Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
File:                     CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (raw, json)
Hash identifier:          LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=
Subject key identifier:   BC:97:56:54:6B:BE:0A:BE:31:53:79:36:37:85:60:8A:02:3C:D0:9B
Certificate issuer:       /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial:       D5
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:41:36 +0000
ROA not before:           Fri 03 Apr 2026 06:41:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        203.6.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
                          rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
        Validity
            Not Before: Apr  3 06:41:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf6120-a65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:dc:40:c2:25:1e:ad:fe:33:1b:5f:c3:12:
                    0e:47:ae:46:15:aa:df:d6:76:2e:cf:6f:20:91:cc:
                    9d:62:6b:10:ac:d1:89:57:bb:d2:be:62:de:bc:16:
                    e0:22:93:b9:4f:5e:40:d9:c8:06:bb:a2:62:33:92:
                    d5:cf:cf:a3:71:53:87:18:1d:02:d7:b3:30:cf:84:
                    39:5c:94:e9:bf:4c:be:84:dc:7c:07:47:22:3e:ec:
                    79:1e:c6:38:b7:25:60:2b:f8:78:48:1e:1a:ff:aa:
                    39:28:c4:ab:72:42:fe:bc:52:69:68:bb:61:13:fa:
                    7d:52:11:0a:c5:b2:71:bc:77:32:e9:7f:2a:48:03:
                    e3:8a:26:78:b7:bd:83:43:dc:06:ff:a9:82:6f:bc:
                    08:e0:18:2e:96:0b:0c:f1:04:99:e8:74:c2:6a:8c:
                    37:54:4a:2f:26:b0:5c:07:3b:37:42:ef:66:f9:17:
                    c6:a1:eb:b3:22:ad:66:fd:f6:25:75:4e:45:e3:73:
                    a2:5e:a7:38:23:60:80:70:75:40:ca:0e:50:a8:89:
                    f7:42:fd:24:08:e9:ee:42:f2:3a:ee:03:df:dc:90:
                    f1:8b:96:c9:28:dc:76:7b:e6:8c:91:17:99:69:2d:
                    85:34:54:99:4e:08:48:31:1f:dd:ad:ed:16:c5:22:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:56:54:6B:BE:0A:BE:31:53:79:36:37:85:60:8A:02:3C:D0:9B
            X509v3 Authority Key Identifier:
                keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:24:12:09:de:e9:c4:9c:f7:b7:d4:bb:0f:f1:a8:76:13:de:
         9d:ed:15:09:3c:91:5a:1a:ee:67:ec:93:b1:89:cb:d5:02:6d:
         36:78:48:96:62:d9:ba:27:43:f8:31:56:df:06:df:91:0b:5e:
         fc:11:9f:a3:09:2f:f7:5f:4d:de:3d:17:8b:c4:2e:df:1d:00:
         3b:d1:cc:d1:97:cb:b9:93:2e:7c:39:82:50:fc:89:44:d0:11:
         91:3a:2e:6b:ac:b7:01:c3:c8:88:49:b8:e4:60:0f:e9:da:e5:
         31:be:40:c0:63:d4:d2:55:4e:4c:6c:bd:c6:9a:29:2d:c0:9f:
         8f:cc:b5:ba:c9:3b:a7:77:c9:21:66:40:12:00:67:6b:86:c8:
         54:81:48:b6:a5:05:e1:2c:b1:33:e9:45:a8:fc:30:bb:2b:67:
         c6:6e:b0:c1:c8:88:f7:1e:46:85:88:a5:24:53:ba:43:d9:72:
         24:e7:df:76:6d:79:76:85:b8:b5:2e:d7:01:27:1f:1b:ee:34:
         bb:b6:b3:63:38:fe:86:e0:04:d5:d7:9a:90:df:e2:68:3e:1d:
         79:6b:be:ed:72:e7:25:cb:c9:f7:fd:69:13:cc:15:e6:97:88:
         3a:11:1d:a9:83:87:38:fd:db:5a:57:07:fe:31:0d:ef:28:89:
         1c:0d:99:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:51 2026 by rpki-client