Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa
File:                     6A8A22841DCE11EF85CAC83EC4F9AE02.roa (raw, json)
Hash identifier:          ihifcD/OgCnAwEJmq3VgBulyBofXdrsgswWXwBfpEAs=
Subject key identifier:   56:9F:E7:CE:F6:A2:6D:B0:5B:CF:B7:8B:A6:7A:F2:99:CA:C7:81:3A
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       0755
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:04:44 +0000
ROA not before:           Wed 18 Feb 2026 21:18:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.162.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Feb 18 21:18:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a471ab-a46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:87:cc:a2:5d:92:9a:7a:eb:4c:89:a4:f5:
                    2f:0d:dc:f9:5d:16:ee:99:c1:dd:a3:ef:03:01:79:
                    62:7a:a1:50:4d:ac:ad:b0:ee:2f:fb:4d:2b:67:cc:
                    2e:c9:9c:8f:93:d2:af:cd:52:03:46:ed:00:e3:f7:
                    09:a4:75:31:aa:3c:34:90:9e:ce:2c:38:75:85:c7:
                    7b:12:31:4a:00:e3:bb:3f:4c:49:01:70:72:eb:e6:
                    22:67:f9:2b:af:3f:2d:9f:77:04:dc:28:f0:91:01:
                    34:b7:1b:ea:27:1d:49:2b:b6:a6:ca:70:c8:e2:19:
                    e6:76:99:36:58:65:5f:65:4c:3c:9e:2a:70:c6:98:
                    d2:26:c3:66:88:3b:53:5a:ec:c7:62:c9:de:e6:d4:
                    0b:f3:ce:4b:da:e9:e7:61:8f:cc:19:a8:39:3a:99:
                    06:98:1a:c9:f8:96:d1:9b:0a:c0:04:c2:c7:61:6a:
                    8c:59:e7:ab:5f:d1:25:24:47:fa:5a:c0:b4:7c:11:
                    94:a5:c2:3b:36:d5:b3:0a:84:65:38:5e:bf:d6:f6:
                    6e:cc:61:b0:bf:34:94:bb:94:93:a4:35:68:e5:4d:
                    d4:cf:00:96:20:48:bd:e4:b7:c6:b5:ae:ce:9e:09:
                    e6:9f:eb:50:7e:9e:24:de:6e:d0:52:05:7d:b3:4e:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:E7:CE:F6:A2:6D:B0:5B:CF:B7:8B:A6:7A:F2:99:CA:C7:81:3A
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/6A8A22841DCE11EF85CAC83EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:aa:b4:91:bb:ee:f0:54:fe:a6:69:b6:38:0f:9d:19:3c:
         b7:95:f6:b6:0e:c6:7c:7c:a7:13:3d:69:9a:97:62:c3:4e:00:
         47:44:d8:a6:93:77:14:10:75:3f:0e:3c:07:b1:83:87:7b:9e:
         7e:85:fc:4e:5b:13:2d:7f:6b:17:f6:36:1f:eb:d1:68:8b:5a:
         c1:54:e8:54:51:43:d7:13:e8:a4:97:0a:ad:c7:46:66:64:24:
         9d:d6:06:e4:c1:11:28:05:1b:a7:da:10:d0:a7:83:25:c0:c7:
         ca:1d:65:13:2d:d2:a0:ff:6c:8c:d6:2c:b6:ef:58:0b:a6:f2:
         ad:fc:46:01:d5:b4:28:3a:c0:01:57:42:a2:02:00:4c:be:79:
         dc:58:2e:a9:59:da:1d:45:67:bc:66:bd:e7:60:a9:49:24:b6:
         e3:2b:db:0d:f6:70:6d:f5:2d:e8:71:27:39:93:ab:b9:ad:57:
         b4:5e:f0:3d:8f:21:ed:a0:ae:d6:9a:3c:26:7b:e6:d2:82:75:
         66:ce:5b:9a:31:d7:b9:77:c2:47:ce:82:78:a4:67:25:96:3a:
         ee:ee:94:62:53:03:e4:7c:05:72:20:5e:a1:47:54:cd:26:0b:
         c2:d8:2a:90:c3:8b:28:d0:52:34:15:6e:6e:1e:55:89:77:b4:
         44:77:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:33 2026 by rpki-client