Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/6FF4CA0E006311EAB403274DC4F9AE02.roa
File:                     6FF4CA0E006311EAB403274DC4F9AE02.roa (raw, json)
Hash identifier:          a71ernoBhJIlyoCkOYC1Njwd07ZtjDlydhtppbwh5UM=
Subject key identifier:   68:A9:BF:7C:78:BC:E6:4C:16:EE:16:59:27:7A:F5:70:32:56:A8:F4
Certificate issuer:       /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
Certificate serial:       0CF6
Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/6FF4CA0E006311EAB403274DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:22:56 +0000
ROA not before:           Mon 02 Jun 2025 19:00:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133945
IP address blocks:        103.91.52.0/23 maxlen: 23
                          103.91.52.0/24 maxlen: 24
                          103.91.53.0/24 maxlen: 24
                          2001:df3:ea80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3318 (0xcf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864
        Validity
            Not Before: Jun  2 19:00:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40570-6b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:0b:cd:ca:81:8a:b8:74:fa:10:e0:91:9e:
                    90:89:05:15:3f:9f:1a:19:ed:48:a0:73:3b:b9:de:
                    ca:8d:c4:df:e4:84:f0:ec:ff:ab:3b:c1:7e:d0:02:
                    1d:19:5e:c2:8d:44:3c:6f:70:91:53:39:34:ac:31:
                    a2:6a:54:15:6b:69:65:ae:91:f5:ff:93:68:bb:b1:
                    65:72:52:41:3e:23:bc:2b:8a:70:9e:3d:a9:b0:2f:
                    2c:09:31:37:a4:4d:2d:d5:38:b6:f8:b6:9d:e7:13:
                    47:16:0f:51:b0:27:74:94:a8:e9:ee:f2:9a:60:2c:
                    60:cc:9a:42:18:b9:90:04:d4:3b:c6:16:9b:90:02:
                    4a:1b:60:a7:c6:da:93:e0:e4:0b:e8:8e:1b:5a:18:
                    5f:ad:6d:76:a8:7d:ce:29:bd:49:42:91:ac:18:39:
                    ed:b2:a4:1a:c1:1a:4f:05:60:85:10:bd:a6:50:2b:
                    67:25:c0:62:8f:e3:45:89:91:07:14:ca:91:84:03:
                    7b:ac:7b:56:77:bc:69:fa:00:70:f9:4f:f1:33:34:
                    e9:29:dc:b2:70:38:62:2f:33:76:d5:7e:44:9a:64:
                    48:45:6a:3c:f5:7b:63:21:c2:70:e9:43:cb:71:b6:
                    48:44:cf:12:f6:7d:57:06:aa:cb:c8:d8:10:f1:33:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A9:BF:7C:78:BC:E6:4C:16:EE:16:59:27:7A:F5:70:32:56:A8:F4
            X509v3 Authority Key Identifier:
                keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/6FF4CA0E006311EAB403274DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.52.0/23
                IPv6:
                  2001:df3:ea80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:61:44:0e:a5:9a:ff:b0:5a:d3:27:91:63:83:d8:61:a1:0d:
         f0:67:5d:9d:d9:4b:55:46:db:80:8c:22:4f:11:66:8c:47:cb:
         7f:a5:5b:52:eb:c4:c0:80:b7:18:30:e2:37:d8:22:6a:58:63:
         aa:49:53:c7:b6:23:5b:c3:9a:34:d6:4f:b3:33:27:b9:9f:87:
         06:a2:63:78:4c:e3:93:f3:f4:4e:e8:07:a2:77:66:82:56:69:
         42:b8:ed:f1:e6:82:94:9d:f4:91:3a:43:c6:c7:65:04:73:24:
         e4:d9:20:68:7b:a8:0e:b2:25:a7:b5:fb:1b:94:46:0f:24:63:
         23:44:6f:a8:6e:7c:4b:7c:aa:9e:d3:29:d3:04:f3:f6:c7:8b:
         70:d5:96:2e:b1:f8:91:5d:48:d7:b9:ac:1e:fe:f3:f6:88:a8:
         6f:0d:17:ca:0c:a7:b7:ea:ec:3a:3f:a7:6f:05:34:90:96:40:
         c0:89:ff:f9:f6:98:ce:d2:99:83:df:13:a5:fc:ea:54:67:95:
         7b:91:7e:1b:7d:15:2d:44:05:be:e7:5a:c8:52:16:8d:90:02:
         c1:0c:bb:b9:b6:fc:33:0e:05:54:c7:7e:cc:e9:72:21:f6:59:
         d5:35:70:4f:23:82:ed:1a:ca:68:c4:16:37:0d:46:92:bc:49:
         b9:ee:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:48:14 2026 by rpki-client