Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6EBBA0F4A1AD11EF8A984349C4F9AE02.roa
File:                     6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (raw, json)
Hash identifier:          LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=
Subject key identifier:   05:8D:05:4C:A4:43:41:18:30:CD:92:4B:14:77:D9:A0:0B:1A:5E:3E
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       010C
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6EBBA0F4A1AD11EF8A984349C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:59:00 +0000
ROA not before:           Fri 03 Oct 2025 06:33:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55410
IP address blocks:        103.129.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 05:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Oct  3 06:33:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a5b4-b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:bf:06:b3:93:35:e0:e9:22:a5:2d:47:02:
                    67:67:1f:6d:18:e3:42:b0:13:ba:89:46:23:b7:07:
                    67:b9:ea:a9:ff:c9:b4:fd:7c:94:d1:88:ae:50:68:
                    51:c3:0a:a0:57:f4:01:87:b1:1a:60:00:e0:18:f1:
                    bc:2a:99:0c:35:57:7e:19:ba:be:a5:9d:8e:6f:2e:
                    9b:aa:51:fc:60:50:1e:27:e1:e7:17:c8:db:de:36:
                    e9:da:4b:e2:a5:f7:6a:9a:08:5d:31:42:35:a5:57:
                    56:dd:db:34:78:1e:3d:d8:14:49:86:eb:f4:68:0e:
                    7c:61:91:ca:05:7e:c1:d6:5b:89:aa:a0:7c:a6:8f:
                    52:84:6a:09:b6:e0:b3:0a:e9:84:87:27:51:a2:0a:
                    b1:0c:80:11:c4:4c:89:cd:0f:47:6e:cc:ac:75:93:
                    d3:ef:eb:9b:7e:fc:83:3b:97:07:4e:fc:87:e6:da:
                    16:61:0e:d1:76:2f:34:93:3e:81:c5:ee:28:00:ce:
                    ff:df:2d:a0:88:19:6d:06:d8:32:2d:12:01:94:16:
                    6f:ec:11:10:9d:0f:42:8c:f9:9f:1d:67:dc:fa:f9:
                    35:10:e4:c3:31:da:95:94:bc:60:ea:4c:df:0e:8d:
                    62:6f:69:e9:c6:c0:96:7a:7f:56:84:99:7f:d8:ea:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:05:4C:A4:43:41:18:30:CD:92:4B:14:77:D9:A0:0B:1A:5E:3E
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6EBBA0F4A1AD11EF8A984349C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:67:94:d4:8d:22:d2:50:99:dc:8d:94:28:ab:19:e3:b8:
         ba:b2:69:45:47:bd:0b:4d:73:46:b1:1e:23:ee:96:e2:73:ff:
         99:76:84:0a:e9:38:b9:15:40:33:2d:23:7f:47:52:12:1f:17:
         3c:df:5d:67:ae:17:bc:c0:f8:65:a6:31:31:8a:99:7c:09:76:
         4c:fc:e5:00:a2:86:5c:5b:4c:c2:c5:db:a8:54:74:8b:53:c8:
         78:e3:02:8a:64:14:90:80:ec:ca:45:13:33:c5:a8:42:62:4b:
         9c:ee:a4:97:5a:cd:71:b4:5a:2d:3c:8e:e1:84:ce:4a:e9:00:
         8b:c6:f3:9f:3c:e2:f0:57:ba:ba:87:27:11:3a:b9:d1:c1:25:
         1c:7f:aa:ee:3b:2c:cd:eb:80:8c:cb:62:86:7a:1a:2b:5d:ee:
         85:e5:19:0b:8c:f5:21:59:8c:0a:20:df:8c:62:f7:99:be:cd:
         75:75:32:61:39:03:23:ee:b0:02:b3:d7:4a:dc:ef:39:79:7b:
         67:e3:0b:69:83:ff:91:9e:45:f1:93:84:72:6b:fb:34:d0:b7:
         3b:05:cb:a8:5b:dc:89:ad:dc:41:87:b4:4e:df:e9:05:3c:20:
         54:66:6b:fc:14:40:45:cc:72:fa:f2:6a:14:9c:44:1c:1d:2b:
         33:7f:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:12:09 2026 by rpki-client