Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa
File:                     6A0C1182CA9D11F084B0E810C4F9AE02.roa (raw, json)
Hash identifier:          Ur2xb9scSwvGgEl+imNvKk+65kBRDU8GyWd41dxPers=
Subject key identifier:   54:60:D9:8C:DC:01:B1:C4:28:0D:6E:E0:37:39:94:29:6C:10:C2:FF
Certificate issuer:       /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial:       01DF
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:05:23 +0000
ROA not before:           Thu 05 Feb 2026 13:22:42 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151786
IP address blocks:        103.67.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
                          rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
        Validity
            Not Before: Feb  5 13:22:42 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47fe3-080f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:b7:a7:e6:42:91:3c:29:74:67:3b:50:21:
                    d5:6d:05:e7:dd:a9:f2:9a:a3:89:10:0d:5c:f6:bf:
                    46:22:3f:bc:4e:66:90:4f:6b:05:e0:2a:35:1e:45:
                    43:29:e1:68:da:23:47:34:cb:57:81:23:86:06:49:
                    bc:f8:eb:fc:2c:d8:4f:ae:a2:6f:3a:08:70:f5:db:
                    55:45:74:14:c2:2a:50:85:a5:36:67:73:a0:50:c9:
                    43:a3:2f:1d:42:74:51:65:3d:68:49:94:f2:68:98:
                    e6:46:9e:c5:d0:17:9e:df:fa:93:cb:04:1e:70:50:
                    6b:fd:c4:be:a7:c9:90:a8:9d:ac:bc:8c:94:fe:84:
                    28:e7:b9:6f:ef:13:75:25:eb:df:ec:58:84:2f:40:
                    8e:0b:bf:ac:3a:b2:38:fb:51:1c:e9:73:3b:32:41:
                    f0:7c:31:e5:0b:af:da:eb:63:c3:80:80:68:21:a5:
                    1e:57:92:3d:61:04:d2:0d:75:cd:7b:2b:13:57:63:
                    a6:21:0b:a2:44:f0:69:4d:db:b8:fd:c6:36:ec:38:
                    f0:fd:70:4a:f7:59:24:ac:1e:a0:46:6b:d9:96:1c:
                    92:fb:95:e7:e9:2c:b1:7b:df:1a:9e:1e:81:e5:a6:
                    75:56:81:be:b4:a8:aa:99:0a:6a:63:10:d8:18:da:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:D9:8C:DC:01:B1:C4:28:0D:6E:E0:37:39:94:29:6C:10:C2:FF
            X509v3 Authority Key Identifier:
                keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d4:ab:4e:a8:04:fb:62:e2:fa:27:af:c3:2c:f0:99:27:ac:
         e2:18:69:f7:ff:d9:09:27:87:13:85:2c:c8:bb:3e:e9:37:ba:
         80:fb:8a:f9:51:af:38:ef:ba:3d:df:03:6f:87:b2:a7:fa:c3:
         25:ec:80:7c:fa:04:c2:6c:38:d0:6f:96:87:4c:3c:3e:13:a2:
         e5:92:0d:75:d5:70:ea:82:f9:6f:06:d4:75:0c:6c:8b:de:5b:
         82:b9:56:d4:3f:9e:9b:6b:ee:91:39:10:a9:fe:a7:8f:15:35:
         50:86:fc:2b:8d:78:f9:e0:77:ec:cf:7e:2d:fd:92:fa:66:6e:
         65:b1:c8:47:65:36:ba:2b:87:1e:38:21:99:36:90:64:f8:ff:
         00:2a:3d:da:e1:49:9f:0e:52:4b:63:da:2e:57:17:23:26:5a:
         fd:8c:de:9a:50:39:22:0e:d2:48:52:f1:73:83:e6:68:9f:3b:
         5c:9c:c6:45:e2:54:a3:75:05:10:f1:d7:9f:3b:8d:98:5f:00:
         2e:f2:8f:5f:cc:5c:44:4c:2f:d9:88:7f:f0:44:45:28:61:2a:
         19:98:b6:82:ef:6d:08:bb:4d:35:9b:26:af:00:80:a5:54:4e:
         61:68:6a:b3:cd:87:1a:ce:56:2a:a9:93:be:c0:76:24:29:2f:
         a4:03:cd:8a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD
Qjc4REE0NzkwHhcNMjYwMjA1MTMyMjQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2ZlMy0wODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/S3p+ZCkTwpdGc7UCHVbQXn3anymqOJEA1c9r9GIj+8TmaQT2sF4Co1HkVD
KeFo2iNHNMtXgSOGBkm8+Ov8LNhPrqJvOghw9dtVRXQUwipQhaU2Z3OgUMlDoy8d
QnRRZT1oSZTyaJjmRp7F0Bee3/qTywQecFBr/cS+p8mQqJ2svIyU/oQo57lv7xN1
Jevf7FiEL0COC7+sOrI4+1Ec6XM7MkHwfDHlC6/a62PDgIBoIaUeV5I9YQTSDXXN
eysTV2OmIQuiRPBpTdu4/cY27Djw/XBK91kkrB6gRmvZlhyS+5Xn6Syxe98anh6B
5aZ1VoG+tKiqmQpqYxDYGNqmXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFRg2Yzc
AbHEKA1u4Dc5lClsEML/MB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF
NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTlGQUYvMTI5NTc1QzQ2RTQyMTFFRUFCNEM5QzZDQzRGOUFFMDIvNkEwQzExODJD
QTlEMTFGMDg0QjBFODEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0M/MA0GCSqGSIb3DQEBCwUAA4IBAQBH1KtOqAT7YuL6J6/DLPCZ
J6ziGGn3/9kJJ4cThSzIuz7pN7qA+4r5Ua8477o93wNvh7Kn+sMl7IB8+gTCbDjQ
b5aHTDw+E6Llkg111XDqgvlvBtR1DGyL3luCuVbUP56ba+6RORCp/qePFTVQhvwr
jXj54Hfsz34t/ZL6Zm5lschHZTa6K4ceOCGZNpBk+P8AKj3a4UmfDlJLY9ouVxcj
Jlr9jN6aUDkiDtJIUvFzg+ZonztcnMZF4lSjdQUQ8defO42YXwAu8o9fzFxETC/Z
iH/wREUoYSoZmLaC720Iu001myavAIClVE5haGqzzYcazlYqqZO+wHYkKS+kA82K
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:35:21 2026 by rpki-client