Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa
File:                     6D98D7C21C6411F1B68A335785EE528E.roa (raw, json)
Hash identifier:          p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=
Subject key identifier:   FB:A8:F4:EF:8F:99:ED:76:BA:C2:D1:6B:6C:2F:1F:C3:B7:A6:55:BD
Certificate issuer:       /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial:       06
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa
Signing time:             Tue 10 Mar 2026 09:35:09 +0000
ROA not before:           Tue 10 Mar 2026 09:35:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     51847
IP address blocks:        103.172.182.0/24 maxlen: 24
                          103.172.183.0/24 maxlen: 24
                          2407:d840:1::/48 maxlen: 48
                          2407:d840:2::/48 maxlen: 48
                          2407:d840:3:1::/64 maxlen: 64
                          2407:d840:50::/44 maxlen: 44
                          2407:d840:50::/48 maxlen: 48
                          2407:d840:51::/48 maxlen: 48
                          2407:d840:52::/48 maxlen: 48
                          2407:d840:53::/48 maxlen: 48
                          2407:d840:60::/44 maxlen: 44
                          2407:d840:60::/48 maxlen: 48
                          2407:d840:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 22:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
        Validity
            Not Before: Mar 10 09:35:09 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69afe5cc-291e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:3b:f9:91:9b:11:95:7d:d2:51:99:02:f2:
                    b4:f1:8f:49:ae:54:d2:de:38:c8:92:cf:4e:2e:02:
                    a0:5a:ad:f9:d4:cd:06:b5:a1:68:f6:7c:cd:1e:80:
                    54:aa:46:a8:eb:f8:9f:ca:bf:6d:a0:71:d1:21:73:
                    9e:38:6a:76:db:59:76:ad:7f:8a:3c:b7:0f:b9:8e:
                    c9:be:34:7d:6b:1b:78:fc:1e:6a:31:b7:88:d5:32:
                    ce:bf:7b:5a:c0:af:1e:da:3c:b6:a1:36:db:c2:26:
                    14:e9:78:52:4f:ab:58:74:16:0d:7b:ed:c0:bf:b0:
                    9c:e3:8b:23:f4:69:38:b7:7d:5b:0c:d8:2c:76:d3:
                    82:98:5a:96:5d:00:92:e8:15:46:7c:7d:45:08:0c:
                    83:61:b0:34:a6:50:9d:24:b0:c6:9e:0b:3f:d4:92:
                    cd:34:97:57:63:e7:40:e8:e0:35:58:a6:af:52:13:
                    b6:ab:f1:a5:c4:c8:f9:78:74:2b:23:90:71:41:0f:
                    da:3e:a1:68:e0:3d:7a:fb:ca:37:f4:59:25:ed:f5:
                    e0:6c:cd:5f:90:00:9e:d6:77:3d:6e:4e:59:aa:60:
                    c0:20:1d:3e:ce:4f:44:bb:96:0f:5b:7b:6b:e8:25:
                    b8:37:7b:c2:26:f8:42:dd:82:14:44:3f:a6:4a:8e:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A8:F4:EF:8F:99:ED:76:BA:C2:D1:6B:6C:2F:1F:C3:B7:A6:55:BD
            X509v3 Authority Key Identifier:
                keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.182.0/23
                IPv6:
                  2407:d840:1::-2407:d840:2:ffff:ffff:ffff:ffff:ffff
                  2407:d840:3:1::/64
                  2407:d840:50::-2407:d840:6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:18:c3:53:8f:41:e6:8b:6e:84:09:fe:37:a5:3f:9b:cb:
         78:f1:22:69:b8:27:ce:ac:d1:bf:3a:4a:02:d0:93:38:25:4e:
         b8:c0:84:5a:fb:08:2e:32:93:58:45:65:fe:2e:9e:ad:b4:9e:
         1c:e1:1b:96:8a:88:89:2b:f6:b2:f4:23:c7:6c:ce:64:ce:42:
         cc:1f:d5:e6:07:14:95:7d:19:1e:d2:7f:9c:79:e8:f5:d1:5f:
         dc:f3:82:ec:d9:10:1b:01:d6:29:7b:03:07:6f:7a:b8:af:53:
         ba:d9:f3:3f:5e:51:f4:44:5f:ed:59:85:bf:a1:e1:45:81:06:
         54:69:e3:ff:a8:c9:7e:c1:8f:98:de:c0:09:07:15:8e:f2:c2:
         ac:f1:39:49:ba:81:f7:9a:5e:c2:e8:21:75:3c:f2:be:a9:4f:
         a9:7b:33:27:07:fb:17:1b:04:92:ba:95:90:74:59:c8:1f:54:
         eb:ce:cf:37:24:68:2d:60:56:fd:5f:11:cd:5f:76:2a:68:b1:
         0d:34:cd:9a:3f:6d:84:71:cb:06:32:0a:ea:f3:47:c3:81:85:
         6e:77:50:8d:06:bf:22:96:5c:bf:ce:9e:bb:6c:6a:e8:cc:cf:
         31:a8:0c:e7:58:94:93:8e:ba:1c:4d:3d:4a:f5:cc:be:e1:b4:
         b2:6e:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 18:37:50 2026 by rpki-client