Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/6B2903E61C4B11F09DCEDB11C4F9AE02.roa
File:                     6B2903E61C4B11F09DCEDB11C4F9AE02.roa (raw, json)
Hash identifier:          of+eMJwERY8W/Zx8rlSjoD/Le9OYic1s0XcXBDZddHM=
Subject key identifier:   AC:B3:91:36:99:A3:FB:65:7C:B0:5B:EC:36:27:CF:BF:BD:25:43:58
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       027D
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/6B2903E61C4B11F09DCEDB11C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:36:48 +0000
ROA not before:           Fri 05 Dec 2025 01:11:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     62610
IP address blocks:        43.224.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: Dec  5 01:11:05 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a59270-39fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:e0:0e:8a:f3:6f:71:7c:e2:2d:d2:9b:60:
                    bd:32:87:fa:2e:9e:77:99:68:01:2f:ec:f1:73:82:
                    5a:17:7b:8f:e2:8b:b8:d1:c4:92:90:2a:f1:c2:67:
                    a2:78:4d:25:3d:a9:bc:58:b1:d7:d0:c1:bc:b6:d4:
                    aa:7a:f0:19:fa:6c:16:bf:8c:d7:da:5f:a7:8c:e0:
                    3f:85:0d:58:46:ab:e5:72:a4:13:e7:10:08:55:51:
                    fb:eb:13:0e:2c:46:89:b6:2b:ea:60:b0:b6:5a:f7:
                    12:3d:25:2a:42:a4:f2:37:e1:04:26:9f:01:a9:0e:
                    5b:37:27:54:6a:72:f7:06:f6:f9:29:99:a6:79:df:
                    29:c8:2e:5f:30:4f:7f:eb:0f:05:e6:10:63:1d:85:
                    3d:fd:d5:9f:7e:ec:8d:ea:30:bc:cf:93:69:83:1b:
                    1e:90:ba:05:d6:b8:80:d0:a6:e1:7b:6b:be:b4:7d:
                    56:56:bc:ab:cc:5c:a0:3d:e0:00:20:fa:7d:60:86:
                    3b:d3:81:0c:4c:f4:a8:42:2f:16:de:af:3a:2a:93:
                    1d:bc:f5:8b:ef:b2:1a:0a:36:3a:9b:28:bd:b5:f1:
                    5b:70:9f:0f:31:25:73:53:65:83:d0:fd:80:44:79:
                    bc:3b:38:97:7b:4b:e5:4e:18:38:dc:23:ec:a6:44:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:91:36:99:A3:FB:65:7C:B0:5B:EC:36:27:CF:BF:BD:25:43:58
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/6B2903E61C4B11F09DCEDB11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:69:4e:6d:36:b4:4d:82:bc:b9:86:73:0f:ac:e4:87:fc:
         87:19:be:72:22:e4:31:51:4f:93:7e:eb:96:68:f6:49:0e:46:
         d2:84:4a:d8:90:cc:30:84:29:69:dd:7f:9d:f1:38:d4:4d:d8:
         7a:fe:a7:53:e4:e8:db:bb:d9:52:fa:ad:0f:6b:c2:04:23:89:
         08:07:97:fe:96:06:0a:4a:ea:09:7b:d2:5d:33:f6:cd:c2:99:
         79:72:cb:3d:2e:85:e4:9f:b4:47:6a:f2:ed:cd:11:2d:82:a4:
         f5:cc:1f:09:ad:08:69:e5:04:55:a8:78:6b:eb:51:f5:4a:1f:
         ca:c7:45:82:00:56:51:df:ba:cd:57:56:8e:a4:c8:d3:01:4f:
         d9:81:e1:bc:1b:7a:67:0e:27:30:55:fa:79:f3:3b:be:23:a9:
         5c:1e:8c:49:34:61:12:19:12:48:c0:ac:d4:e8:6b:bf:44:fb:
         cc:83:57:c6:66:51:ad:6e:fa:50:75:7d:53:7d:57:aa:28:aa:
         53:f0:a9:11:e5:55:51:f7:2a:ec:2f:77:eb:85:d2:bd:86:0b:
         9e:9c:3b:a7:8e:03:e7:a7:85:e8:b4:3a:01:26:59:78:e8:d8:
         b0:15:a2:f7:d5:78:3e:ca:12:b1:33:46:bf:dc:ed:b2:f7:05:
         76:f8:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:27:39 2026 by rpki-client