Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/6AAE9EC03C6D11F0890C1546C4F9AE02.roa
File:                     6AAE9EC03C6D11F0890C1546C4F9AE02.roa (raw, json)
Hash identifier:          hbKYZKV1Bbz9YmUZKj+hMid7iiaNGdw4/R9J4peAZds=
Subject key identifier:   CF:A2:15:1E:AF:14:EC:6B:85:A2:56:CF:A7:AD:5D:1A:F5:20:9A:D3
Certificate issuer:       /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
Certificate serial:       A6
Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/6AAE9EC03C6D11F0890C1546C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 19:15:29 +0000
ROA not before:           Fri 30 Jan 2026 19:15:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139806
IP address blocks:        103.145.74.0/24 maxlen: 24
                          2001:df5:4680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl
                          rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
        Validity
            Not Before: Jan 30 19:15:29 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=697d0350-d509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:37:5a:51:31:e5:85:11:f9:31:95:31:90:
                    e7:a0:a2:ae:a7:b4:bd:5c:c1:34:c4:be:a3:7d:e9:
                    64:8d:89:f1:15:fe:91:e7:6b:1e:a8:f9:7d:e6:9f:
                    da:16:68:d0:28:60:9a:35:c8:b8:e0:c8:69:01:e1:
                    1c:32:2d:82:cf:77:24:ad:c1:af:da:db:50:72:21:
                    29:15:de:8a:1a:68:65:51:38:8e:df:e0:ec:a4:15:
                    a6:4a:0f:d3:6f:99:f3:31:0b:dc:2c:a3:d1:71:d8:
                    16:de:79:dd:43:9d:e0:a9:fd:bc:49:59:94:75:84:
                    48:91:ed:f4:ca:83:28:42:3a:a5:53:10:ce:9c:39:
                    6e:f8:ce:21:24:f6:41:b0:1c:05:e0:b0:24:5b:b9:
                    e8:3c:09:2c:68:dd:c7:85:64:a1:5c:67:1e:ad:9d:
                    80:fd:b8:51:a5:cc:7f:1e:56:2b:a5:10:a6:95:40:
                    32:4d:56:d6:10:2d:4e:9d:3e:06:e1:ac:69:59:43:
                    b4:ec:2f:26:f7:f2:6b:bf:b4:8d:4c:65:47:46:04:
                    ef:16:8f:2c:ef:32:5a:2b:e2:14:42:c3:5a:e5:87:
                    30:78:4b:2f:d2:1e:a9:04:cb:04:4a:20:40:e3:ce:
                    f9:c3:d6:18:a2:0d:ce:5d:70:8c:ab:e8:00:d5:64:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:15:1E:AF:14:EC:6B:85:A2:56:CF:A7:AD:5D:1A:F5:20:9A:D3
            X509v3 Authority Key Identifier:
                keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/6AAE9EC03C6D11F0890C1546C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.74.0/24
                IPv6:
                  2001:df5:4680::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:66:90:c1:be:93:c7:e3:e6:06:6c:be:b6:8b:02:d5:37:0a:
         58:12:e6:a5:77:09:2a:3d:40:ca:fe:c4:bc:b8:07:42:48:90:
         8c:71:8e:db:8c:0e:7a:55:ff:a1:ae:9f:cb:3b:6e:54:d5:ab:
         b3:c7:98:6c:fb:53:b2:b9:92:36:d8:f9:54:a4:db:2f:d5:96:
         78:1c:73:ea:83:0f:5e:6d:f1:98:5a:26:ff:d5:d1:23:ce:2d:
         14:fe:46:2f:26:0f:9d:09:e4:e4:5c:de:f2:a5:f0:aa:29:2f:
         8c:c6:e6:eb:0f:28:d4:71:c3:74:b3:9b:6a:58:49:da:36:0e:
         8a:f6:ec:93:80:36:bb:c3:2c:bf:62:2c:4a:f9:3e:ed:1b:0b:
         d2:5b:0d:dd:c6:f9:cd:a4:a0:8a:7b:28:49:18:55:3b:75:73:
         7f:73:80:4f:9e:8a:f5:3f:4f:69:08:68:8e:2d:bc:91:24:76:
         7f:59:ea:90:3d:76:78:4c:ec:9e:67:8c:7f:c2:b5:a1:cf:86:
         a1:24:ff:6f:4e:44:35:36:f4:25:5c:eb:75:97:6d:bd:71:e5:
         38:05:87:09:3a:f0:aa:8d:ae:f2:39:52:0c:a6:3a:89:c1:53:
         ad:0c:5d:4f:8c:b4:d5:a4:7a:ec:33:5a:32:07:17:a2:f5:82:
         49:0f:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:11 2026 by rpki-client