Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6BEA61CCACC311EBA28FAD5FC4F9AE02.roa
File:                     6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=
Subject key identifier:   D6:38:F6:2E:8F:E2:6D:53:6D:38:28:F4:24:12:AD:99:38:64:1C:FB
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06B1
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6BEA61CCACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:29:31 +0000
ROA not before:           Thu 02 Oct 2025 22:53:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132825
IP address blocks:        103.155.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 22:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct  2 22:53:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4777b-52dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:44:a4:b8:50:ff:6f:6d:88:d9:43:ca:1c:
                    49:e4:b5:4e:18:40:cc:2a:ac:7c:32:74:de:40:b1:
                    fc:87:fe:78:02:ff:04:41:52:d5:60:c1:a8:38:14:
                    64:00:c9:65:23:85:30:01:1a:61:f9:38:ce:9f:ee:
                    f3:2a:95:87:b9:50:98:9d:9b:95:99:f1:c4:6e:e8:
                    57:b7:cf:91:64:74:3f:8e:a6:f7:c4:73:16:32:1a:
                    dc:52:7e:4b:1e:b0:4f:94:2c:f3:4c:75:6b:01:46:
                    77:5d:b8:23:ad:78:72:6c:34:70:65:93:5a:2d:c7:
                    b5:8b:a6:0d:64:6f:9a:3b:c9:24:fe:40:85:b8:82:
                    ef:98:28:e1:b3:22:70:7d:a2:9a:40:e2:82:30:5d:
                    3f:e4:f0:6f:a2:c3:f8:ae:8b:c3:31:e1:9e:82:27:
                    09:5a:eb:55:68:c8:6a:e2:a0:98:94:b6:67:40:8c:
                    ac:16:28:e1:61:76:bc:c6:b3:c4:59:6b:94:a7:da:
                    a2:6c:e8:4b:9b:68:f7:ec:92:93:3a:de:60:0d:72:
                    dc:c7:a3:fd:27:ab:51:87:0c:02:72:16:4f:60:2c:
                    b5:b4:87:9d:f8:c6:4a:cd:8a:a9:ea:9f:a4:46:b6:
                    c5:47:5f:99:a9:df:c0:9b:c8:77:1d:4f:8a:7c:fe:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:F6:2E:8F:E2:6D:53:6D:38:28:F4:24:12:AD:99:38:64:1C:FB
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6BEA61CCACC311EBA28FAD5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:35:77:5c:b7:29:e1:44:69:db:b8:dc:fd:a1:c2:94:50:b6:
         7d:1c:27:0f:46:f8:03:44:2a:d9:c4:2d:5a:5d:fb:b5:ce:45:
         3d:b7:d3:d5:9b:f3:ba:16:b1:d6:c5:2c:96:08:da:01:9b:62:
         00:7c:fa:a8:06:f7:6d:a0:0e:cf:e9:d8:66:08:a6:07:bf:97:
         e6:9f:87:4f:ae:be:dc:a4:bb:32:10:c6:80:5e:72:9c:d5:0e:
         3e:76:e7:d4:55:0f:26:07:ab:47:6e:12:41:ab:45:92:29:e6:
         31:68:1f:87:cb:84:61:bd:c4:f5:b1:ea:af:0f:d8:3f:8c:12:
         5e:96:78:36:43:6a:ed:ae:2f:fe:b3:07:4f:75:a1:ad:e9:60:
         a0:30:ce:e8:b4:f0:5c:40:d1:05:3b:cc:04:32:c7:32:43:13:
         ec:99:f0:35:20:48:0d:1e:88:e7:af:25:ad:2e:b7:61:86:95:
         d9:ad:0c:4a:b8:91:24:ef:2a:19:1f:ae:eb:54:ad:a8:90:2e:
         e4:02:fb:9d:74:45:c5:f4:04:26:5c:2f:1c:67:2e:20:0e:cc:
         4f:e4:4a:51:25:ab:a3:47:3e:a6:d3:11:b0:31:f7:cb:15:6d:
         ba:4a:a1:48:db:e5:d3:e6:31:d6:2d:7e:04:19:3d:a1:07:ad:
         e0:dc:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:22:07 2026 by rpki-client