Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa
File:                     D6702FB2C51411E7A0AC1A77C4F9AE02.roa (raw, json)
Hash identifier:          orIX3pp4UWGBJmk1kZjJ8wt/CwBVPnvHvKaSAkt4iYI=
Subject key identifier:   F3:3E:25:D6:08:AF:CD:57:19:D2:F1:2D:5A:49:32:C9:77:0A:8C:51
Certificate issuer:       /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial:       210F
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:28:17 +0000
ROA not before:           Wed 12 Mar 2025 16:13:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     131310
IP address blocks:        103.246.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
                          rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8463 (0x210f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
        Validity
            Not Before: Mar 12 16:13:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a422d1-13fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:64:60:6e:2f:8d:49:c9:c5:8c:9d:63:3c:
                    04:3b:90:74:e3:92:46:81:de:70:5a:43:12:ac:4e:
                    5d:8a:87:08:de:28:2b:01:05:b3:e9:a1:ba:d5:8f:
                    ce:93:02:6a:f6:3c:ff:5d:a4:c5:4f:eb:db:18:f4:
                    fa:8a:10:d2:c4:16:35:45:be:44:3d:01:54:0b:e7:
                    46:57:d6:26:29:97:b3:79:8e:ca:48:fe:d1:bd:89:
                    5d:4e:55:ec:0b:00:db:4a:0b:a3:8f:9f:0a:60:ac:
                    63:ec:bf:7a:e8:2b:e2:b3:b1:ab:5b:ed:ac:4c:0b:
                    7e:09:f5:a0:eb:6e:5b:06:5c:41:b8:6d:33:1f:92:
                    39:fe:ba:45:66:b0:64:aa:54:b1:98:59:1a:ba:5f:
                    d9:fe:e9:e0:1f:b8:01:66:82:7f:e4:71:79:a4:16:
                    4a:d8:c9:a9:37:77:df:b8:10:88:ca:95:11:be:0b:
                    71:f4:08:46:a3:b4:6b:54:57:1f:a0:fe:b9:49:4f:
                    7c:a4:49:b0:2a:0e:7f:91:4c:5f:58:71:bf:40:f3:
                    27:87:50:b4:e5:0d:20:d9:a7:40:05:9d:e3:17:97:
                    02:35:9c:bd:1f:94:8d:1a:d2:07:96:dd:01:05:82:
                    92:23:e8:08:b6:91:d8:42:04:be:b5:f8:6d:4c:c9:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:25:D6:08:AF:CD:57:19:D2:F1:2D:5A:49:32:C9:77:0A:8C:51
            X509v3 Authority Key Identifier:
                keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/D6702FB2C51411E7A0AC1A77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:03:54:4f:80:73:b2:6c:b6:db:45:80:b9:74:3c:9b:38:
         c7:81:70:b4:d3:d9:d8:ec:6b:b6:2e:e8:46:ad:97:f2:2b:05:
         6f:e4:ae:b5:30:2f:a4:85:e5:de:aa:db:c5:f5:14:b5:e7:d0:
         79:14:5b:32:c1:5a:d0:76:1a:e0:7e:e2:cb:9f:0b:21:7d:43:
         13:2b:91:45:20:0c:ff:3c:1c:2d:ee:6b:37:f6:51:88:b2:47:
         0d:c6:10:70:a6:83:91:be:98:6d:79:f4:73:a8:69:58:c8:2a:
         14:a2:0c:c7:ce:c0:f1:96:46:72:dd:e6:8e:70:2e:74:83:41:
         2b:a0:09:6d:b5:44:7c:e2:8d:94:88:7e:17:3f:02:d0:f7:db:
         c3:50:3b:51:0d:3c:5e:81:3e:b3:50:08:c0:b4:17:57:00:c6:
         89:54:2d:e6:e2:d0:30:c5:a8:4f:97:83:cc:f3:3b:6c:7f:62:
         95:02:eb:85:84:4e:47:09:9c:ba:18:e6:5c:08:e1:33:b7:e3:
         cb:53:7c:9d:4e:a4:cd:c4:a0:45:a5:76:41:42:fc:e3:fb:01:
         f8:22:ca:95:2c:c5:7c:57:80:34:12:e7:16:d0:ae:cb:99:2e:
         21:8e:26:67:20:56:34:47:af:95:79:8a:9b:45:ca:c0:0c:d8:
         b5:e5:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:20 2026 by rpki-client