Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
File:                     679A3A06D1F211ED8C598E75C4F9AE02.roa (raw, json)
Hash identifier:          GiGFmzfp0JcmzMEj9/8+EUQT4rCYMXVADjq597dRKsc=
Subject key identifier:   E4:A6:E8:C2:C6:BE:92:C3:4D:DD:56:D7:EA:CB:31:A0:43:E4:37:93
Certificate issuer:       /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial:       0268
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:37 +0000
ROA not before:           Tue 09 Dec 2025 00:38:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150381
IP address blocks:        103.24.18.0/23 maxlen: 23
                          103.24.18.0/24 maxlen: 24
                          103.24.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
                          rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
        Validity
            Not Before: Dec  9 00:38:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41bdd-62a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:64:b0:b7:e5:3e:ee:dd:5c:1c:71:90:81:
                    1f:e2:7c:ee:1b:6c:77:50:15:aa:db:30:d4:61:8e:
                    83:a6:3b:72:50:ed:4c:31:23:8f:41:ac:4d:bc:50:
                    98:be:ef:9e:7c:21:b4:8b:d2:ba:9e:30:92:55:ab:
                    3f:38:20:cf:3f:04:8b:65:61:ba:90:39:79:4d:51:
                    0e:1d:24:38:ee:81:e8:8e:8d:51:d8:51:db:6c:98:
                    0a:4c:d5:7c:db:7c:f6:39:68:a0:26:06:2d:a4:fd:
                    f1:fe:4a:6a:43:68:02:d4:4d:2e:e7:b2:be:94:ea:
                    ef:85:2e:c5:e0:61:16:a7:82:d3:e9:0b:6c:d0:67:
                    a7:23:95:0a:b0:b6:a1:a0:f6:78:be:11:8e:a1:d4:
                    88:b9:a4:fd:51:76:88:3e:81:16:88:d2:ee:43:28:
                    c2:24:57:31:50:c5:d9:d6:3a:f5:fc:cc:a6:20:a3:
                    de:89:c7:12:ab:95:f5:81:44:cd:f9:ba:96:8b:7d:
                    1d:12:6d:96:d5:f4:a7:16:f3:15:22:21:53:70:3e:
                    9f:17:ff:3e:6e:e3:96:64:2c:22:07:be:fb:2d:7b:
                    0f:e8:80:1e:87:15:36:2f:3b:ed:3d:05:bd:60:29:
                    c6:bc:8d:4e:22:dd:33:a8:78:b8:5e:c0:e0:1c:19:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A6:E8:C2:C6:BE:92:C3:4D:DD:56:D7:EA:CB:31:A0:43:E4:37:93
            X509v3 Authority Key Identifier:
                keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:2e:f5:0c:99:b4:37:42:e5:13:92:70:d3:f1:4e:31:c1:
         7a:c1:0b:28:96:75:36:71:e2:f4:45:c3:a4:20:a0:bd:cd:3d:
         03:1f:50:dc:79:1d:91:bf:10:9f:a3:09:d1:0f:60:dc:8e:cd:
         6a:98:b3:88:b0:b4:81:2d:b7:60:ad:04:89:dd:b5:5e:96:62:
         27:9e:be:ce:3a:5b:c4:0e:20:e9:b3:2a:bf:2c:8f:6a:bc:97:
         90:10:f1:03:22:cb:48:01:ee:36:59:21:64:3c:f3:46:6e:ad:
         69:a4:02:a4:bf:b4:5a:cd:04:65:2a:5c:57:0a:fc:e2:d0:03:
         26:35:22:6d:c6:44:9a:66:b9:52:79:6a:20:ce:c1:5d:75:f9:
         40:4b:fc:37:e1:a9:95:92:aa:75:8e:b7:1f:15:dd:d2:fb:25:
         61:53:21:fd:bd:46:29:fc:e5:04:8b:c2:db:f6:e9:36:48:51:
         ac:d3:5c:57:95:19:30:52:1e:37:fc:c6:72:da:f6:3a:82:7a:
         58:9c:7d:30:21:6a:d3:49:a9:1c:42:ca:12:f5:fa:f3:c0:5d:
         26:83:b9:40:54:c0:ed:d3:75:05:e6:92:e4:72:72:93:10:c7:
         a5:40:86:a6:25:a6:9c:b8:d8:97:51:de:64:c8:0e:3d:9d:06:
         76:c4:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:19 2026 by rpki-client