Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa
File:                     6CAF60F0296011EEB0606446C4F9AE02.roa (raw, json)
Hash identifier:          a/sMWsbe2PPLiNo0V4QVI0MPQGpJqfAh/ZXuIbQB9VE=
Subject key identifier:   A6:96:76:F4:00:4F:A1:18:07:4F:43:59:C2:AA:40:C1:11:A2:A0:76
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       0209
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:43:52 +0000
ROA not before:           Fri 23 May 2025 03:32:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        103.115.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 02:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: May 23 03:32:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47ad7-b7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:52:54:2b:01:c9:90:1a:2b:d6:5d:be:94:39:
                    e3:d8:92:b9:73:73:68:99:a7:d6:0a:d9:28:6f:52:
                    b1:6f:35:f1:4e:4e:0f:80:25:bd:2c:bb:c2:ed:31:
                    c9:46:eb:bf:78:0b:ce:00:f4:37:93:5b:69:0b:c8:
                    7c:fc:ce:50:ac:d2:95:b8:17:fa:53:df:30:d5:d6:
                    3b:78:b5:79:4c:cb:70:67:6b:10:85:55:d7:8b:7a:
                    65:3b:b5:52:fd:1f:8e:92:d0:fd:07:3f:27:74:c0:
                    3d:a2:a7:12:5d:ec:ed:fd:cf:fd:5d:e2:57:36:0a:
                    26:a0:28:3f:2a:bb:6d:8e:8b:38:de:7e:a8:6e:8d:
                    92:26:a5:67:e6:fb:45:b7:87:96:8b:78:ab:af:92:
                    35:0f:b6:af:93:94:2d:da:53:eb:45:0a:d4:2a:b7:
                    d6:f2:25:96:2a:7b:b1:e5:dc:67:24:c5:9e:71:b0:
                    1a:d9:1a:e0:34:02:9d:5e:85:a8:9e:46:90:ec:fe:
                    94:3e:95:be:5e:7f:69:a2:30:93:d8:6c:63:44:5f:
                    38:fc:d0:b0:0a:69:74:d9:6f:e3:cb:f4:fb:07:6f:
                    12:e1:1e:cd:12:53:8d:e2:f9:85:7e:db:44:2f:85:
                    27:a6:15:e9:40:8c:96:cb:8c:89:c1:c3:3b:d9:3c:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:76:F4:00:4F:A1:18:07:4F:43:59:C2:AA:40:C1:11:A2:A0:76
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:55:98:7f:21:e2:30:06:c7:79:d4:f0:83:ff:f9:46:a6:
         a3:21:63:14:ef:a5:a3:81:df:f2:51:91:c5:3d:9f:2c:85:f8:
         3a:1e:a9:b7:f9:cd:58:b6:39:f6:13:ac:2b:45:66:da:4a:b1:
         e1:7a:77:3c:8c:45:14:8b:8b:2d:52:5b:11:dc:57:3c:6e:5e:
         f2:e4:1a:e5:ec:77:6c:1a:fc:04:f7:df:04:21:ec:0c:86:33:
         70:11:f8:20:ab:28:a2:16:da:32:46:55:31:9e:9a:e1:43:e8:
         58:26:6f:8c:55:a6:3d:7b:89:34:bb:74:56:10:6d:36:d0:5a:
         00:9d:29:26:70:1d:38:2f:b3:a9:48:25:57:45:0a:ef:32:38:
         d1:81:7c:63:a8:ae:f4:32:5e:75:20:e8:77:66:06:40:84:34:
         8b:de:43:93:22:c6:96:d9:d7:d8:43:af:47:2a:e9:65:a3:20:
         6e:82:e4:16:db:1a:13:88:2a:1a:26:35:db:ee:44:b3:c8:bc:
         38:0c:c4:a3:b7:b8:8b:45:8c:a1:da:43:9f:60:a5:1e:f3:46:
         fe:c7:1c:6e:4c:cd:b2:25:1b:cc:43:31:bb:e8:9a:84:de:3c:
         52:5a:c5:26:9d:5c:79:e9:95:d3:79:16:63:05:7f:f5:be:91:
         fe:98:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:11:56 2026 by rpki-client