Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/4EBEF63CBED211F0A23A3C71C4F9AE02.roa
File:                     4EBEF63CBED211F0A23A3C71C4F9AE02.roa (raw, json)
Hash identifier:          XmSNpG3x/xJcnrIUNERB7ShS0oOIc4LR1nTIV8tVQMg=
Subject key identifier:   47:78:FD:7A:2B:08:E2:F3:8D:98:88:C2:4F:C3:F4:2E:BA:6A:F2:1E
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       06C0
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/4EBEF63CBED211F0A23A3C71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:48:18 +0000
ROA not before:           Tue 11 Nov 2025 07:44:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.151.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Nov 11 07:44:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47be1-af86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:2d:b5:6b:78:09:5d:31:db:16:10:15:9d:
                    ea:ea:ba:ea:51:e4:ad:64:18:fd:8d:da:36:54:23:
                    d1:0e:1c:08:43:dd:45:6d:04:ce:cc:e2:2a:3e:07:
                    80:01:e0:f8:5e:80:1c:9c:e0:15:84:c9:f1:69:29:
                    4b:37:cf:03:2c:23:4f:02:9c:d2:90:bc:f5:e7:b3:
                    46:d3:f8:3a:69:be:12:a8:6b:18:f3:9e:8f:18:18:
                    4e:6d:eb:87:af:6d:4d:d3:81:06:dc:d1:bd:e6:8f:
                    f4:6b:5f:a7:87:98:19:06:3b:bc:cc:17:51:38:a0:
                    f7:6d:35:d5:0b:8d:b7:1d:d2:97:1c:24:b4:26:2e:
                    7f:1e:bc:e0:ec:a5:f2:67:13:fc:4c:97:21:17:7e:
                    71:64:0d:b5:5e:60:91:56:46:68:32:02:dd:19:99:
                    e9:29:6e:76:fc:2d:df:9d:e9:51:38:1c:ec:f1:c5:
                    b3:72:03:32:a8:16:8d:f5:98:83:62:b9:6b:29:da:
                    b0:37:45:0e:e6:1d:ed:b8:0e:9b:a9:8f:92:b3:33:
                    64:69:0d:2e:82:11:93:29:1b:90:c9:d0:ae:d7:90:
                    12:09:fa:a4:39:af:31:9a:aa:c7:b8:e4:85:8b:ae:
                    a6:0b:48:62:c5:7a:b7:89:4f:ac:cf:ce:cf:04:0b:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:FD:7A:2B:08:E2:F3:8D:98:88:C2:4F:C3:F4:2E:BA:6A:F2:1E
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/4EBEF63CBED211F0A23A3C71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:8c:cd:df:b0:1d:04:17:8b:22:97:84:e0:86:2e:64:19:2a:
         a7:13:31:3e:21:ee:56:69:1a:43:bf:7e:b2:03:87:ca:88:c6:
         3c:2a:a3:44:92:ec:fc:85:94:f8:c0:66:2c:da:f8:65:5f:86:
         e6:46:fb:25:43:14:ad:2f:80:b2:f0:c4:cc:d4:b7:f6:38:c3:
         f0:d8:33:fb:b5:12:c2:86:a1:14:8e:a4:c8:66:88:c7:4c:3d:
         ed:7c:3a:f9:d3:53:2d:cb:3c:c9:51:2d:bb:6a:b3:69:a9:fb:
         cf:e8:cc:e7:fb:fe:c4:c8:e3:1c:24:e9:40:cb:ef:84:c4:4f:
         75:31:f2:05:c3:64:04:26:63:b6:87:89:96:a8:20:02:7b:86:
         92:6a:a6:40:ae:4b:e2:53:dd:ea:ad:2c:d1:10:e4:ef:06:8a:
         7d:e6:3f:6b:9d:84:0c:a6:ba:0c:6d:50:47:f9:4e:d3:6c:c2:
         6f:52:90:dc:d8:d4:8e:69:c2:d4:7b:2f:49:be:cd:f7:f0:cd:
         95:ac:32:03:40:d7:5a:71:13:82:3a:6e:e4:f3:e3:74:d5:f2:
         79:0e:bd:15:81:ab:fb:cd:69:a5:26:02:0a:86:22:d2:ee:5c:
         d1:a3:7c:9e:4b:35:9b:98:6d:ce:a6:98:df:99:1a:5f:a1:8a:
         08:08:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:46 2026 by rpki-client