Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa
File:                     E6C24E8669E011EFBD9DBA75C4F9AE02.roa (raw, json)
Hash identifier:          Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=
Subject key identifier:   D0:B7:A6:CD:E0:24:07:CF:13:64:9A:0A:39:49:74:E9:26:0B:6A:A0
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       3521
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:22:46 +0000
ROA not before:           Tue 06 Jan 2026 15:11:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     56258
IP address blocks:        103.243.48.0/24 maxlen: 24
                          103.243.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13601 (0x3521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Jan  6 15:11:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a467d6-0ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:98:67:f8:c1:df:1d:9a:72:eb:35:52:0b:
                    8f:5d:85:bd:42:00:7d:56:f0:9c:92:8d:d0:5d:ab:
                    cb:2b:07:2a:cd:73:72:4b:1a:94:a8:5d:29:31:63:
                    de:72:b4:62:47:4a:b1:78:03:27:98:9e:41:d8:2c:
                    32:10:8e:5c:4b:16:cd:5d:b8:a1:a7:e5:b9:82:14:
                    ae:91:95:ba:f8:bd:da:87:27:1e:7a:d6:7f:c6:0a:
                    65:86:74:9a:05:cb:d2:9b:6a:7a:21:b0:21:54:92:
                    95:40:14:c7:c1:f7:fe:9e:9e:c8:00:dc:f4:2f:bd:
                    e5:a7:94:3b:a0:ac:12:e7:34:49:7a:6b:c8:e1:4c:
                    5a:f0:80:0c:b9:53:82:80:00:6c:28:20:3f:87:ce:
                    67:8c:f9:24:a4:4f:9f:18:04:38:39:31:84:9e:49:
                    bf:58:60:37:b9:9e:d0:d0:7b:ed:c0:02:b8:59:50:
                    0b:b4:47:bc:b1:b3:62:9f:e2:c4:62:b5:5f:9f:69:
                    57:17:b0:ce:9d:ed:bc:40:ae:2a:91:43:ca:05:03:
                    ae:e1:0f:f5:84:76:37:ac:43:73:0f:a4:85:58:07:
                    10:f6:ea:11:c1:3f:4a:16:cf:8c:36:e7:42:6a:66:
                    1a:fa:8d:ec:c1:f6:6b:5a:a4:63:b3:2c:36:9b:c9:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:A6:CD:E0:24:07:CF:13:64:9A:0A:39:49:74:E9:26:0B:6A:A0
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.48.0/24
                  103.243.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:66:f2:b8:e5:34:13:8c:08:6f:a8:fc:08:3c:bd:91:0b:3b:
         c7:f1:42:4b:ae:b1:a4:8c:db:91:9b:5a:bf:b5:94:d6:48:fb:
         d0:cf:59:7f:3a:9e:aa:59:25:c9:cc:9c:ac:36:57:1b:1e:b4:
         23:c0:d1:24:7d:e5:a6:65:a9:9e:92:ca:d2:7f:20:5c:16:10:
         d6:7e:48:83:e1:26:75:ba:37:e5:aa:28:19:44:6c:7d:1b:58:
         91:84:db:82:cb:a3:b5:e3:68:2e:6d:45:98:c7:18:f1:cc:c5:
         05:48:f6:cf:af:01:5d:fd:88:56:18:6b:cb:2d:68:90:0b:a2:
         b3:a9:5c:3b:0b:85:b9:84:56:bc:3d:87:8c:c9:95:54:ea:50:
         89:04:95:f3:9d:45:23:c7:8d:8b:59:57:37:3f:9e:27:93:f9:
         f6:c0:e7:59:9d:25:42:23:29:47:37:e8:3f:1e:d3:1e:cd:c9:
         7c:c8:dd:ce:e5:63:c3:f9:13:a1:c3:3e:d5:8b:c2:67:1c:5b:
         f8:7c:1d:c3:19:45:06:e1:65:0d:26:e9:71:1e:7d:85:50:9d:
         d1:40:6a:6c:bb:88:26:d8:7c:99:8b:3a:3b:0c:f0:5c:59:29:
         43:06:a9:d2:38:d4:48:68:c8:47:0e:92:9e:43:65:87:12:22:
         9a:5c:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:53 2026 by rpki-client