Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/6EE80A72F80A11F0BD0E5DB76F6F56BC.roa
File:                     6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (raw, json)
Hash identifier:          Jh4Ff7zuJk/wuhEY+gYNdPlenkcVzVFWzJ8Ffm4/pSY=
Subject key identifier:   13:76:D0:EF:4B:56:76:BD:AD:AC:92:41:30:20:BF:78:51:AD:EF:56
Certificate issuer:       /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial:       0AD9
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/6EE80A72F80A11F0BD0E5DB76F6F56BC.roa
Signing time:             Sun 01 Mar 2026 14:46:43 +0000
ROA not before:           Fri 23 Jan 2026 03:20:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        103.148.242.0/24 maxlen: 24
                          103.148.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
        Validity
            Not Before: Jan 23 03:20:15 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a45153-1b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:a9:61:54:7b:04:4d:c5:d3:0a:7c:46:d7:
                    f5:4b:48:6d:87:69:62:04:3b:a4:84:0c:2d:ac:b3:
                    12:0a:ba:4a:5d:6e:30:cf:79:d6:af:6c:a1:36:1b:
                    77:fa:b3:3f:7a:d6:63:c8:b8:7a:03:b7:ab:89:ba:
                    5d:94:b8:05:ee:32:f0:cb:7f:f6:89:90:59:36:9b:
                    51:67:db:50:91:3f:c4:f5:fe:d3:84:9f:5b:61:3e:
                    c9:2d:c9:29:7c:3d:7d:52:90:00:23:fa:46:34:b6:
                    7b:51:bc:67:e9:63:ac:b6:f4:c3:0b:2a:97:aa:78:
                    ba:64:ac:3e:fd:7e:5d:35:a7:43:d7:32:0f:1b:0e:
                    9b:1c:c6:3c:6d:44:46:6c:b5:12:1b:db:dd:72:ab:
                    24:04:d2:fe:56:84:87:0e:c6:f1:7c:f0:cf:e5:d9:
                    0e:d0:6f:94:4b:7d:fc:cb:4f:71:0b:92:39:79:c1:
                    f5:ab:10:f6:81:35:b5:1e:9d:94:7e:0c:71:e5:8c:
                    26:b3:fc:fe:ff:35:bb:55:9e:07:f2:eb:1f:77:4a:
                    2c:7c:a6:5d:87:e5:d3:30:8a:55:2e:bb:de:a9:d4:
                    36:0f:19:55:6e:f0:1c:a7:c8:1b:56:c7:6a:b0:6b:
                    98:09:ff:f2:0b:ba:ba:e8:06:39:e0:69:0b:c4:6b:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:D0:EF:4B:56:76:BD:AD:AC:92:41:30:20:BF:78:51:AD:EF:56
            X509v3 Authority Key Identifier:
                keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/6EE80A72F80A11F0BD0E5DB76F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:30:6d:22:c6:58:f4:3c:1a:3c:a0:c5:ed:70:12:2b:7b:
         c0:6d:6f:95:b2:ea:55:54:10:76:1b:41:e0:77:c3:e4:a5:4c:
         1c:b9:93:05:1b:5c:fa:62:ad:9b:15:62:b9:45:14:c6:e0:a9:
         fd:e1:75:fe:c5:82:2c:4a:ff:da:91:32:d6:03:9a:08:76:ac:
         72:33:e2:c9:7c:b9:de:af:05:ae:be:72:71:5b:be:5b:8b:14:
         bd:7a:2a:1c:93:9b:7b:29:05:51:54:51:20:13:3d:f8:82:d2:
         10:63:0a:02:2f:dc:34:ba:78:1f:1f:35:39:22:29:cb:03:b5:
         e3:7d:b4:b0:37:93:e4:59:b2:d4:7a:1d:37:84:6d:25:d0:6f:
         04:37:41:b6:b5:b5:f1:5d:23:64:77:48:40:93:14:fe:97:22:
         8b:3e:0f:86:a2:32:40:33:02:e4:3e:b4:0b:e4:50:86:1b:da:
         38:a3:9e:bd:a6:9d:df:6f:b8:23:ee:2d:f3:6f:43:18:64:66:
         56:09:ef:49:1e:38:36:4e:a7:4c:f8:9a:00:1e:87:15:0b:a7:
         66:a9:ba:72:54:00:cc:53:2d:00:9c:a3:4d:5c:9e:ce:52:8f:
         63:4d:93:14:9e:10:ef:6a:52:d8:3f:9b:9a:b1:eb:fb:47:5e:
         81:25:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:11 2026 by rpki-client