Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
File:                     6ABF1108DD0C11EFBD619B85C4F9AE02.roa (raw, json)
Hash identifier:          AtJXhGbpe0IGvYDkOxPehzOoBbgxE6sXFpH6oYgKz8E=
Subject key identifier:   FF:A4:AC:6B:48:D7:DC:11:C3:8F:F5:F1:B4:7F:D3:35:F3:A7:D5:7B
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       F2
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:55:49 +0000
ROA not before:           Thu 01 May 2025 06:45:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134101
IP address blocks:        103.52.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: May  1 06:45:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e2f5-7c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:60:1b:b1:b4:52:93:13:3c:af:1a:0a:94:
                    23:16:06:c6:51:c1:a7:03:30:2c:5d:e7:39:f7:c4:
                    7c:17:de:0e:a8:1c:9b:c4:80:82:7f:55:72:9d:29:
                    a2:3a:c7:7a:19:56:9a:08:f6:ef:a4:ec:29:32:91:
                    fb:c3:ac:f0:99:ce:d6:91:f3:34:28:9b:89:30:2e:
                    6e:55:a1:80:0c:00:33:5f:96:bb:ff:2b:06:3a:26:
                    93:d7:db:23:ab:83:68:80:a9:58:14:61:0f:7e:1f:
                    b3:74:d5:a9:96:d7:ab:b7:99:7a:60:2e:55:c1:06:
                    96:1d:9e:c1:26:44:8d:18:e1:cf:02:81:c7:7d:e4:
                    da:de:ae:fd:db:03:6d:fa:36:dd:04:4b:53:4f:2c:
                    cd:bb:ee:d9:5c:1d:cc:a0:06:ed:27:3f:07:ab:3d:
                    a8:f4:92:75:39:77:35:79:20:83:18:fe:e1:ce:d8:
                    a2:3e:8e:fa:2e:94:8e:30:1f:11:44:82:b2:2e:16:
                    4f:eb:a6:d8:55:37:4a:90:56:0e:90:b7:d8:2d:2b:
                    62:86:cb:bf:31:09:6a:39:98:dc:a9:86:f4:2b:68:
                    48:db:d1:af:c4:c1:c2:b3:70:fc:f9:d6:25:1a:87:
                    20:10:9e:96:13:16:bc:bf:ea:2d:dd:4d:19:6d:3b:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:AC:6B:48:D7:DC:11:C3:8F:F5:F1:B4:7F:D3:35:F3:A7:D5:7B
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:60:23:5b:dd:7a:8f:ff:cc:29:3b:bf:90:cc:45:b8:71:df:
         85:37:5e:76:fe:4e:ec:33:e0:34:34:60:14:1f:6c:3d:a2:b6:
         8e:55:a6:8c:af:3f:d2:40:18:45:a5:65:9e:ee:f6:3e:c6:e5:
         ca:57:51:4f:cf:23:ec:1e:7d:c1:68:d2:71:7b:07:4b:23:e9:
         2e:5e:1f:c5:2a:b4:fc:df:d4:a2:36:7a:8c:e5:b3:53:fa:29:
         0e:92:66:b2:da:0e:e9:e0:b8:c0:bb:07:c6:25:07:8e:b2:a4:
         dd:b7:a2:41:f2:7f:73:e5:17:6c:a8:ab:9f:7d:ff:9a:35:36:
         35:ed:4e:60:ef:ba:49:14:b9:79:39:09:cb:9a:5e:fd:2c:84:
         4c:74:c0:bf:ff:85:07:b2:66:75:47:af:b9:2a:ae:01:62:7a:
         04:22:a9:d3:1a:fd:dd:5f:d9:9a:fc:4e:57:5c:d2:12:72:55:
         a7:29:1b:c1:d2:b4:90:68:2d:c3:67:18:1a:83:53:39:d4:14:
         07:89:77:f6:e9:ba:74:12:c3:d3:13:6b:08:1e:ec:a4:87:13:
         b9:8f:5e:61:bd:78:8f:03:24:e1:ea:05:ba:a6:a1:52:a4:f1:
         ca:ba:e3:ad:4b:01:70:f5:6e:cc:9a:29:0a:64:6e:92:18:2a:
         50:ab:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:04 2026 by rpki-client