Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
File:                     6E3B1338F41211E9AAF5924EC4F9AE02.roa (raw, json)
Hash identifier:          X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=
Subject key identifier:   D4:7B:C9:24:B6:E2:BA:13:C3:91:3B:07:77:D0:BA:F0:F0:E4:DF:3B
Certificate issuer:       /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial:       0D38
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:52:04 +0000
ROA not before:           Mon 08 Sep 2025 18:28:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63526
IP address blocks:        103.101.197.0/24 maxlen: 24
                          103.101.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
                          rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3384 (0xd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
        Validity
            Not Before: Sep  8 18:28:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44484-28d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:1a:d0:6b:2c:e4:fe:6d:95:ee:12:a2:64:
                    d3:44:9a:79:e7:96:4f:95:9a:2b:00:5f:85:d0:21:
                    f6:35:ee:19:bf:68:b7:8e:bb:01:47:cc:03:53:26:
                    63:a9:c1:bc:d1:1e:f6:f4:3a:1d:e5:6f:96:98:e1:
                    41:b8:3b:27:58:84:82:ea:9f:10:b3:ce:0b:d2:58:
                    5d:7d:dd:bd:9a:d4:f1:86:8f:4f:91:1d:21:99:05:
                    d8:df:eb:06:d6:68:9b:e3:39:ab:80:4e:0b:12:75:
                    42:20:1c:18:b6:ec:7c:8d:f0:bf:f0:93:ae:44:b3:
                    f0:45:fd:6f:b4:70:05:ac:ad:0c:8e:dd:0e:f9:43:
                    ca:da:56:56:61:6d:e7:0f:25:ea:78:6a:0c:b6:ba:
                    4e:af:56:1e:79:51:eb:f2:2a:d1:bb:31:a7:12:99:
                    11:50:ea:1c:3c:87:ef:42:fe:0c:6b:85:02:82:1a:
                    8b:27:3a:d3:68:4d:c7:ff:19:3c:ec:d6:be:06:f9:
                    70:4e:7c:cc:c0:50:2a:a1:1d:06:1d:d1:e0:3f:8b:
                    f8:43:26:08:4e:22:37:e3:c2:29:2f:ed:70:0a:29:
                    c6:12:d9:3d:e1:95:17:6e:1f:ec:6f:a6:41:f4:7d:
                    af:dc:29:e4:e8:22:87:fe:0d:7e:71:a9:5a:4c:17:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7B:C9:24:B6:E2:BA:13:C3:91:3B:07:77:D0:BA:F0:F0:E4:DF:3B
            X509v3 Authority Key Identifier:
                keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.197.0/24
                  103.101.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4a:c1:74:58:a3:b7:e5:e6:29:73:d0:be:39:8d:5e:1b:92:
         54:dd:09:17:bd:d1:d6:83:90:ec:0d:90:69:80:1c:bd:e9:be:
         3a:b2:a8:33:f2:b2:dd:b3:3c:f1:d5:a9:48:07:66:ce:eb:67:
         96:e6:47:38:38:6f:e4:7e:2f:ff:c8:aa:66:2b:37:9f:31:02:
         b1:fb:09:4a:48:e0:23:2d:d1:2b:f0:34:86:f8:b7:ee:a4:75:
         13:a7:1b:d4:a1:97:e2:9f:d5:4b:ca:3f:57:31:bb:96:c9:bd:
         d6:1d:0e:7a:32:1a:90:77:08:57:20:bc:eb:b0:c0:31:e2:34:
         a7:19:96:b9:43:62:89:ee:d4:29:05:40:49:e9:f7:8e:ca:52:
         1a:33:13:48:16:29:08:07:79:07:4a:5f:7e:a6:20:2d:e2:6a:
         4b:bd:1f:3e:e1:20:8e:29:0d:7c:68:0a:5e:d1:ac:8c:41:eb:
         b7:c2:cf:97:cf:5a:05:05:26:16:41:3b:48:4d:9a:67:54:37:
         58:10:e1:89:eb:b6:84:68:88:44:bb:2f:32:de:d3:92:c9:56:
         aa:8c:2c:78:8a:98:65:82:ef:da:c0:a2:9c:6b:df:c7:ff:ee:
         55:a2:cd:d4:17:3f:68:e3:df:be:2d:e4:69:7a:bb:f1:e5:94:
         0d:4d:b1:6b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC
N0UyMEE2MTEwHhcNMjUwOTA4MTgyODExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDQ4NC0yOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsP8a0Gss5P5tle4SomTTRJp555ZPlZorAF+F0CH2Ne4Zv2i3jrsBR8wDUyZj
qcG80R729Dod5W+WmOFBuDsnWISC6p8Qs84L0lhdfd29mtTxho9PkR0hmQXY3+sG
1mib4zmrgE4LEnVCIBwYtux8jfC/8JOuRLPwRf1vtHAFrK0Mjt0O+UPK2lZWYW3n
DyXqeGoMtrpOr1YeeVHr8irRuzGnEpkRUOocPIfvQv4Ma4UCghqLJzrTaE3H/xk8
7Na+BvlwTnzMwFAqoR0GHdHgP4v4QyYITiI348IpL+1wCinGEtk94ZUXbh/sb6ZB
9H2v3Cnk6CKH/g1+calaTBdvjwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNR7ySS2
4roTw5E7B3fQuvDw5N87MB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0
MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFCMUEvNTFGRkM0RTRGNDExMTFFOUE0MzVCMDRDQzRGOUFFMDIvNkUzQjEzMzhG
NDEyMTFFOUFBRjU5MjRFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2XFAwQAZ2XHMA0GCSqGSIb3DQEBCwUAA4IBAQAaSsF0WKO35eYp
c9C+OY1eG5JU3QkXvdHWg5DsDZBpgBy96b46sqgz8rLdszzx1alIB2bO62eW5kc4
OG/kfi//yKpmKzefMQKx+wlKSOAjLdEr8DSG+LfupHUTpxvUoZfin9VLyj9XMbuW
yb3WHQ56MhqQdwhXILzrsMAx4jSnGZa5Q2KJ7tQpBUBJ6feOylIaMxNIFikIB3kH
Sl9+piAt4mpLvR8+4SCOKQ18aApe0ayMQeu3ws+Xz1oFBSYWQTtITZpnVDdYEOGJ
67aEaIhEuy8y3tOSyVaqjCx4iphlgu/awKKca9/H/+5Vos3UFz9o49++LeRpervx
5ZQNTbFr
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:33 2026 by rpki-client