Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/BE42116AB76311EE81395B37C4F9AE02.roa
File:                     BE42116AB76311EE81395B37C4F9AE02.roa (raw, json)
Hash identifier:          ccfp5MaPihMDXvR4gizAlQuliYGbvzQac29HBQqF0qQ=
Subject key identifier:   6C:5F:67:C8:FF:4F:C2:78:95:9B:1D:0E:FD:39:BC:F0:59:B0:D2:42
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       0192
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/BE42116AB76311EE81395B37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:42:03 +0000
ROA not before:           Tue 25 Mar 2025 04:41:10 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58533
IP address blocks:        103.6.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Mar 25 04:41:10 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3dfbb-e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:eb:73:75:ef:ef:b0:41:f1:4d:89:ee:5e:
                    ec:9b:39:60:55:4e:32:4a:f2:5c:ec:d5:de:54:e9:
                    ba:fb:f3:d7:c3:6e:8f:71:69:9e:14:26:c2:eb:b1:
                    a4:04:d8:56:7d:ed:04:35:b2:dc:42:30:9a:63:72:
                    e8:bd:e9:5b:58:47:98:9b:62:4b:bd:2b:3f:27:23:
                    a3:b3:87:66:8b:b7:8b:90:0a:09:78:c7:fa:72:71:
                    b2:02:ee:74:2c:6f:00:47:43:a0:94:4f:23:d5:3f:
                    d5:32:ed:7c:b1:ba:16:2a:d0:42:1d:29:fe:95:15:
                    d5:47:f3:22:41:11:c0:32:99:41:05:d8:1b:2a:1f:
                    69:2d:a1:83:88:34:6a:d3:ab:72:eb:f7:4d:da:3c:
                    1b:dd:8a:d2:63:0a:57:02:45:bb:7c:f3:f2:f1:d7:
                    23:e5:61:4e:a7:a0:4b:e9:e0:fd:da:73:d5:6c:ce:
                    f2:7e:f4:95:bc:89:3f:fe:1c:9f:75:e0:07:a9:1d:
                    44:0d:6d:df:c6:60:b8:19:3a:7e:6b:20:83:43:03:
                    8d:f6:a0:8c:14:2a:11:1b:a0:0d:88:6f:0d:d3:3f:
                    b2:7d:01:d6:95:82:4a:87:6b:6f:68:74:eb:c6:f4:
                    d4:c4:64:81:5c:7d:2d:5c:fc:ea:4d:17:c3:4e:9a:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5F:67:C8:FF:4F:C2:78:95:9B:1D:0E:FD:39:BC:F0:59:B0:D2:42
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/BE42116AB76311EE81395B37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:fb:00:db:21:51:5b:b3:01:a3:3b:8d:cb:cb:14:ea:92:
         f4:82:b1:d9:11:88:b4:ac:2e:9c:b5:78:78:4e:2e:53:48:01:
         d2:c4:8d:83:0d:77:f9:e4:dd:dc:99:c9:d8:06:a6:cd:1d:02:
         9a:25:b2:1c:74:f7:1e:12:33:87:ca:ca:2f:6b:a2:4d:da:3d:
         b2:a8:ab:c1:a9:05:49:e6:6f:12:c7:78:6d:70:55:f8:f7:37:
         09:64:11:89:ee:26:37:ac:b9:62:ce:a5:2d:e2:f7:e4:65:dd:
         ac:2d:e7:ef:7f:9f:0c:9f:96:94:fb:b9:f6:94:a2:75:3f:99:
         a4:8e:7d:39:57:05:f5:96:eb:c9:0b:ba:59:43:6c:ce:07:05:
         ab:3a:e7:00:c8:2e:bd:f2:bd:68:fb:ee:1d:27:d7:13:3c:ae:
         e6:33:55:3d:ff:30:22:ea:82:e7:10:1e:b9:ab:29:29:0f:b5:
         1a:bb:98:6a:f5:df:b9:3f:e1:29:d0:e5:93:c7:14:36:ce:c7:
         92:ec:4d:3e:e1:e7:09:6c:43:a7:64:6a:22:a9:1d:17:52:8a:
         f2:62:b4:c3:19:be:20:b7:0d:e0:a6:3f:a0:dd:e2:ae:b2:3c:
         04:67:48:f3:62:cf:2e:4b:b0:9b:f2:a4:51:9b:35:c8:28:cd:
         9b:29:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:05 2026 by rpki-client