Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/6B576C449E5711EABC193842C4F9AE02.roa
File:                     6B576C449E5711EABC193842C4F9AE02.roa (raw, json)
Hash identifier:          ceemfLeyu/bjJYbsLz2buAuXsya+rCO+O5OBRgHq1+Y=
Subject key identifier:   97:B2:F0:1C:5B:DC:48:00:24:CA:5E:83:65:EB:FF:7C:05:9F:96:58
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       09C7
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/6B576C449E5711EABC193842C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:32:14 +0000
ROA not before:           Fri 28 Mar 2025 20:43:08 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38900
IP address blocks:        103.22.234.0/23 maxlen: 24
                          203.92.24.0/24 maxlen: 24
                          203.92.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: Mar 28 20:43:08 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4079d-7a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:b6:e8:da:14:0f:7b:8c:75:ec:3c:c0:2e:
                    24:fd:6a:d6:b3:f8:29:9a:ba:bd:41:99:ef:97:35:
                    2c:42:e3:4e:74:07:3c:59:2b:70:dc:68:c8:b8:4a:
                    98:49:73:6c:df:f5:08:2d:1c:15:8f:d2:28:e5:98:
                    fe:f5:3c:64:03:00:df:7d:ae:eb:f2:84:9a:31:a4:
                    90:92:1c:6e:06:3a:60:10:d2:03:85:6a:88:ea:a9:
                    de:7c:01:b9:18:05:66:4e:62:41:b8:f3:b0:fe:81:
                    11:8e:7b:c0:84:17:61:3f:a7:00:5e:c7:76:47:62:
                    94:a7:bf:e0:ba:86:05:19:11:40:ec:5b:2a:65:ed:
                    dd:53:18:92:7a:f4:03:fd:80:22:f4:19:aa:d9:f1:
                    49:b2:ee:8d:ee:d7:1b:f4:22:8b:c4:97:d6:02:4b:
                    df:03:21:7e:76:52:ae:76:fe:1c:91:2b:b0:0d:92:
                    5e:13:ab:fb:07:8d:6c:6f:a5:a1:3c:46:34:db:02:
                    a6:b0:c2:fd:14:44:c9:43:ee:c2:97:59:83:73:5a:
                    e1:c3:68:8e:68:9e:63:c0:7c:a8:4b:63:d6:9b:8c:
                    5f:aa:3d:6a:be:b1:2e:20:10:7d:2a:83:c4:a2:62:
                    1a:93:48:24:60:61:e3:c0:01:a2:c6:ff:a4:e6:b7:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:F0:1C:5B:DC:48:00:24:CA:5E:83:65:EB:FF:7C:05:9F:96:58
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/6B576C449E5711EABC193842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.234.0/23
                  203.92.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:12:8f:5c:f6:e0:fd:44:b2:45:33:71:8d:4b:e4:1f:c3:79:
         a3:2f:ee:e9:f9:a7:9c:f2:23:a7:a9:a7:3a:c8:4c:2a:51:37:
         e4:3c:35:eb:19:2f:1f:ca:b4:e3:84:a4:ab:65:ef:da:ad:28:
         96:1b:e4:63:32:09:69:40:f7:65:67:87:ff:df:92:b1:24:df:
         6e:de:31:37:ff:9e:53:57:ba:9a:cb:cc:55:a9:8a:11:dc:d3:
         35:a2:90:6c:fb:97:17:59:b0:20:16:a9:68:75:31:48:0e:e4:
         a2:68:7f:49:a3:00:36:21:b2:7b:42:ee:e0:d5:f7:8c:8d:4a:
         b4:53:63:67:97:62:62:d5:16:c6:3c:f6:57:4c:83:4a:98:9a:
         59:64:4f:fb:2e:fe:f3:4b:18:ff:67:87:7e:1a:96:3e:94:98:
         34:72:3b:ad:4f:55:28:a2:47:70:01:eb:37:e5:6d:3d:da:27:
         87:83:95:4d:82:f5:54:2c:3e:6c:c6:d4:cd:a5:d4:8b:38:27:
         fc:37:af:d7:f8:b6:47:e7:97:75:6b:73:7e:d4:20:9b:64:91:
         11:47:c9:72:cc:22:f0:df:4a:04:90:21:dc:62:25:2e:22:55:
         c7:d5:24:6d:f4:20:f9:78:77:57:bb:e7:39:33:4a:ba:42:89:
         b6:3a:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:22 2026 by rpki-client