Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/6D353E4E97F711EFB3A27D59C4F9AE02.roa
File:                     6D353E4E97F711EFB3A27D59C4F9AE02.roa (raw, json)
Hash identifier:          IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=
Subject key identifier:   F6:97:F2:25:4E:59:C4:54:E3:D4:03:80:5C:11:72:F4:EA:40:51:30
Certificate issuer:       /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial:       0656
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/6D353E4E97F711EFB3A27D59C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 23:29:17 +0000
ROA not before:           Wed 08 Apr 2026 23:29:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139880
IP address blocks:        103.165.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
                          rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
        Validity
            Not Before: Apr  8 23:29:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d6e4cc-807b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:49:b9:b4:86:2f:a6:8f:d4:b3:6c:34:c2:
                    84:05:4e:a2:e7:97:8b:30:8a:fb:a9:b6:be:80:5e:
                    63:c1:49:5b:13:12:1a:51:6b:7b:a5:28:8f:5a:ec:
                    9c:e2:2d:50:4e:dd:71:02:c0:ce:c6:42:21:29:c5:
                    da:51:dc:75:83:cf:8a:b6:b8:81:1f:73:c0:36:9a:
                    b0:2b:74:9a:f0:9b:56:72:58:11:8f:31:c7:df:0b:
                    92:bd:11:20:7e:15:98:0b:e4:14:2e:1d:be:96:cd:
                    48:ed:80:42:a8:7b:b0:f3:73:6a:97:a0:39:9a:70:
                    8c:56:6f:fa:3d:fb:94:b2:a2:32:a7:1c:d5:76:6e:
                    8e:88:89:ad:68:0d:79:15:a6:86:d1:70:95:e9:0f:
                    26:a9:10:25:78:3b:af:a6:b5:5a:c6:27:1c:37:01:
                    f5:a2:b3:6e:a8:40:27:49:b8:95:2a:42:80:90:93:
                    10:b2:be:dd:72:42:fd:68:49:05:ca:7f:65:f5:c2:
                    a6:97:15:9e:fd:62:50:42:9c:69:2b:c0:61:0d:d2:
                    aa:d3:a0:95:29:2c:1c:9e:b5:86:d3:65:17:a7:a6:
                    50:d7:1c:58:28:fd:ad:6b:13:c3:e3:be:24:fa:74:
                    9f:40:4c:29:fc:60:db:9b:77:cd:01:86:44:7e:f4:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:97:F2:25:4E:59:C4:54:E3:D4:03:80:5C:11:72:F4:EA:40:51:30
            X509v3 Authority Key Identifier:
                keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/6D353E4E97F711EFB3A27D59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:06:97:40:94:73:fb:e1:de:e9:d6:b7:9c:db:42:83:d7:
         6b:eb:5d:9c:fb:db:04:b4:f7:85:0b:ef:a8:c8:45:d2:2c:b6:
         33:a8:b4:3f:45:74:2b:cb:4e:40:15:75:f2:3e:7c:4a:0b:22:
         bb:7b:5b:ee:26:e2:25:13:7a:82:fa:ed:43:85:81:aa:cd:59:
         6c:7b:1d:6e:00:0f:25:b8:41:ee:66:d4:cb:e7:7b:3c:b6:12:
         59:57:18:d0:e2:c8:96:5c:61:b1:fa:ae:75:b6:b9:65:f9:77:
         60:41:a8:87:5e:be:a0:69:fe:7d:5c:f0:ad:ad:32:82:a6:b2:
         4d:bd:5f:aa:c6:be:b4:23:f3:77:f0:6d:e2:37:af:4e:a9:fc:
         00:34:f1:65:11:bf:22:4e:e7:5f:17:d5:4d:bb:37:87:a1:c0:
         77:9a:31:c5:52:3f:8d:9a:17:44:59:04:ed:b0:aa:19:f9:bf:
         da:47:62:35:58:36:ae:42:13:8c:61:58:2c:ae:9d:d3:e1:67:
         50:08:c1:0f:01:c0:11:cd:b6:ee:31:21:9a:86:60:a1:40:fb:
         c8:b4:3d:d4:9d:71:d9:e0:36:01:e9:28:72:ee:3e:7c:e8:69:
         12:3b:61:d6:9c:55:33:20:2b:04:b0:90:d3:74:94:5f:6a:8c:
         e3:98:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:36 2026 by rpki-client