Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa
File:                     6880FA2C59D211EAB77C8C13C4F9AE02.roa (raw, json)
Hash identifier:          hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=
Subject key identifier:   2E:CC:E9:1F:21:8F:00:0B:CA:6A:EA:81:E7:40:1D:EA:F4:A8:4F:CE
Certificate issuer:       /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial:       23C8
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:53:52 +0000
ROA not before:           Fri 30 Jan 2026 16:13:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56017
IP address blocks:        43.249.176.0/22 maxlen: 24
                          103.4.72.0/22 maxlen: 24
                          113.197.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9160 (0x23c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
        Validity
            Not Before: Jan 30 16:13:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46110-a3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:2a:f5:ba:de:4f:b5:aa:8f:8c:5a:83:e4:
                    52:6d:88:2f:6f:18:7a:4a:4d:5a:70:f5:3b:1b:44:
                    ea:27:0e:fc:7c:b6:f2:59:44:c3:e5:15:d4:0d:cc:
                    a0:d5:31:a3:b2:3f:6c:11:40:07:8e:f1:0a:a3:32:
                    7d:01:31:e1:07:69:f8:27:6d:ba:cb:a7:33:b7:a1:
                    de:ba:86:71:32:80:a7:90:42:6a:85:af:d0:f9:bf:
                    c0:19:63:7a:d6:a7:4e:2b:55:c4:76:70:7c:d5:91:
                    d0:57:20:f9:e5:a4:a8:58:3f:b2:9c:ab:32:ec:a1:
                    0d:90:92:60:21:51:9c:e9:2e:61:89:1d:15:e0:54:
                    95:4d:3b:26:2a:80:40:cb:05:0e:36:9d:e0:e8:50:
                    d3:6d:f7:b9:84:52:fe:ef:c8:aa:43:c0:b7:f1:51:
                    bc:0f:f4:f7:ca:77:7b:28:8d:07:1e:31:72:e4:45:
                    7a:a7:41:92:9e:8c:68:5e:26:de:26:b7:88:34:41:
                    5d:8d:71:70:ad:80:7d:c4:0e:6b:c1:08:1c:86:85:
                    58:a7:cd:cd:4b:28:cb:cc:98:41:5d:b4:8f:a9:4b:
                    bf:a4:2b:25:bb:ef:cc:9a:d0:52:52:4a:2a:81:d0:
                    1d:6f:de:c7:b9:f1:2c:19:3d:78:2a:28:c3:fe:d5:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CC:E9:1F:21:8F:00:0B:CA:6A:EA:81:E7:40:1D:EA:F4:A8:4F:CE
            X509v3 Authority Key Identifier:
                keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/6880FA2C59D211EAB77C8C13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.176.0/22
                  103.4.72.0/22
                  113.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:91:7f:80:a3:8e:56:49:7a:7d:a3:21:43:0b:d6:06:cf:5e:
         9a:b3:02:df:41:38:15:f9:49:b1:75:bd:8d:c5:22:b9:2e:c7:
         ac:36:67:eb:c8:1f:6d:cb:fb:8b:ed:d3:65:10:59:4a:ea:8c:
         15:ac:49:ff:08:4d:e0:46:99:f1:57:b8:1a:40:de:e5:79:5c:
         2a:73:b3:a9:55:9b:f8:20:0c:b9:3a:61:eb:ed:64:e6:4b:66:
         56:85:6d:99:58:86:8f:26:37:f7:9a:f8:90:6e:fb:82:59:6a:
         5c:a6:21:1c:b7:f7:aa:28:26:9a:7f:dc:9f:ff:f9:c3:8f:4c:
         52:5a:59:ec:12:13:09:25:14:db:62:a2:a7:1e:07:b4:08:88:
         d7:24:7f:b6:59:2e:f5:a9:1a:ef:17:2f:11:a8:fc:e8:17:03:
         e4:91:56:a8:2c:d0:2c:cb:e6:16:05:e6:04:ad:be:c3:ae:6b:
         43:a6:3b:fd:01:90:a7:e1:65:77:9e:8b:fa:1b:bc:76:30:c8:
         11:e9:63:3d:00:e6:c9:09:05:aa:14:a5:91:e7:8b:9a:ef:cb:
         f9:a9:62:ba:81:48:f9:a1:5a:d8:f6:2f:ac:22:33:c1:cd:d2:
         2b:ba:ac:ed:a4:01:6b:f9:3e:e7:c1:bd:d5:31:f8:89:90:17:
         ed:e0:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:32 2026 by rpki-client