Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa
File:                     6810784CC56F11F0836DEB12C4F9AE02.roa (raw, json)
Hash identifier:          xUQFAVTTdAa8CqNrRE2SBv3wHjSfgqDOaaBb6DaJIhs=
Subject key identifier:   C7:01:7E:A4:35:14:92:54:AD:13:B2:40:24:43:FF:B8:52:66:72:5E
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       020C
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:43:54 +0000
ROA not before:           Wed 19 Nov 2025 17:44:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     46450
IP address blocks:        103.115.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 02:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Nov 19 17:44:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47ada-8452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:e4:43:6d:8c:59:78:43:da:af:67:96:61:
                    63:c4:a0:67:a3:50:dc:50:ff:b5:e3:b9:c0:fd:92:
                    0f:e9:87:63:76:49:c1:33:1d:69:99:b8:cb:da:34:
                    95:5c:8d:b6:d9:be:90:8b:f4:bd:ac:aa:9e:c8:36:
                    5b:06:f3:6b:69:c5:05:b2:a5:11:94:46:67:4f:b5:
                    b1:b4:b2:4f:1f:cf:7a:e5:31:d5:6a:e1:85:13:0a:
                    cb:a1:bd:10:e4:0d:7c:9d:43:47:a3:b8:da:2a:82:
                    90:83:bc:e5:8b:78:49:d5:10:41:22:34:ff:3d:59:
                    c2:59:8e:b9:6d:60:4c:c7:79:49:7f:97:63:a1:63:
                    07:eb:e3:1a:34:d3:93:18:dd:ba:e0:75:70:35:bf:
                    06:79:88:d0:2f:f7:11:46:8b:04:a7:75:e1:41:a5:
                    a2:ef:c0:6e:98:29:a8:5c:9d:64:22:2e:14:e7:49:
                    74:83:70:29:8f:74:5b:72:f0:1e:b6:40:3e:6f:65:
                    98:cb:16:77:e5:a9:77:49:0e:be:13:47:48:54:7a:
                    19:82:72:1f:4f:b1:40:da:b4:9f:af:28:bd:09:43:
                    1f:b6:b2:2f:ec:87:0a:ae:33:f0:94:01:f4:ff:e0:
                    4a:0d:56:2a:2a:9d:9f:74:ae:41:98:f6:d3:fe:07:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:7E:A4:35:14:92:54:AD:13:B2:40:24:43:FF:B8:52:66:72:5E
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:ac:6f:4a:81:12:0e:aa:62:b1:2c:5e:8a:b7:59:ef:16:
         0d:a1:08:4f:2a:96:8c:30:86:76:2a:08:0e:b1:82:ae:6b:a8:
         99:56:a4:88:3b:ed:0b:d0:81:2d:89:df:8f:d2:52:fa:48:d3:
         74:e5:a6:c5:ad:ed:b1:6a:27:1c:7e:1b:c8:8d:83:c4:77:b3:
         88:14:43:a3:c3:1d:3e:9a:30:81:f3:d2:59:ec:e5:b5:61:0e:
         f7:3c:a2:7c:40:fc:3d:11:af:bf:dc:39:a0:af:01:db:66:da:
         37:84:1e:84:bf:26:d4:c3:6e:93:70:fd:d6:52:25:83:e9:61:
         a2:82:e2:03:c4:05:93:06:99:31:34:a9:5b:12:ef:ef:9e:b8:
         8f:f9:cc:3c:18:8d:3e:6c:93:56:e7:43:aa:09:e7:08:e6:37:
         ab:cf:71:7f:a8:a1:24:8a:a4:1a:31:78:ea:0a:9f:67:1c:88:
         86:ec:77:9e:6d:da:a4:30:bb:3e:e6:c1:65:9f:32:68:61:a8:
         cb:e5:f6:6f:8a:df:10:a9:71:3c:49:dc:a9:d1:b7:28:05:71:
         a3:d5:d8:9e:0a:3c:1a:36:77:cc:b1:13:e2:02:98:a9:98:15:
         ca:2f:cf:b2:06:1f:a4:81:15:0a:c5:a9:73:7c:4b:4c:ba:79:
         ee:2d:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:23:09 2026 by rpki-client