Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6B3307CE4D8411EFBAD45B86C4F9AE02.roa
File:                     6B3307CE4D8411EFBAD45B86C4F9AE02.roa (raw, json)
Hash identifier:          zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=
Subject key identifier:   3C:2C:AF:87:41:A8:81:85:D8:2D:62:24:E7:2F:3C:51:3F:27:18:E7
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0BE4
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6B3307CE4D8411EFBAD45B86C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:21 +0000
ROA not before:           Sun 02 Nov 2025 19:08:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.11.4.0/24 maxlen: 24
                          103.11.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3044 (0xbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  2 19:08:53 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a483dd-46a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:8e:8d:2c:47:1a:3e:4d:86:42:31:a6:f1:
                    97:a9:e9:1e:2a:98:6e:a8:f9:03:49:41:b3:7e:98:
                    b0:3a:7d:a9:bb:57:8b:7e:78:d1:49:71:c4:6e:55:
                    50:c6:41:ce:4b:ad:5a:83:80:f5:6a:69:52:55:96:
                    cb:0b:fc:c4:4d:c3:07:cf:40:1c:61:f4:1b:dc:50:
                    b3:12:ea:ca:3e:e2:b4:03:52:3d:36:db:ca:9f:30:
                    e2:e1:92:78:e1:14:e9:c9:46:3c:05:18:15:79:60:
                    8a:d0:9d:a8:63:7f:ac:0d:af:cf:12:e7:53:8a:74:
                    70:1c:71:ad:6d:a6:7d:26:1d:ff:b7:9e:fc:79:4b:
                    ca:ed:ea:40:53:cf:b7:40:e8:14:fe:cf:0d:fc:46:
                    b1:17:bf:6f:75:6e:52:40:10:ce:3d:4e:e0:01:11:
                    10:87:2e:98:aa:b2:4e:b1:d1:25:92:c8:93:47:55:
                    fd:0c:06:fe:0d:f3:88:bb:b0:b8:9a:00:f3:e4:ec:
                    7c:c7:a4:20:80:f1:1f:eb:42:e4:6d:a2:02:34:83:
                    c0:c8:21:b4:fc:3c:77:a9:67:f3:ea:ea:cd:02:cd:
                    ae:bb:96:d8:1a:49:c2:fe:f9:e6:a4:cc:e8:35:48:
                    f2:81:e7:15:7e:fe:d3:9f:4c:16:5a:2c:ee:ef:25:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:AF:87:41:A8:81:85:D8:2D:62:24:E7:2F:3C:51:3F:27:18:E7
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6B3307CE4D8411EFBAD45B86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:48:7b:2f:88:f7:48:4c:ea:6e:a7:0f:b8:8f:7f:3f:27:b6:
         94:e1:2e:62:e7:42:89:7c:48:97:cc:bb:99:c9:98:36:44:d3:
         64:62:c3:b5:a8:42:9c:3a:db:d7:0c:29:62:1b:7b:94:9c:95:
         ab:6d:cb:a4:5c:7c:d7:11:de:a0:2b:64:82:a6:6a:28:60:d1:
         6a:63:c6:a3:4c:23:5c:59:01:ae:d9:1c:4e:76:3e:aa:ff:7e:
         51:00:6e:73:82:98:f5:90:12:38:f4:1f:ba:a4:ad:34:84:6f:
         15:d6:e4:c4:bd:ee:3b:df:0f:2d:69:80:34:19:58:f3:f1:a6:
         56:3d:6d:79:d4:90:b7:f7:22:8e:c5:33:bd:40:92:07:ac:da:
         8c:8a:3c:bb:3b:19:d7:26:22:d6:42:2d:f4:82:5d:a9:ba:38:
         0e:85:17:59:24:51:bf:f1:d2:bd:f8:ab:9c:3c:c5:4a:32:48:
         dc:23:30:39:5e:ee:18:36:46:fe:66:d3:6a:07:ab:2d:06:ce:
         a1:cf:d2:56:57:b0:03:c2:fd:a5:7a:b5:05:2c:23:a3:d6:c2:
         07:58:5d:03:96:bb:11:33:e6:b2:84:b0:ef:1c:e6:a0:17:bd:
         c9:aa:27:56:c5:55:05:fd:de:ec:54:70:0c:99:3f:75:a0:00:
         c9:fb:1a:7e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF
MUNCOEZFRTUwHhcNMjUxMTAyMTkwODUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNkZC00NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxeOjSxHGj5NhkIxpvGXqekeKphuqPkDSUGzfpiwOn2pu1eLfnjRSXHEblVQ
xkHOS61ag4D1amlSVZbLC/zETcMHz0AcYfQb3FCzEurKPuK0A1I9NtvKnzDi4ZJ4
4RTpyUY8BRgVeWCK0J2oY3+sDa/PEudTinRwHHGtbaZ9Jh3/t578eUvK7epAU8+3
QOgU/s8N/EaxF79vdW5SQBDOPU7gAREQhy6YqrJOsdElksiTR1X9DAb+DfOIu7C4
mgDz5Ox8x6QggPEf60LkbaICNIPAyCG0/Dx3qWfz6urNAs2uu5bYGknC/vnmpMzo
NUjygecVfv7Tn0wWWizu7yVwLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDwsr4dB
qIGF2C1iJOcvPFE/JxjnMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx
NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvNkIzMzA3Q0U0
RDg0MTFFRkJBRDQ1Qjg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZwsEMA0GCSqGSIb3DQEBCwUAA4IBAQA0SHsviPdITOpupw+4j38/
J7aU4S5i50KJfEiXzLuZyZg2RNNkYsO1qEKcOtvXDCliG3uUnJWrbcukXHzXEd6g
K2SCpmooYNFqY8ajTCNcWQGu2RxOdj6q/35RAG5zgpj1kBI49B+6pK00hG8V1uTE
ve473w8taYA0GVjz8aZWPW151JC39yKOxTO9QJIHrNqMijy7OxnXJiLWQi30gl2p
ujgOhRdZJFG/8dK9+KucPMVKMkjcIzA5Xu4YNkb+ZtNqB6stBs6hz9JWV7ADwv2l
erUFLCOj1sIHWF0DlrsRM+ayhLDvHOagF73JqidWxVUF/d7sVHAMmT91oADJ+xp+
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:38 2026 by rpki-client