Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
File:                     CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (raw, json)
Hash identifier:          ZzslUZUbSrFcLn8+l+U473zGQ7BO3ZOE7pR+hADREV4=
Subject key identifier:   09:B9:67:FE:3C:B2:25:AA:05:0A:DA:E1:22:E4:43:BE:39:67:15:D8
Certificate issuer:       /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial:       C0
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:59:23 +0000
ROA not before:           Mon 31 Mar 2025 07:02:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        203.6.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
                          rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
        Validity
            Not Before: Mar 31 07:02:43 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3e3cb-4622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:5f:57:0a:3f:8e:3c:c1:91:12:51:66:f3:
                    d7:83:42:6a:4b:fb:b7:e0:80:d1:85:7b:62:5e:1a:
                    db:b5:af:c3:ae:b1:46:c4:24:f8:8e:40:94:61:33:
                    b0:fb:db:97:95:28:d1:5c:9d:38:60:30:5c:6c:11:
                    5c:b7:b0:de:ed:f7:21:a2:af:ce:9d:eb:36:f1:d7:
                    7a:b8:5d:49:be:04:b0:2c:b6:04:26:bc:80:3a:72:
                    b2:7f:91:f1:4b:2b:57:09:ca:04:c9:f2:2a:d8:ab:
                    c3:bc:95:6a:29:aa:1a:a8:5f:da:7b:11:17:46:39:
                    5b:74:4b:48:34:16:80:67:ed:5f:45:fb:6f:ec:f6:
                    c5:67:e6:0e:50:79:81:6b:a1:2a:b3:54:db:fc:c6:
                    36:88:61:08:ac:f1:0a:a0:cc:f6:6a:66:8c:fd:5e:
                    f0:9b:66:a9:89:81:9c:cc:cc:d1:6d:a2:c8:b5:b0:
                    2e:d2:b5:54:e6:db:d3:4e:81:65:06:74:6d:4d:23:
                    3a:e3:54:ee:af:63:87:14:ca:24:31:ef:cd:58:d1:
                    dc:eb:49:82:d4:29:02:c2:41:bc:24:df:b2:87:20:
                    f2:02:ea:9e:d3:65:a5:c3:bf:cc:fe:f9:47:98:c7:
                    f4:0e:95:92:50:bc:0c:0d:e0:51:c9:a2:c6:55:88:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:67:FE:3C:B2:25:AA:05:0A:DA:E1:22:E4:43:BE:39:67:15:D8
            X509v3 Authority Key Identifier:
                keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a3:47:a6:7d:44:37:89:79:ad:54:ac:54:60:c5:1d:e9:0c:
         e0:b8:98:f0:ad:6f:8f:16:2c:c9:26:02:59:be:17:8c:7a:63:
         0c:0b:00:38:55:db:0d:8b:0b:7b:b6:a4:e3:3f:8e:46:6f:11:
         76:13:3d:ce:ae:56:74:7c:46:48:66:32:9b:7e:90:62:03:d5:
         97:e3:2d:52:f9:aa:cc:ac:05:bd:a4:45:35:9c:0a:91:5b:83:
         81:aa:be:6e:4e:f2:55:0e:74:5a:c0:e3:d5:ef:74:0b:71:c8:
         05:6a:af:86:b3:47:60:d9:eb:a1:96:6c:b8:96:dd:3a:ec:71:
         52:da:63:56:1b:c5:ee:58:d9:31:54:06:24:c6:10:f3:f7:21:
         c1:1d:0d:a9:55:a8:44:ca:f6:8d:3e:25:f6:f5:ed:ab:f0:12:
         6f:2b:1a:ba:fb:10:ca:45:1c:c5:8f:03:04:77:9f:f1:90:5c:
         3a:26:82:91:94:53:5a:7f:ae:42:1b:60:88:33:93:fa:f8:ca:
         09:f7:f6:9b:1b:74:54:c9:e6:18:6b:25:d5:51:f6:ff:6a:cd:
         dd:13:66:ae:54:24:88:0d:17:f3:4d:18:7b:38:82:60:2c:af:
         6b:55:c8:fc:38:22:15:eb:fa:74:94:46:60:46:19:51:1a:7b:
         eb:d2:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:26 2026 by rpki-client