Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/6473BE24979811EB97001639C4F9AE02.roa
File:                     6473BE24979811EB97001639C4F9AE02.roa (raw, json)
Hash identifier:          dO0dG2sbKDmaTAWh6SLdxUPa6g1RQBYLgPuqDxWZzmk=
Subject key identifier:   D4:95:14:01:D3:0E:38:D7:58:9D:72:9D:55:57:0B:22:E3:F2:E8:55
Certificate issuer:       /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
Certificate serial:       0739
Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/6473BE24979811EB97001639C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:37 +0000
ROA not before:           Thu 26 Feb 2026 22:18:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141735
IP address blocks:        103.162.170.0/24 maxlen: 24
                          103.162.171.0/24 maxlen: 24
                          2001:df4:2ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl
                          rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
        Validity
            Not Before: Feb 26 22:18:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44954-3d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:07:0a:63:88:cf:bd:56:68:e6:62:cc:d0:
                    94:f6:b9:65:22:bf:86:79:5d:9a:2f:4e:3a:da:11:
                    1c:06:e8:51:f1:d1:7c:0b:13:34:38:55:8b:ef:52:
                    24:bc:e8:9f:59:15:db:8e:dc:8e:30:fc:72:db:d0:
                    99:2d:d9:df:16:d9:3d:42:6b:9b:7d:fe:7a:45:af:
                    de:1d:bf:e1:ce:df:27:ae:12:bc:18:ef:e6:28:88:
                    28:93:15:31:d2:20:74:41:32:58:36:bf:98:5a:62:
                    94:86:21:e1:d0:dc:74:ee:0d:1b:46:79:27:89:e8:
                    a7:39:9b:1b:f1:98:77:70:60:d9:4b:62:af:6e:e6:
                    4e:fb:7a:7e:e4:80:36:f6:db:46:bd:21:63:a0:33:
                    bc:99:f7:d7:1c:60:3b:82:7d:a5:19:24:bf:8e:c0:
                    5c:f8:3a:a7:94:44:e5:f9:0a:c9:05:8a:8d:4f:7f:
                    39:dd:00:77:7d:07:a6:40:1a:e9:0e:28:86:bc:b2:
                    f6:45:5e:14:a5:d8:0a:00:ff:d2:b7:b1:48:25:37:
                    0d:a2:56:c3:ad:55:2e:e7:c0:89:d7:dd:f6:16:a5:
                    ae:8f:a1:5f:17:0e:78:b3:0d:c5:c5:04:0e:c7:7d:
                    21:39:a8:4d:75:5f:af:b6:25:05:2b:da:a1:18:ca:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:14:01:D3:0E:38:D7:58:9D:72:9D:55:57:0B:22:E3:F2:E8:55
            X509v3 Authority Key Identifier:
                keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/6473BE24979811EB97001639C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.170.0/23
                IPv6:
                  2001:df4:2ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:b1:b4:6a:33:80:3d:81:4d:a2:55:e4:a0:ba:68:1d:50:
         2a:d2:be:43:14:7b:1b:d2:82:7a:82:f2:05:94:60:bb:53:08:
         de:c9:5d:02:c3:25:cd:37:89:0a:f8:01:5f:9c:6c:c7:64:24:
         75:c5:30:e3:4c:5e:e3:cb:04:cc:fa:8f:64:78:c1:83:9f:4b:
         38:9b:05:0e:0f:6a:c1:9c:f8:b7:2b:88:62:ff:e1:3f:31:77:
         70:0d:2b:76:de:02:37:9c:6a:41:f1:94:4f:32:45:b2:64:53:
         9c:20:ad:9d:93:34:29:ab:b8:1b:ae:c4:cb:c4:cc:c9:5e:92:
         ac:c4:20:0e:39:f5:85:f9:04:82:66:56:2d:69:12:eb:ff:6d:
         2d:a3:51:55:3c:3b:5b:f0:45:97:cf:00:25:f9:c1:df:0d:fe:
         a9:e9:ef:71:02:7f:81:a6:a3:dd:ee:da:34:68:8d:be:77:4d:
         07:a2:f5:df:7f:cb:b7:8f:54:2b:ee:81:38:20:66:f5:e6:ce:
         a6:cf:b6:91:85:7c:06:34:26:9d:7a:02:f8:a6:05:9c:57:5e:
         f5:61:5a:2e:83:f2:1a:27:be:10:33:3f:d7:21:ff:d8:32:f6:
         80:0e:20:f6:45:34:62:70:a0:83:0c:5b:ef:ff:52:18:fa:bd:
         b2:67:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:26 2026 by rpki-client