Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File:                     6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=
Subject key identifier:   50:5D:41:ED:92:8E:16:11:E3:BC:09:CA:30:6C:30:95:F1:9C:D3:51
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06B2
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:29:32 +0000
ROA not before:           Thu 02 Oct 2025 22:53:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct  2 22:53:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4777c-c5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:d3:d7:3c:71:61:ef:2a:fa:ff:d4:e4:74:
                    ec:ba:43:30:97:88:e4:67:58:ce:c7:67:9b:75:a6:
                    a4:92:21:17:03:27:ec:66:9d:0e:af:e5:a0:eb:43:
                    7e:5d:40:2f:c9:e7:8e:6a:f6:bd:3b:48:4e:d6:79:
                    8a:de:5e:49:de:b5:35:da:5a:07:4b:d8:f9:3d:86:
                    10:20:0a:70:c2:5c:03:1b:0e:95:00:eb:6b:9d:84:
                    4c:d0:0a:5a:2e:6e:99:70:33:74:51:75:1b:f8:5b:
                    98:e8:51:ac:39:d3:47:84:83:b1:9d:47:86:a9:0b:
                    e4:64:26:a0:86:dc:04:d1:15:cd:d8:fb:6b:89:ce:
                    17:a1:39:d3:92:49:9d:78:48:d3:f3:25:e1:47:5b:
                    e2:c6:29:eb:7b:21:9a:31:e8:8b:15:02:37:95:e2:
                    e9:fc:81:98:14:75:3e:a0:18:65:84:cf:bd:9e:41:
                    41:88:38:e7:25:fe:a4:da:31:0e:90:ba:21:58:7a:
                    1f:36:c9:88:9f:f1:26:64:cf:d5:b3:1b:fb:02:02:
                    08:ec:a0:90:69:6f:c9:0a:0b:a1:d8:68:df:ce:ae:
                    a4:d6:e5:05:26:26:74:18:16:7b:0d:f6:4a:45:4d:
                    e4:07:be:39:45:c3:de:88:df:f4:74:89:77:58:38:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:41:ED:92:8E:16:11:E3:BC:09:CA:30:6C:30:95:F1:9C:D3:51
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:61:81:c4:6a:d5:07:f7:8e:9a:9f:b4:b7:75:65:9b:ef:
         f3:e4:d8:33:71:fa:f4:25:16:69:7f:b9:50:ab:bd:2b:93:78:
         fc:a2:d9:22:d7:40:a0:e6:d5:09:78:cd:66:ae:f6:4e:16:22:
         e8:e5:77:7c:26:09:53:c6:46:b7:11:48:63:3f:7b:7f:3d:88:
         9a:98:60:82:a4:94:7f:49:b3:7f:1c:3c:5b:5a:02:94:17:29:
         bc:9d:4d:9b:94:1f:02:b1:a4:50:b4:43:66:02:46:30:30:29:
         aa:d6:c9:6c:75:78:9b:30:80:e3:4c:b9:65:d6:fd:7e:e2:e3:
         d0:44:f0:00:8d:d2:62:28:28:c8:76:48:a0:0a:92:8a:c5:1c:
         08:32:96:65:08:77:0d:98:fe:b7:5a:a6:f8:14:ab:ba:79:b9:
         e9:25:ed:c4:5b:25:ca:53:29:b1:8f:97:66:cd:39:99:1f:6a:
         68:f8:1d:57:59:96:b7:e4:31:a0:a4:f2:a4:82:8a:9f:a0:54:
         9f:ff:6a:80:b7:c8:77:b5:75:65:8b:08:de:66:d3:ec:22:6e:
         5a:06:c9:7e:cc:eb:ac:ba:4f:a5:df:62:58:63:d7:e1:d1:ba:
         ec:f9:55:ba:62:a5:92:0a:0f:cc:7a:5e:17:81:23:cc:0f:d4:
         79:c0:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:46:26 2026 by rpki-client