Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa
File:                     6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (raw, json)
Hash identifier:          i4FVSmJpnZhw4sFX7OQvDlYbncKwDpFbIR+KRcYNlfs=
Subject key identifier:   80:3D:90:EA:2C:ED:7F:0E:57:41:E0:62:8D:9E:29:DF:E9:4E:32:E1
Certificate issuer:       /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial:       06E1
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa
Signing time:             Thu 12 Mar 2026 22:30:00 +0000
ROA not before:           Thu 12 Mar 2026 22:30:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     131297
IP address blocks:        103.164.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
                          rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
        Validity
            Not Before: Mar 12 22:30:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69b33e68-8845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:bd:3d:12:64:80:12:a3:97:a4:dd:35:55:
                    08:b8:15:69:ab:84:ce:e8:12:bd:18:44:51:c7:66:
                    49:4f:ee:f0:20:01:8a:8a:9f:50:79:5e:03:e8:b4:
                    03:e9:d4:97:5d:1d:2a:70:67:64:e2:51:e3:c4:4b:
                    56:f2:eb:c4:30:54:10:aa:53:76:93:79:90:98:af:
                    6d:07:10:1a:a3:7a:10:0d:42:e1:c6:27:60:69:bb:
                    1d:cb:08:1f:04:6b:47:7b:1a:6d:d8:95:4c:60:f1:
                    23:d2:6d:8c:26:3e:70:ad:4d:b3:1d:91:a0:76:0f:
                    e7:c0:b8:a3:74:dc:11:9b:db:66:d4:a5:3f:59:50:
                    55:5b:cf:14:f3:58:60:f1:7d:56:8a:59:3c:1c:fa:
                    08:f6:0a:3e:97:d1:d2:7a:64:4a:89:39:9b:1c:a3:
                    51:2c:54:da:42:e5:68:c6:40:9d:44:5c:7f:c5:a8:
                    3f:f8:1d:b2:fb:83:30:86:31:88:eb:83:55:1c:be:
                    79:a1:1c:6a:17:c9:5f:e8:1b:43:f4:d8:f7:a0:c0:
                    4c:a2:88:13:62:17:fd:16:02:5c:97:d2:cc:14:9d:
                    0f:10:ca:37:18:cc:10:b2:a2:3a:e5:97:34:23:54:
                    d7:e8:5a:93:71:92:f2:ae:3e:01:bb:82:b4:2d:a3:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:90:EA:2C:ED:7F:0E:57:41:E0:62:8D:9E:29:DF:E9:4E:32:E1
            X509v3 Authority Key Identifier:
                keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:f8:53:3f:48:93:26:1c:7a:31:1b:12:80:35:24:61:9e:
         a9:8b:dd:15:61:8c:b7:46:88:2c:6d:ed:88:b6:f3:9f:84:eb:
         74:60:f1:9b:79:ca:69:05:ad:8c:64:42:bb:ed:2d:0e:6c:f2:
         19:ae:21:31:18:1b:89:75:c6:5b:39:e4:9f:33:ac:06:8d:25:
         3d:88:50:94:36:4a:b6:82:8a:bb:69:d7:bb:92:ec:73:5f:c4:
         71:41:42:c1:2d:8d:05:2e:d4:00:90:51:e0:6c:c8:b0:b9:15:
         2d:54:41:6a:10:9d:a5:f8:05:0b:37:1d:59:a2:b3:2c:68:ed:
         27:c5:27:eb:ed:6b:21:6f:f1:08:ef:bf:8c:13:40:2f:b6:02:
         0c:b2:75:9a:fa:77:d3:db:1a:d1:9f:0f:b3:73:cd:13:0f:87:
         cc:e0:05:9e:da:62:ad:67:7a:e0:0b:fd:c8:e4:fb:4f:70:62:
         c5:a6:a6:b3:9a:4d:24:43:dc:69:1d:3b:e8:54:9d:eb:78:d3:
         de:bd:fb:34:bf:1a:d9:2a:06:7e:af:2d:85:3f:54:fd:04:b2:
         2c:b0:f5:45:dd:ee:57:d0:b6:3d:67:ca:9b:07:40:d6:c9:ec:
         95:00:22:f0:64:f8:b4:5b:e2:04:6a:9b:03:3f:d8:1a:58:08:
         2b:c4:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:54 2026 by rpki-client