Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/6AE91888C5FC11EC9127557EC4F9AE02.roa
File:                     6AE91888C5FC11EC9127557EC4F9AE02.roa (raw, json)
Hash identifier:          cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=
Subject key identifier:   47:63:B0:C2:CE:5D:46:DD:CB:3D:64:04:82:D0:55:2B:55:86:1A:B0
Certificate issuer:       /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial:       03C3
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/6AE91888C5FC11EC9127557EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:51:42 +0000
ROA not before:           Sat 31 Jan 2026 00:22:04 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.177.222.0/23 maxlen: 24
                          2001:df0:2c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
                          rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
        Validity
            Not Before: Jan 31 00:22:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4365d-b9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:d8:0c:b0:fa:16:3a:e3:9d:53:59:83:d4:
                    06:33:70:cc:52:a6:c5:25:cc:ed:c3:d8:f9:7e:3e:
                    5f:b3:78:2f:80:2b:2c:68:b1:7f:43:e6:b6:e4:a9:
                    be:6e:45:c0:58:b3:fc:c3:04:74:0e:f9:cf:44:ea:
                    12:d3:61:09:ed:5c:f4:aa:af:52:3b:ce:22:bc:0a:
                    50:f5:e3:70:c7:ae:d9:06:aa:3a:7d:56:17:7a:01:
                    7e:17:4b:6f:d5:76:b3:7d:28:58:75:f3:26:11:49:
                    60:eb:c8:81:af:40:5f:c1:20:6f:0d:71:df:4a:75:
                    bd:a3:2f:6c:7b:97:6f:d1:74:d3:4c:65:43:2e:49:
                    6f:36:97:f8:7d:dc:35:14:c1:f5:54:e0:a5:49:ad:
                    e6:2a:d0:38:6a:d1:b7:e2:43:6b:c2:0d:81:c0:6e:
                    82:bd:07:67:67:0f:7a:fe:c4:23:97:b8:09:c4:26:
                    e3:a7:75:f2:7d:58:1f:1f:a8:f6:e7:16:7e:08:cb:
                    b9:e1:8b:63:8f:eb:af:55:21:08:89:de:3c:3a:4f:
                    62:2f:4e:3f:5a:f6:39:60:3a:e3:33:6b:1a:20:d5:
                    1e:12:4a:d9:8e:46:18:44:91:97:6d:f4:10:f8:66:
                    6c:72:45:12:12:6a:4a:29:3a:8e:75:59:de:0f:0a:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:B0:C2:CE:5D:46:DD:CB:3D:64:04:82:D0:55:2B:55:86:1A:B0
            X509v3 Authority Key Identifier:
                keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/6AE91888C5FC11EC9127557EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.222.0/23
                IPv6:
                  2001:df0:2c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:26:d8:51:52:ff:7a:92:91:27:15:44:f4:48:41:df:7a:
         d0:b7:ba:e3:32:fd:ab:7a:1e:d8:e4:2b:f3:b9:ea:9e:07:91:
         87:d0:c5:30:72:7f:90:ec:d7:24:2c:55:4b:3f:f2:2a:42:54:
         ed:79:4f:0e:d5:20:19:ac:7e:13:05:d7:30:be:86:c1:25:70:
         5f:76:42:2b:4e:9f:58:72:e5:34:c3:aa:8b:2f:47:4d:92:56:
         26:73:47:8e:2e:a8:21:78:83:c4:b0:af:14:5c:b6:b9:8f:db:
         9c:bb:6d:c6:2f:80:d2:08:f8:82:21:1e:be:f0:58:4b:da:be:
         81:cb:c8:cf:ad:d9:b2:3e:0c:cc:1f:5c:36:f6:49:35:2d:05:
         58:2e:cc:66:78:50:3d:9d:1a:c3:33:94:4d:06:e7:b7:4a:cd:
         54:b1:07:55:02:b2:75:46:03:bc:d6:d4:a6:2f:f9:e2:19:49:
         8d:11:db:fa:28:32:96:97:41:bb:4b:72:a8:40:bd:09:e3:85:
         3b:f5:94:78:14:97:43:b9:a5:6a:03:84:4e:b8:a9:75:39:c0:
         f7:57:79:9f:de:4f:d4:ad:6b:af:27:6a:8f:82:73:c3:c6:62:
         8d:82:05:ad:5b:32:55:6a:01:dc:ba:85:b7:04:b2:f2:53:d7:
         8d:da:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:07 2026 by rpki-client