Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/6E570966CD1B11EA9613AA1DC4F9AE02.roa
File:                     6E570966CD1B11EA9613AA1DC4F9AE02.roa (raw, json)
Hash identifier:          uA63ElczLstUjGozGXTpC8tAbSwvPvhDg8Ef6vahK6U=
Subject key identifier:   78:6D:7A:ED:81:39:FD:19:30:E0:C6:D7:C1:1E:8E:46:CF:68:E1:18
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       08DF
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/6E570966CD1B11EA9613AA1DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:57:55 +0000
ROA not before:           Fri 10 May 2024 19:57:56 +0000
ROA not after:            Sun 01 Jul 2029 00:00:00 +0000
asID:                     137540
IP address blocks:        103.112.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: May 10 19:57:56 2024 GMT
            Not After : Jul  1 00:00:00 2029 GMT
        Subject: CN=69a48c33-cbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:9e:a7:51:34:68:b1:26:40:b4:3c:03:c5:
                    3e:f7:91:26:91:1b:7c:50:23:b2:77:5a:86:17:d6:
                    95:b3:68:4c:9a:59:f2:54:39:82:48:c4:1c:b0:28:
                    7b:0e:e2:c1:69:6f:a2:83:4e:d8:35:df:94:b3:fb:
                    ed:9a:d0:28:75:98:0e:3c:a4:61:f2:05:0c:3b:79:
                    6a:49:c1:7b:1b:53:d8:7b:4d:e6:42:55:00:00:9d:
                    5a:3c:82:5e:1d:c7:32:72:ad:3a:e3:f6:41:54:b5:
                    18:56:e9:19:60:9b:7a:c5:3d:9c:0f:f3:71:70:78:
                    d4:c7:15:45:4f:e0:cf:71:4c:ca:50:4f:d0:24:51:
                    d0:f5:48:d7:f6:fe:d3:bc:d4:2f:25:6b:d4:4f:1d:
                    68:1c:51:22:fd:08:58:de:71:d2:75:a9:ef:65:33:
                    79:9e:2c:74:23:c9:69:bb:74:fa:78:25:7c:78:4f:
                    d6:a3:34:1e:86:68:66:19:62:05:e4:ca:ad:2d:0c:
                    4b:dc:23:c9:58:de:5d:80:27:08:70:7b:23:4f:76:
                    a6:11:8b:ea:28:73:bd:eb:98:0e:b5:4a:08:a0:95:
                    44:c0:e4:9c:7a:d8:6c:4d:a9:3a:48:cb:70:57:e9:
                    0a:e5:87:ed:72:71:98:66:10:09:f5:50:ab:44:99:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:7A:ED:81:39:FD:19:30:E0:C6:D7:C1:1E:8E:46:CF:68:E1:18
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/6E570966CD1B11EA9613AA1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:30:50:21:af:45:02:0e:8c:1b:4f:76:9b:89:bc:90:39:
         ad:21:4d:3c:40:ef:c9:0a:ae:c4:7a:d2:f6:6c:21:4e:8c:6f:
         12:30:28:cf:10:01:96:bd:1a:23:f6:f0:18:21:ff:7b:8d:75:
         85:27:25:53:91:14:1a:77:f2:c5:5c:99:58:6b:fb:15:0d:75:
         54:18:bd:75:a8:0e:78:3c:a8:fe:ad:f4:e9:62:3b:b1:de:7d:
         2f:94:7f:90:da:2d:dc:74:22:f2:30:54:21:a4:dc:54:80:74:
         72:08:53:c1:36:4b:e5:23:01:ed:1b:63:bd:93:f5:93:8d:34:
         49:39:35:6c:32:5e:aa:38:f5:7c:78:6c:3d:ec:ec:36:a2:0b:
         71:32:f9:9b:6f:4a:3c:1a:97:60:2e:42:34:eb:15:7a:09:55:
         5c:dc:64:92:25:91:81:0d:50:22:53:2b:2c:98:6a:db:41:42:
         59:8c:0b:0d:f4:29:51:c9:2a:2d:3d:03:09:a1:24:d5:73:e1:
         10:0a:a9:93:97:d1:e0:8d:df:cc:b7:b5:26:86:da:9a:3d:cb:
         69:a3:25:b6:f9:6e:ae:83:89:9c:f6:b8:3c:03:79:ed:e5:43:
         58:f6:1b:83:f2:15:59:d1:40:51:4b:ca:29:69:6c:ed:88:42:
         d7:83:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:48 2026 by rpki-client