Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa
File:                     6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (raw, json)
Hash identifier:          8cmE8F4UCrlxdeOGd34FNofKondX/VjcSsTipjEaDj4=
Subject key identifier:   63:D0:8B:AD:00:B9:54:95:D9:A3:EA:F8:16:13:33:71:6C:B5:FC:EE
Certificate issuer:       /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial:       01C3
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:23:21 +0000
ROA not before:           Thu 27 Nov 2025 01:49:48 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151965
IP address blocks:        103.67.50.0/24 maxlen: 24
                          103.67.51.0/24 maxlen: 24
                          2401:4760::/32 maxlen: 32
                          2401:4760::/36 maxlen: 36
                          2401:4760:1000::/36 maxlen: 36
                          2401:4760:2000::/36 maxlen: 36
                          2401:4760:3000::/36 maxlen: 36
                          2401:4760:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
                          rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Validity
            Not Before: Nov 27 01:49:48 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41399-3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:35:05:23:9a:b1:10:de:38:21:06:0e:79:
                    6b:f0:8e:c3:fe:c0:47:cc:39:64:bd:8f:08:54:ec:
                    fb:64:6f:98:d9:c2:36:b9:1b:96:90:45:51:6e:8b:
                    f9:dc:6f:b1:5c:ce:38:76:4f:e7:f3:95:9a:15:76:
                    07:6a:1c:1b:46:41:0c:47:4b:00:04:63:67:b5:f3:
                    0d:63:c2:29:31:9b:f7:cf:6d:1f:70:9e:4e:63:6a:
                    d9:ff:15:de:e9:58:c2:56:b9:1a:23:33:9d:45:57:
                    db:fc:e2:a4:48:cd:67:bd:b6:eb:0d:5a:b9:a9:5a:
                    f5:a7:af:17:05:e6:29:f2:e2:aa:e2:80:b1:97:3b:
                    21:5a:11:98:47:4e:c2:19:13:11:ca:2a:46:3d:47:
                    7e:7d:f3:33:68:77:a3:de:a3:c6:65:0b:7b:52:cf:
                    1b:d0:49:bc:c6:87:d2:77:13:76:e9:8e:07:c3:f9:
                    3b:fb:47:34:a0:e3:3b:54:f8:5a:15:42:b9:82:e7:
                    a0:80:95:a2:5b:b4:4a:d0:af:d1:e1:80:81:30:f7:
                    3a:d8:b3:56:5e:ec:8e:69:97:59:8b:07:4b:27:e1:
                    ff:27:4f:4f:e1:5b:37:02:38:30:d8:c2:96:88:44:
                    6e:f7:12:6e:75:64:db:85:2f:84:19:0c:ab:87:75:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:8B:AD:00:B9:54:95:D9:A3:EA:F8:16:13:33:71:6C:B5:FC:EE
            X509v3 Authority Key Identifier:
                keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.50.0/23
                IPv6:
                  2401:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:f9:e0:8c:ff:ca:9d:af:7f:1c:8c:39:94:d4:08:83:a2:
         76:bb:24:d1:f8:b4:6a:08:dc:a4:31:fb:fd:40:e9:b0:5b:1d:
         b6:dd:54:9e:9e:a6:d6:34:6c:74:43:f8:73:42:f9:48:e2:ee:
         69:ec:6e:b6:ab:55:76:2a:3b:d2:73:c5:12:82:ee:db:f3:f2:
         f3:76:c8:72:20:f3:97:fd:da:92:15:c6:a9:dd:55:4f:f8:62:
         d7:41:8e:d2:65:ca:d3:d0:8a:03:f0:f0:37:2c:df:b5:9a:04:
         3f:86:f4:53:f6:5d:48:b2:b8:d8:2b:47:a2:aa:94:69:ee:1b:
         4e:d7:99:32:db:8b:96:8c:df:00:e8:46:9d:57:49:eb:7c:3c:
         17:0e:0f:1c:0d:d3:9a:5f:21:13:c8:bf:58:f1:88:19:83:99:
         00:f8:a2:40:e1:3a:6a:11:d6:ea:f2:cd:a4:92:f4:ea:6e:c0:
         29:42:15:91:fa:2d:66:8e:3e:d4:f4:44:98:84:16:01:e9:ca:
         63:59:e8:89:d5:07:34:09:fb:7b:06:ab:1b:a2:df:ff:b1:85:
         0a:b6:4e:82:8c:b7:a0:e9:be:ca:0d:81:0b:f3:c3:0d:53:8b:
         a6:5a:c7:0f:2b:4a:43:b7:5d:af:d4:5b:54:f4:1b:21:ab:3e:
         1a:9e:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:24 2026 by rpki-client