Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa
File:                     6F873B3A7CD211EDA61A1836C4F9AE02.roa (raw, json)
Hash identifier:          Wrji6VePD5myz3pLbtzxmmd5wD0b/w8SmQMSMCc96LY=
Subject key identifier:   0B:B8:1D:92:F1:50:E2:A8:94:B9:93:68:2F:7E:83:4E:34:89:35:2A
Certificate issuer:       /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
Certificate serial:       026E
Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:11:03 +0000
ROA not before:           Tue 27 Jan 2026 01:21:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45280
IP address blocks:        103.232.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl
                          rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
        Validity
            Not Before: Jan 27 01:21:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a58c67-9ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:f4:b4:6b:25:2c:0b:3f:8b:0a:b6:d1:20:
                    b7:e6:59:33:9f:f1:52:92:5f:15:6c:fb:1e:0e:e7:
                    20:49:38:7d:a7:ca:af:33:23:ef:11:1d:23:69:c6:
                    69:40:cb:89:1a:2b:da:b5:d4:26:46:fa:2c:85:ac:
                    29:8b:b6:96:cd:14:df:ff:17:94:a0:88:97:f5:c4:
                    c3:9f:91:28:dc:95:73:80:a7:0b:fe:80:49:71:c5:
                    ad:52:a5:b3:55:56:cd:58:bb:16:a6:53:06:42:a2:
                    31:4f:64:fc:6e:28:fb:ab:85:e7:a0:cb:c3:68:fb:
                    fc:a4:48:8f:83:b2:63:a0:56:7e:9c:ea:60:f9:38:
                    05:7b:9c:22:8d:b3:d6:83:58:80:5d:06:7a:38:9b:
                    cf:9c:38:30:ab:c9:dc:56:10:82:80:96:64:4c:d5:
                    13:21:f6:ac:3a:55:67:e2:5c:3e:5c:ed:40:ac:f4:
                    df:86:d2:68:44:1b:18:98:bb:a0:06:83:0f:12:20:
                    b4:38:2c:b1:f4:1a:40:35:14:7a:31:67:5a:7b:1e:
                    69:f6:ac:90:22:17:c1:c8:54:ec:4e:5f:be:7b:de:
                    2b:6d:32:b4:04:1d:b2:81:4f:5d:c9:f8:a5:9a:3f:
                    12:48:6b:0c:cc:bf:72:17:8c:ea:0a:5c:d8:bf:47:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B8:1D:92:F1:50:E2:A8:94:B9:93:68:2F:7E:83:4E:34:89:35:2A
            X509v3 Authority Key Identifier:
                keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:9b:af:b0:ef:be:9d:8a:ed:cc:0d:81:23:90:07:2a:7a:
         18:40:5c:b2:11:55:7c:14:3a:1d:1f:27:66:6b:b6:27:57:d6:
         96:0f:4a:23:b1:f2:a2:ec:1d:30:86:f3:1e:a7:f2:6f:ab:d7:
         56:f1:a7:aa:3e:92:a7:51:03:f7:40:fa:09:cc:c3:a1:ad:ab:
         84:3e:0b:da:0d:15:8e:e7:a7:67:de:1b:89:d4:b7:18:ec:b6:
         b8:f9:cd:8f:1c:29:c3:c8:f1:b3:46:55:91:48:73:e6:23:81:
         20:7e:ca:f2:31:d1:cb:b2:21:82:ac:d1:4b:c0:b8:53:9c:dc:
         fb:50:0b:55:d4:e0:29:bc:38:64:2a:49:73:af:85:00:c6:7b:
         ab:92:f9:c5:d3:2e:56:92:0d:41:f5:2e:43:fc:34:14:c4:a5:
         bc:b4:19:6b:79:34:b9:32:01:b5:47:42:33:da:cb:f1:70:4b:
         17:df:48:f1:01:cc:dc:e7:55:1a:8d:f8:5f:29:77:b9:5f:d8:
         48:67:c7:52:7d:6d:cb:fd:f9:eb:06:3c:3e:52:c6:30:c1:fd:
         76:53:0a:f1:30:fd:2d:2f:4c:b3:ae:4a:80:bc:1a:73:53:de:
         b4:54:17:b5:9d:45:ef:28:2b:66:f6:78:77:dd:d2:84:ff:fc:
         28:a6:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:06 2026 by rpki-client