Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
File:                     6E3B1338F41211E9AAF5924EC4F9AE02.roa (raw, json)
Hash identifier:          vAJQDBAbqSvKlyjILfpEs40GEZSujGVNMsS2YT9xHAs=
Subject key identifier:   34:36:AC:31:98:01:0A:F0:C8:26:0F:79:31:8D:21:55:81:33:BB:73
Certificate issuer:       /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial:       0DA8
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa
Signing time:             Sat 26 Sep 2026 18:36:04 +0000
ROA not before:           Sat 26 Sep 2026 18:36:04 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     63526
IP address blocks:        103.101.197.0/24 maxlen: 24
                          103.101.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
                          rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3496 (0xda8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
        Validity
            Not Before: Sep 26 18:36:04 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab81093-dabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:aa:f2:fa:2c:e5:10:0c:e1:1a:79:05:26:
                    6e:83:da:67:c9:4f:87:53:93:d5:cc:fb:16:9e:d5:
                    24:49:91:5e:5c:a8:cc:1f:71:b0:80:03:82:eb:48:
                    ad:c5:66:32:8e:df:34:ef:10:a4:2e:fb:7a:d1:18:
                    93:e8:90:6c:fa:52:37:b0:bb:1b:62:d4:ff:1a:78:
                    ea:d4:ef:61:24:25:38:b8:2f:65:65:29:d6:b2:61:
                    ef:fa:3d:65:88:e9:61:bc:3a:f7:51:5a:ee:2e:f3:
                    95:7f:ac:6c:23:27:a3:19:17:71:07:ac:40:ea:58:
                    9e:ac:4a:0c:2c:bd:00:3f:ef:ed:99:a6:f7:af:4c:
                    d1:05:24:7d:71:8e:32:75:db:2a:c2:21:50:28:e7:
                    7a:dd:e3:5e:bc:b2:74:50:11:63:b8:b4:44:f4:4b:
                    9a:45:39:89:69:a1:b9:62:76:fb:78:27:61:14:28:
                    0f:09:f2:26:a9:bd:12:c3:d0:4d:11:01:d5:07:1e:
                    55:6a:9c:02:f5:18:bb:13:78:df:4f:2f:9b:aa:53:
                    50:3c:84:9c:ce:0a:0c:2d:77:ed:17:97:65:1c:61:
                    5b:61:b2:d1:fc:27:ae:8c:f5:7a:6c:67:42:64:78:
                    6d:4b:37:32:ff:8a:5c:bc:5e:1a:53:13:cd:86:44:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:AC:31:98:01:0A:F0:C8:26:0F:79:31:8D:21:55:81:33:BB:73
            X509v3 Authority Key Identifier:
                keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/6E3B1338F41211E9AAF5924EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.197.0/24
                  103.101.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:58:d8:81:e9:4a:9d:c3:ff:bc:59:0d:50:ec:f7:25:6d:2a:
         7e:4d:e8:4a:44:bf:0a:2f:35:5f:37:c7:37:aa:7c:4d:92:67:
         fd:a3:de:62:03:a6:a1:ec:45:03:38:22:67:b2:df:91:96:a6:
         ef:41:c7:6c:80:3f:63:07:63:01:64:f5:07:9d:20:1f:ef:fb:
         a9:14:bd:f2:c3:45:ef:a3:89:cb:2b:e3:dc:2d:6f:b3:05:20:
         40:74:3a:66:fb:c5:ee:f7:4c:ec:9e:7e:06:3f:1a:11:3f:11:
         42:82:cb:61:55:9a:b1:6b:35:1a:36:5a:f8:03:24:cd:9d:65:
         fb:10:53:4b:96:de:13:3d:fa:3d:58:7a:7f:c8:0a:09:1b:66:
         af:69:95:73:64:3d:de:5a:3b:51:4f:7e:9d:1b:63:d4:c6:0b:
         f1:2f:1b:65:52:49:c4:94:55:b1:2d:8e:d6:ee:dd:1b:f0:06:
         e9:09:b2:18:62:ee:dc:87:73:29:9d:de:e0:6f:98:65:62:35:
         4f:ea:d7:f3:ff:bb:07:8d:6b:0f:5b:f7:a3:81:f1:d0:82:28:
         2f:25:ad:5b:ef:19:d3:c7:81:ab:92:7a:0b:f5:db:d1:44:0f:
         0b:78:53:73:49:bd:8a:c9:a2:d8:0a:85:0b:40:f0:73:0f:c1:
         78:9f:97:fc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC
N0UyMEE2MTEwHhcNMjYwOTI2MTgzNjA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI4MTA5My1kYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJyq8vos5RAM4Rp5BSZug9pnyU+HU5PVzPsWntUkSZFeXKjMH3GwgAOC60it
xWYyjt807xCkLvt60RiT6JBs+lI3sLsbYtT/Gnjq1O9hJCU4uC9lZSnWsmHv+j1l
iOlhvDr3UVruLvOVf6xsIyejGRdxB6xA6lierEoMLL0AP+/tmab3r0zRBSR9cY4y
ddsqwiFQKOd63eNevLJ0UBFjuLRE9EuaRTmJaaG5Ynb7eCdhFCgPCfImqb0Sw9BN
EQHVBx5VapwC9Ri7E3jfTy+bqlNQPISczgoMLXftF5dlHGFbYbLR/CeujPV6bGdC
ZHhtSzcy/4pcvF4aUxPNhkRNQQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDQ2rDGY
AQrwyCYPeTGNIVWBM7tzMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0
MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFCMUEvNTFGRkM0RTRGNDExMTFFOUE0MzVCMDRDQzRGOUFFMDIvNkUzQjEzMzhG
NDEyMTFFOUFBRjU5MjRFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2XFAwQAZ2XHMA0GCSqGSIb3DQEBCwUAA4IBAQCSWNiB6Uqdw/+8
WQ1Q7PclbSp+TehKRL8KLzVfN8c3qnxNkmf9o95iA6ah7EUDOCJnst+RlqbvQcds
gD9jB2MBZPUHnSAf7/upFL3yw0Xvo4nLK+PcLW+zBSBAdDpm+8Xu90zsnn4GPxoR
PxFCgsthVZqxazUaNlr4AyTNnWX7EFNLlt4TPfo9WHp/yAoJG2avaZVzZD3eWjtR
T36dG2PUxgvxLxtlUknElFWxLY7W7t0b8AbpCbIYYu7ch3Mpnd7gb5hlYjVP6tfz
/7sHjWsPW/ejgfHQgigvJa1b7xnTx4GrknoL9dvRRA8LeFNzSb2KyaLYCoULQPBz
D8F4n5f8
-----END CERTIFICATE-----
Generated at Wed Oct 7 08:03:26 2026 by rpki-client