F9AE02.roa (raw, json)
Hash identifier:          IwF152B88MyYj3+SwcxFJmII7085PoXeU3cOeYPjjec=
Subject key identifier:   12:C4:32:A2:48:E5:DE:16:08:7A:75:AD:94:B6:EC:6C:87:EB:30:FB
Certificate issuer:       /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial:       0C57
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:55:40 +0000
ROA not before:           Tue 30 Sep 2025 19:18:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139741
IP address blocks:        103.144.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl
                          rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
        Validity
            Not Before: Sep 30 19:18:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4455c-fbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:19:35:38:79:7e:9e:48:46:ea:fb:fb:79:
                    c2:d7:2f:ac:1a:2b:4a:46:d8:6d:a9:28:4f:c6:e8:
                    27:f6:aa:1d:4a:ed:4d:e1:4f:bc:72:21:1a:a4:3f:
                    45:57:fb:dd:01:3f:78:8e:64:ea:7c:d0:5a:b3:ed:
                    52:7c:5c:c6:e3:ab:c3:53:45:62:d2:18:a6:d3:f3:
                    06:22:81:99:62:ac:10:a7:cf:d8:6f:7f:eb:e2:82:
                    8d:0f:f5:f6:00:a0:8a:73:f5:90:29:ff:3c:a3:9f:
                    36:2f:64:96:09:b6:29:dd:be:44:8d:6b:2f:70:15:
                    e3:06:60:c6:46:67:77:2a:e5:e1:d4:48:77:5f:37:
                    7b:47:4b:d6:ed:04:0d:a5:58:76:69:a6:69:ca:bd:
                    e2:9f:1b:54:a1:da:bc:b8:43:cd:56:4e:3f:57:ce:
                    9f:3c:0e:8d:35:6d:89:bb:d9:9b:d2:71:af:81:d8:
                    2e:b5:2e:ea:9a:d0:a5:9e:6b:89:a6:21:aa:1e:0e:
                    0c:3f:6d:c6:62:0c:c5:73:85:c9:f0:32:f3:ba:32:
                    2f:18:b0:1a:81:ad:5e:d7:3b:d2:8e:81:1a:44:47:
                    6e:63:22:41:2f:9c:6f:13:d8:f5:2e:65:fc:62:2c:
                    4b:7a:a8:8a:01:f7:75:59:0a:58:f3:27:25:04:d6:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C4:32:A2:48:E5:DE:16:08:7A:75:AD:94:B6:EC:6C:87:EB:30:FB
            X509v3 Authority Key Identifier:
                keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:68:02:a4:51:90:99:2d:b9:0d:8b:e0:a1:65:fd:9c:00:23:
         53:48:b0:97:2f:b3:a2:0c:e6:fa:61:d9:22:d2:9c:eb:30:e7:
         c9:09:f3:4f:24:2d:a9:fa:8e:1f:e8:b6:71:d2:33:f4:e6:8c:
         23:67:6b:94:a6:85:c3:ab:d7:bf:0e:42:40:e5:fe:65:5b:67:
         92:7a:38:86:0e:11:33:63:3b:7a:3a:a8:78:47:e9:10:03:14:
         10:0f:31:b1:47:60:11:84:ce:62:e0:26:a1:ff:63:9d:86:c6:
         21:dc:d0:d8:53:d5:fc:18:89:c1:ea:7b:ec:24:81:e9:36:e5:
         1c:c7:24:31:83:bb:fd:54:42:03:0f:c6:f6:60:b3:04:7b:c8:
         20:3e:3b:cd:be:f5:65:df:5d:1b:40:b8:b5:1d:d5:aa:c7:b6:
         24:03:e2:b0:42:df:bb:f0:51:51:3a:41:b3:62:e2:d2:3a:fe:
         8e:60:06:ad:1c:3a:e5:83:65:bb:ec:62:3b:fd:f1:3c:c7:87:
         17:0f:e9:b1:7f:46:b5:7a:63:6e:8d:6c:bd:9a:87:e6:0a:cb:
         46:e5:cc:af:7e:3f:46:14:48:83:e4:9d:69:6c:91:50:66:6c:
         7d:01:8f:e9:d1:6d:17:c0:0a:b7:c6:ce:45:05:48:70:4e:a3:
         fc:a8:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:12 2026 by rpki-client