Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa
File:                     6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (raw, json)
Hash identifier:          wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=
Subject key identifier:   21:E0:F4:4E:B2:AD:C3:77:9E:07:4B:A3:0F:38:CF:8A:C8:6B:9D:CA
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       0161
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:26:42 +0000
ROA not before:           Thu 19 Jun 2025 05:24:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.142.153.0/24 maxlen: 24
                          2001:def:c001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: Jun 19 05:24:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59012-52c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:3f:aa:a3:81:dc:fd:03:b8:1a:f6:3b:35:
                    cc:6f:ab:8c:88:70:ac:25:15:09:b7:39:a9:50:a1:
                    09:57:a4:7e:da:1e:d7:4a:0d:96:bc:fe:54:db:64:
                    bc:2b:d0:f5:50:10:97:7c:56:75:35:11:6f:06:d7:
                    c5:b8:a2:6e:10:b2:84:65:a4:fa:9b:7e:2f:a2:70:
                    dc:53:5c:11:0e:f0:ce:82:da:66:3c:5d:5d:9f:2b:
                    75:bb:b7:ad:17:68:13:c2:06:de:86:78:86:18:d3:
                    ee:91:fa:26:d2:64:88:55:21:1d:4b:e2:ed:d9:10:
                    a2:12:19:67:d9:b9:aa:22:e0:e5:27:69:58:6f:d0:
                    a6:e6:e4:f8:c5:67:0e:c6:ed:58:0d:b0:7d:8a:45:
                    5a:ae:81:00:01:6c:e2:23:b7:c7:4e:2f:4c:4e:b6:
                    4b:91:70:43:1d:e8:52:39:fd:a2:ea:ba:0f:a2:96:
                    1c:a4:d1:74:eb:5e:6a:b7:d5:2a:f7:9b:a2:3c:ff:
                    a3:42:c5:ac:29:47:71:28:3d:85:16:5f:1b:bb:8f:
                    54:46:27:31:26:39:b2:79:03:cc:40:8c:62:bf:85:
                    80:e0:d1:43:0f:3f:76:b8:f4:48:30:3e:f0:a7:9a:
                    76:19:b8:b0:5c:10:85:74:12:7a:f4:ae:97:ce:69:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:F4:4E:B2:AD:C3:77:9E:07:4B:A3:0F:38:CF:8A:C8:6B:9D:CA
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.153.0/24
                IPv6:
                  2001:def:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:ba:be:67:12:66:6d:49:07:de:18:43:74:3a:b9:16:11:52:
         19:ec:5d:a0:6b:82:5f:35:be:b0:70:49:8c:94:55:a9:3a:e3:
         eb:91:2a:53:01:f2:5f:3d:7d:c7:4a:3f:cd:70:15:b6:21:73:
         eb:e8:74:c0:2a:ad:4f:8c:88:96:fd:08:df:7f:0c:35:98:b1:
         69:db:ac:4c:7f:bc:e1:4d:cd:0e:5f:2b:87:d2:55:54:44:9f:
         85:dc:d9:43:8c:42:de:b5:40:1e:3f:2a:64:13:01:a1:2d:b6:
         c3:e5:79:e8:bf:5e:92:e9:6f:6e:46:3c:0a:50:a0:12:f5:46:
         57:fc:01:c5:8a:d6:9f:e2:64:b3:9e:77:2d:7c:00:7d:99:89:
         e1:79:e8:52:7a:16:5c:fd:33:7f:ee:34:a8:1b:2c:24:08:3c:
         c9:27:9e:e6:c0:16:74:25:86:e3:6b:df:de:25:3e:2a:43:a6:
         af:93:ac:7a:ac:65:63:50:41:fa:5f:ad:b2:b5:7d:ff:ee:e9:
         48:15:8d:86:0d:18:d3:4a:97:8c:33:6c:5f:4f:5a:8f:e4:36:
         e8:ba:91:c6:c7:d4:05:85:7b:a3:dc:55:b8:0a:b8:1b:db:d9:
         a7:58:cf:45:18:1f:bf:31:e9:29:cb:71:d3:1e:4c:72:07:1a:
         20:31:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:46 2026 by rpki-client