Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa
File:                     6D7F22A60DF511EBA2098D67C4F9AE02.roa (raw, json)
Hash identifier:          DIF1F4I3XEY1SyEqm6sFB7hbPE0I7U/7i32gJNFVq8Y=
Subject key identifier:   2C:80:F6:74:FF:5C:E3:98:7A:E4:10:32:C6:51:53:CE:C2:0D:54:BF
Certificate issuer:       /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial:       0826
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:38:57 +0000
ROA not before:           Fri 20 Jun 2025 21:20:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24323
IP address blocks:        103.231.176.0/24 maxlen: 24
                          103.231.177.0/24 maxlen: 24
                          103.231.178.0/24 maxlen: 24
                          103.231.179.0/24 maxlen: 24
                          116.206.56.0/24 maxlen: 24
                          116.206.57.0/24 maxlen: 24
                          116.206.58.0/24 maxlen: 24
                          116.206.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Validity
            Not Before: Jun 20 21:20:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3fb21-451f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:9e:1c:4e:55:8f:5d:31:fd:64:28:d8:d0:
                    b6:7f:e8:f1:b5:d1:55:fd:3d:fc:eb:cc:cb:67:6b:
                    43:31:9a:69:77:45:85:bf:d1:11:48:d3:13:66:ae:
                    c2:44:e8:de:de:5e:e4:1b:c0:d0:52:31:71:05:b2:
                    9f:3b:73:23:92:cf:55:15:2a:ee:ab:71:ba:90:e4:
                    fb:4b:dd:da:f6:4d:fa:87:88:09:5f:37:49:82:02:
                    41:b7:fc:3e:d5:6f:25:34:3e:ab:bb:d5:26:0e:b3:
                    66:5c:1c:92:59:af:45:5c:ea:b2:b6:e1:c6:91:db:
                    28:89:48:bc:b6:87:a2:ce:7c:d2:d9:a0:54:a0:be:
                    31:7a:7b:a0:e9:02:54:7c:c2:12:af:98:44:25:49:
                    48:c0:95:90:2e:88:18:bc:ea:eb:27:3e:d7:b5:5f:
                    02:6d:30:e6:08:e1:91:42:11:02:99:16:7e:c1:1e:
                    ea:18:15:f4:d5:5c:0f:db:c9:f0:82:17:56:fb:1e:
                    4a:e2:d6:b5:ce:99:cd:57:c6:a3:e3:91:0d:29:a8:
                    c8:9c:97:b4:d3:12:64:8c:11:b5:2b:7e:e1:4d:03:
                    bf:5b:f6:e0:02:86:07:1d:b0:9d:28:49:66:bc:b6:
                    4b:d9:44:b9:ae:14:18:9c:d8:66:41:fc:71:2d:ca:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:80:F6:74:FF:5C:E3:98:7A:E4:10:32:C6:51:53:CE:C2:0D:54:BF
            X509v3 Authority Key Identifier:
                keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.176.0/22
                  116.206.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:38:3b:6f:90:41:69:de:ea:8c:6e:f3:a1:53:4b:ac:be:6a:
         50:87:20:fb:cc:42:0d:6c:4b:89:03:d6:49:67:7a:77:c1:a1:
         58:e8:ca:ac:1b:e8:d7:3d:1e:b8:bb:03:41:87:59:99:57:76:
         09:d3:83:2c:0c:8e:6f:a5:60:ad:29:77:32:c8:b7:29:0e:73:
         28:bd:83:2b:21:33:99:d3:a4:94:b1:cc:6d:0b:0c:5e:34:64:
         a5:17:71:af:28:df:b9:4c:ea:f7:0f:ed:61:41:b6:d6:91:fd:
         35:78:34:f4:ac:28:ec:78:fc:97:ed:80:ff:0d:40:08:f7:8d:
         ff:ce:b4:99:2d:7d:f9:bb:29:c5:1a:74:da:a7:cd:e5:d9:e9:
         bc:35:48:28:f2:2b:e4:a7:45:2e:97:71:6b:08:01:f3:0d:ca:
         14:48:06:2f:3f:16:39:18:aa:a0:83:0f:c6:68:a8:f5:6a:29:
         6f:2b:09:1f:b5:92:f5:1d:e4:eb:21:d8:0e:ee:c2:f9:c4:65:
         c5:40:98:4c:a1:5b:3f:de:84:cd:78:00:d3:d5:bb:6c:5f:55:
         01:64:75:9c:95:80:97:7b:94:59:67:52:ee:76:4f:19:ee:62:
         92:b4:6c:3a:4e:f5:77:a1:6d:21:00:b2:28:f5:b3:80:e2:53:
         c6:e3:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:26 2026 by rpki-client