Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa
File:                     A6C9DA80974111F08BFA4E71C4F9AE02.roa (raw, json)
Hash identifier:          rbdpNPf6mALUrM9CZMd+wHJqII9aB4Fnkkaau21r1uU=
Subject key identifier:   66:6F:45:04:29:08:FB:F7:15:C7:93:B2:F4:01:66:C2:B0:B9:73:99
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0A87
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:02:43 +0000
ROA not before:           Sun 21 Sep 2025 23:21:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        103.54.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 19:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: Sep 21 23:21:07 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47133-856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:f8:65:d9:f7:be:53:9f:6d:65:2a:96:e6:
                    ea:6d:a6:2e:c9:0e:9e:4a:9e:df:c8:7a:43:43:c0:
                    a4:ca:e2:01:cd:7b:02:96:9d:e4:4e:5e:f2:8a:33:
                    4d:7a:c8:b2:cd:c0:7d:57:92:4f:dd:ce:63:8f:25:
                    15:4b:e6:3f:1a:b2:4c:36:a8:2c:c5:67:a8:17:50:
                    01:78:e8:29:8a:5b:b3:87:14:e7:4e:fd:94:a4:04:
                    d1:aa:4a:b5:c2:a8:9e:2b:d6:ae:1a:de:85:ea:30:
                    a9:89:23:6c:ae:6f:1b:e4:07:9f:47:c4:c1:0b:ac:
                    f0:cd:04:16:d8:9f:c1:19:76:86:7f:05:62:4e:8a:
                    1e:b5:28:9a:14:98:43:b9:2c:be:c2:26:6c:b9:3d:
                    ca:9f:6e:20:ea:ef:be:d2:19:5a:cb:5d:f9:84:7a:
                    57:79:15:3e:0e:80:3a:4d:96:a0:7b:01:c0:49:7a:
                    8f:54:bd:23:7f:95:dd:d8:23:ef:10:a6:aa:e4:7c:
                    bd:fb:8f:ae:6d:e7:64:42:55:35:99:b2:81:9f:f0:
                    34:98:9a:22:09:4f:32:fc:db:b0:68:aa:42:c3:a9:
                    b8:0a:df:62:b2:a0:d7:99:9b:36:8f:14:d5:f8:d4:
                    db:59:e6:47:93:86:5b:32:c5:44:82:80:d5:34:27:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:45:04:29:08:FB:F7:15:C7:93:B2:F4:01:66:C2:B0:B9:73:99
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/A6C9DA80974111F08BFA4E71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:76:55:90:6c:2a:c6:59:62:d2:b9:43:1f:e9:4c:ee:de:
         f8:00:ac:88:4d:66:9e:f9:4b:b3:1c:67:58:7e:f0:61:16:c3:
         a6:47:bc:e6:e2:81:d6:b8:37:cf:fd:1a:fb:73:29:c2:12:df:
         8f:bc:c4:e4:62:ce:c3:9e:0a:a0:3b:84:f2:b0:2b:35:be:aa:
         9f:d3:64:92:34:40:b8:aa:2a:4f:e4:1a:18:05:1f:bd:10:f3:
         e0:e2:bb:9c:d1:e5:0f:0b:2e:62:33:3f:7d:68:59:6e:2e:8d:
         ce:8e:73:06:09:71:c0:ee:ed:63:28:d5:3a:32:ee:5d:d0:cd:
         8d:40:61:4a:e4:be:e2:09:b9:f9:58:93:f9:f1:f1:b0:af:c9:
         17:23:c0:19:c1:f6:d9:2e:9d:d3:09:af:9b:59:36:5e:85:76:
         01:70:5e:02:06:b1:e1:03:e4:53:32:42:8f:0a:57:e0:fc:0b:
         8d:3d:1f:af:66:01:cf:fb:c9:1d:ff:81:6c:35:3f:ef:65:7e:
         89:08:53:24:51:0d:8e:c5:1d:e3:48:5d:5c:83:88:38:39:c0:
         7c:de:5e:60:01:c1:63:7b:25:cf:d7:3f:0e:52:fc:e5:78:1b:
         3f:3c:72:25:e5:1a:66:9b:ac:00:02:d7:c1:e0:de:fc:2a:7d:
         9f:42:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:02:56 2026 by rpki-client