Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa
File:                     C6EC548E5FB811F094135B2FC4F9AE02.roa (raw, json)
Hash identifier:          YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=
Subject key identifier:   CC:46:8E:2C:1A:6B:C3:59:46:83:00:54:D0:2D:78:87:D7:C1:EE:3F
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       B7
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:16 +0000
ROA not before:           Sun 11 Jan 2026 06:24:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     20118
IP address blocks:        103.43.70.0/24 maxlen: 24
                          103.43.71.0/24 maxlen: 24
                          103.82.142.0/24 maxlen: 24
                          103.82.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Jan 11 06:24:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a48108-5c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:75:08:d5:ff:73:08:2b:7b:09:7f:e1:1f:
                    71:de:ae:cc:ea:a4:ae:4a:9c:30:82:4c:cf:52:8f:
                    51:13:61:9a:ff:ef:e0:62:59:9e:a5:5e:20:46:0f:
                    d3:5c:88:0e:e4:a7:b9:c8:a8:37:f7:74:2e:a1:e3:
                    c3:b2:62:03:82:92:22:29:05:30:27:75:01:d6:fd:
                    12:9e:43:82:5d:87:b5:aa:1c:f0:b2:e2:b9:c4:ec:
                    68:c7:23:40:4b:96:20:91:fd:01:88:e5:f6:95:33:
                    d4:32:bd:d2:a3:fb:a7:10:c9:4c:59:16:82:78:56:
                    82:b7:4d:3f:43:cd:d2:e0:e4:a8:89:dd:89:21:cf:
                    48:9c:64:b2:5a:98:fa:0b:ad:59:21:6a:fe:ea:cc:
                    77:01:86:d8:40:ca:3e:46:53:50:32:b1:f0:16:73:
                    63:00:9d:12:40:9b:bb:39:0b:da:d2:6c:d9:8c:e2:
                    c0:6a:b5:d1:b2:b9:83:bd:23:d2:be:7a:e4:73:c0:
                    fd:4f:d7:f5:8d:78:35:10:5d:6e:48:eb:a1:22:94:
                    b1:70:ab:49:ad:4d:a9:7a:ac:e8:41:c6:21:09:9d:
                    61:cb:d1:9a:a6:63:27:d8:7e:e6:64:d9:04:7b:d3:
                    fb:b1:fc:51:2f:0a:c9:a6:19:49:22:0c:31:eb:be:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:8E:2C:1A:6B:C3:59:46:83:00:54:D0:2D:78:87:D7:C1:EE:3F
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.70.0/23
                  103.82.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:4a:65:38:7d:d3:23:f5:98:54:7d:e8:ed:22:c9:70:42:
         78:0c:d3:da:26:a8:ab:87:fd:20:ca:ea:f5:43:c3:bf:3d:86:
         28:7a:e1:1f:a0:57:f7:b3:5b:ed:44:ce:1b:51:08:fc:2f:e4:
         c7:ac:7b:77:de:bf:d6:54:7e:40:e1:ea:f0:98:8c:89:1c:3a:
         1f:c5:e5:12:f7:da:d4:e8:60:dc:b3:9f:6d:79:16:65:1b:48:
         eb:02:ba:ea:f5:94:7b:0b:55:3d:3b:5a:9a:1b:6f:de:34:a7:
         94:09:46:e9:de:83:9f:5e:0a:20:93:ea:57:76:cb:a7:18:20:
         07:62:f3:56:98:f2:10:b6:41:bc:8b:8b:0c:a9:49:4f:33:07:
         f8:1e:61:d0:62:94:d9:de:3a:7d:67:2e:aa:de:ac:67:b2:0e:
         ee:5b:a5:8c:f6:f4:4e:70:41:be:b9:98:da:bc:7a:98:fe:8a:
         78:37:ec:79:ae:c5:e6:70:ee:d3:d5:2a:22:98:a0:42:7f:f7:
         58:38:cb:fc:ef:90:a1:c5:e2:0c:6d:a4:a8:cc:5e:2e:84:f8:
         00:d5:97:e7:6c:6a:6b:49:f5:1a:45:16:1a:e4:a9:a0:22:8f:
         d4:04:e1:68:dd:62:e4:83:03:26:69:bf:75:33:f7:28:be:a2:
         14:cd:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:08 2026 by rpki-client