Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa
File:                     6FCF7FF2180411EA9AA70A57C4F9AE02.roa (raw, json)
Hash identifier:          Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=
Subject key identifier:   8A:83:10:B7:70:6F:95:CE:68:3C:44:E4:97:45:3A:98:C9:B1:F0:4F
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0C75
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:54:55 +0000
ROA not before:           Fri 12 Dec 2025 18:35:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139788
IP address blocks:        103.145.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: Dec 12 18:35:37 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4452f-7a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:84:1a:d1:4e:0b:88:ba:08:20:a7:29:e6:
                    e0:10:e3:af:d3:ff:f4:6d:e3:ba:e8:08:3b:91:ad:
                    30:ae:e6:e9:7a:63:04:0c:94:41:bc:0e:b6:5b:92:
                    66:1d:2b:89:06:0b:0d:b0:e9:11:07:f9:6f:f2:c9:
                    8d:e4:6b:c8:43:9a:a7:30:c1:d4:9f:0c:6b:23:3e:
                    d4:ff:75:9a:dc:bd:15:91:e8:80:58:18:fa:2c:6d:
                    3f:d8:2b:d5:fe:04:6a:f8:a5:ad:55:e9:fa:73:68:
                    2d:bd:72:8e:ed:d6:71:a7:ac:81:38:eb:53:3b:ca:
                    ce:68:47:a3:10:fc:05:51:84:9e:75:e1:ec:d0:b0:
                    d7:3e:c2:7f:bf:27:da:da:35:ca:04:a7:c8:19:ed:
                    cf:81:97:a5:4f:f0:b8:0f:b6:49:d5:72:c3:13:19:
                    95:c1:cd:e1:d9:35:ef:b4:15:43:9d:03:b8:03:93:
                    e0:c6:58:79:5b:de:58:40:0c:a8:1c:a6:e0:28:2d:
                    9b:30:dc:29:96:02:b6:4e:c8:60:0f:a4:0e:e0:54:
                    1a:f3:1f:a7:ea:74:00:83:f1:60:f8:10:e7:34:71:
                    0e:79:50:9a:bc:44:28:ab:47:97:f6:97:46:d6:94:
                    0f:0a:6c:f4:e6:4f:31:60:09:56:2e:23:a8:cf:ff:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:10:B7:70:6F:95:CE:68:3C:44:E4:97:45:3A:98:C9:B1:F0:4F
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:6c:80:98:68:08:a5:5b:44:2d:f6:a8:88:12:f4:17:74:
         02:6b:83:2d:4c:de:49:5e:1e:01:f8:5c:43:5b:59:ea:d9:c6:
         82:a7:d4:93:da:1b:58:16:7d:5e:94:53:ac:d4:d7:a5:ef:18:
         26:2e:e1:b9:c0:60:67:e7:d6:89:ad:c4:59:e9:54:e0:49:b8:
         a0:d0:da:4c:3a:12:f2:07:f3:d2:b2:e3:39:4a:71:15:41:64:
         9e:29:68:30:fc:92:cb:e8:a2:a6:37:f8:cf:ba:82:5e:e6:68:
         88:eb:0f:44:a7:46:97:4b:4c:a9:a0:7e:39:85:20:7f:36:38:
         8e:5c:a4:2e:79:b8:3d:9b:60:7e:64:94:44:0f:4b:24:9b:28:
         50:8c:74:36:63:a4:5c:65:f4:91:60:3e:5a:ea:63:f3:84:b5:
         d7:16:1d:bc:48:c2:90:e4:5c:c9:0b:4d:72:b4:3e:bd:7f:04:
         ce:71:88:3f:6a:62:5c:ea:5b:29:f5:61:78:82:52:20:31:7a:
         50:80:48:c4:15:88:a6:18:e4:f0:3b:d5:72:da:9f:e1:de:ae:
         06:9c:4c:65:25:2d:bb:8b:a6:ef:7c:8b:16:ed:e5:69:64:87:
         dc:14:c4:d2:db:5d:8a:22:f1:f0:4c:04:57:15:8e:74:53:9b:
         bb:95:55:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG
RjhDMDg5RTMwHhcNMjUxMjEyMTgzNTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDUyZi03YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36uEGtFOC4i6CCCnKebgEOOv0//0beO66Ag7ka0wrubpemMEDJRBvA62W5Jm
HSuJBgsNsOkRB/lv8smN5GvIQ5qnMMHUnwxrIz7U/3Wa3L0VkeiAWBj6LG0/2CvV
/gRq+KWtVen6c2gtvXKO7dZxp6yBOOtTO8rOaEejEPwFUYSedeHs0LDXPsJ/vyfa
2jXKBKfIGe3PgZelT/C4D7ZJ1XLDExmVwc3h2TXvtBVDnQO4A5Pgxlh5W95YQAyo
HKbgKC2bMNwplgK2TshgD6QO4FQa8x+n6nQAg/Fg+BDnNHEOeVCavEQoq0eX9pdG
1pQPCmz05k8xYAlWLiOoz/8lVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIqDELdw
b5XOaDxE5JdFOpjJsfBPMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4
MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzM2RUUvQThDMUM4N0ExODAzMTFFQUJFQzgyQjU2QzRGOUFFMDIvNkZDRjdGRjIx
ODA0MTFFQTlBQTcwQTU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5E4MA0GCSqGSIb3DQEBCwUAA4IBAQB/RGyAmGgIpVtELfaoiBL0
F3QCa4MtTN5JXh4B+FxDW1nq2caCp9ST2htYFn1elFOs1Nel7xgmLuG5wGBn59aJ
rcRZ6VTgSbig0NpMOhLyB/PSsuM5SnEVQWSeKWgw/JLL6KKmN/jPuoJe5miI6w9E
p0aXS0ypoH45hSB/NjiOXKQuebg9m2B+ZJRED0skmyhQjHQ2Y6RcZfSRYD5a6mPz
hLXXFh28SMKQ5FzJC01ytD69fwTOcYg/amJc6lsp9WF4glIgMXpQgEjEFYimGOTw
O9Vy2p/h3q4GnExlJS27i6bvfIsW7eVpZIfcFMTS212KIvHwTARXFY50U5u7lVWW
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:48 2026 by rpki-client