Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
File:                     6E108B3EE2B211E9B2944855C4F9AE02.roa (raw, json)
Hash identifier:          l2mydQuOVLMIeiJESXRJpx5wncrhcHvLmXdDnK7v4j8=
Subject key identifier:   49:02:CC:1E:FF:FA:55:EE:63:09:D3:EE:7A:66:C0:A3:4D:48:E1:2F
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0D9D
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:18:01 +0000
ROA not before:           Thu 10 Apr 2025 18:27:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135416
IP address blocks:        103.218.164.0/24 maxlen: 24
                          2402:bc40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
                          rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3485 (0xd9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: Apr 10 18:27:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42e79-68c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:df:29:45:b8:76:4d:19:e2:61:85:8c:97:
                    76:81:57:57:2d:38:9b:a7:26:7d:31:d9:3b:77:37:
                    30:71:76:67:4b:cb:30:8a:12:2e:dc:37:e7:20:ac:
                    13:cd:a7:27:cb:bd:82:c3:a3:b2:36:ae:89:23:8c:
                    2a:16:10:8c:38:c5:a5:a9:30:52:ff:46:c1:e5:98:
                    87:c1:89:da:50:b3:bf:57:ca:53:b2:e2:0c:45:12:
                    01:0d:15:01:9b:f2:6e:d5:f1:97:8d:81:a5:eb:ed:
                    30:4e:49:4c:c0:9d:50:31:c3:55:0b:58:af:1f:bd:
                    4f:2a:3c:3c:8c:c8:b3:4d:71:b9:88:17:12:d6:fa:
                    60:b5:ae:87:c2:7a:46:f6:6f:f5:94:0a:d8:03:19:
                    dc:44:01:20:4a:5a:a0:32:80:9c:44:d3:b7:80:ca:
                    bf:c9:1d:11:16:c3:61:3d:61:54:ff:57:52:11:f2:
                    7e:7d:dc:d0:5d:ba:18:30:7b:90:94:53:9e:13:2e:
                    38:51:df:82:66:5f:75:f8:eb:bd:f3:b3:6b:d7:ea:
                    47:33:7f:19:70:1a:68:a8:eb:68:b2:5e:0f:51:a1:
                    7e:db:12:fc:4f:fd:fa:30:f9:4b:a5:20:cc:f5:b5:
                    aa:da:3a:c3:87:19:f8:85:00:82:fc:96:96:b8:05:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:CC:1E:FF:FA:55:EE:63:09:D3:EE:7A:66:C0:A3:4D:48:E1:2F
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.164.0/24
                IPv6:
                  2402:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:19:67:15:c8:bf:79:1a:45:cd:ec:a7:bb:6a:be:4b:43:e4:
         6c:08:b6:ab:40:5d:68:c6:ab:74:90:c3:b5:e8:64:e9:de:8e:
         23:39:04:af:4e:ef:33:38:64:5c:21:5f:87:70:1c:59:ec:58:
         ed:46:df:bb:47:76:60:f5:48:84:2f:07:5d:fa:34:97:61:ff:
         28:3c:26:ab:0e:d8:75:22:d1:df:ba:59:ae:47:f0:66:13:ab:
         56:2a:cd:23:05:c4:88:13:03:f1:b2:29:75:10:6b:4e:b1:7f:
         1c:cc:59:3c:70:62:22:67:5f:dd:52:c9:d8:c6:b9:a8:bd:90:
         92:71:6a:5a:3c:2c:81:3d:27:f3:91:9a:70:6d:2b:7e:30:9d:
         98:12:bc:99:33:3f:5e:59:9f:fc:16:32:b2:14:a6:8f:53:77:
         1c:cf:55:7c:ca:02:c7:72:45:ac:52:17:01:ee:ce:75:e7:a2:
         3a:86:a9:68:07:99:2d:d0:4d:15:b4:83:db:a2:fb:a5:62:5c:
         dc:cd:98:dd:e2:7b:76:c5:4c:01:9f:03:0f:f9:2f:00:0d:05:
         c9:94:b9:38:4e:9f:dc:35:77:a4:59:3c:32:7b:e0:56:ce:1c:
         a1:f7:04:e7:e5:81:54:7a:68:47:dc:fc:a5:e4:33:9b:d2:84:
         da:ba:ad:0e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB
RUQ4REVBNUMwHhcNMjUwNDEwMTgyNzI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmU3OS02OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ubfKUW4dk0Z4mGFjJd2gVdXLTibpyZ9Mdk7dzcwcXZnS8swihIu3DfnIKwT
zacny72Cw6OyNq6JI4wqFhCMOMWlqTBS/0bB5ZiHwYnaULO/V8pTsuIMRRIBDRUB
m/Ju1fGXjYGl6+0wTklMwJ1QMcNVC1ivH71PKjw8jMizTXG5iBcS1vpgta6HwnpG
9m/1lArYAxncRAEgSlqgMoCcRNO3gMq/yR0RFsNhPWFU/1dSEfJ+fdzQXboYMHuQ
lFOeEy44Ud+CZl91+Ou987Nr1+pHM38ZcBpoqOtosl4PUaF+2xL8T/36MPlLpSDM
9bWq2jrDhxn4hQCC/JaWuAX0+QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEkCzB7/
+lXuYwnT7npmwKNNSOEvMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy
QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA5RDcvNEE0MjgyOTRFMkIxMTFFOUJDRUE0RjUzQzRGOUFFMDIvNkUxMDhCM0VF
MkIyMTFFOUIyOTQ0ODU1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAZ9qkMA0EAgACMAcDBQAkArxAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ
GWcVyL95GkXN7Ke7ar5LQ+RsCLarQF1oxqt0kMO16GTp3o4jOQSvTu8zOGRcIV+H
cBxZ7FjtRt+7R3Zg9UiELwdd+jSXYf8oPCarDth1ItHfulmuR/BmE6tWKs0jBcSI
EwPxsil1EGtOsX8czFk8cGIiZ1/dUsnYxrmovZCScWpaPCyBPSfzkZpwbSt+MJ2Y
EryZMz9eWZ/8FjKyFKaPU3ccz1V8ygLHckWsUhcB7s5156I6hqloB5kt0E0VtIPb
ovulYlzczZjd4nt2xUwBnwMP+S8ADQXJlLk4Tp/cNXekWTwye+BWzhyh9wTn5YFU
emhH3Pyl5DOb0oTauq0O
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:21 2026 by rpki-client