Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa
File:                     6B191E20F75811EB9C2B5D4DC4F9AE02.roa (raw, json)
Hash identifier:          brrWyiXDAT96zPwT9YFF9H7HSt3GNNOYu7ZR6/bGT4Q=
Subject key identifier:   7D:AC:C7:29:78:AF:F6:49:0A:76:40:BE:E2:E6:B3:6D:CB:B4:7E:01
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       05E0
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:10:13 +0000
ROA not before:           Wed 28 Jan 2026 23:19:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55479
IP address blocks:        103.246.106.0/24 maxlen: 24
                          202.3.77.0/24 maxlen: 24
                          2001:df0:92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Jan 28 23:19:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a855-7ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:02:4f:0c:bf:5a:6a:f3:47:07:9d:9d:17:
                    7d:06:81:64:8b:df:34:f2:79:d2:63:65:17:8f:f8:
                    8d:39:b1:36:52:66:96:2d:d7:95:78:ef:f2:b5:95:
                    6a:1e:8b:5c:49:3f:6c:84:6c:84:78:68:13:71:29:
                    23:74:35:fa:54:86:24:3b:88:e7:25:55:5a:ca:a4:
                    c0:aa:20:67:02:20:33:ad:87:19:4b:df:1b:cf:5b:
                    63:a4:80:fb:16:c0:da:ca:b0:ce:e1:50:56:ad:45:
                    e3:73:ba:75:b8:37:b3:36:bd:d2:81:e0:8e:a5:f7:
                    f8:d7:9e:d9:2b:c2:d2:82:2e:25:19:99:6e:ed:6a:
                    de:c4:97:41:de:fd:46:d5:ea:ba:d2:96:4b:96:99:
                    59:4f:0f:bb:c5:d2:c9:6b:72:53:08:6f:34:9d:d2:
                    d9:02:df:d9:9b:42:da:7b:03:67:ec:a8:11:b5:6a:
                    6f:41:bc:65:1a:26:fa:91:66:fb:b9:67:85:bd:48:
                    5a:ee:28:47:67:00:57:89:01:1c:b8:29:8d:4f:99:
                    5c:c2:23:d6:22:ee:5f:5e:05:69:82:93:70:3c:53:
                    ca:75:de:10:36:d5:58:9b:a5:a7:f5:16:54:58:16:
                    9b:9f:9b:17:15:bb:b3:0e:ce:18:2f:a3:d2:4d:0f:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:C7:29:78:AF:F6:49:0A:76:40:BE:E2:E6:B3:6D:CB:B4:7E:01
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.106.0/24
                  202.3.77.0/24
                IPv6:
                  2001:df0:92::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:8b:09:ff:20:00:e4:cd:ed:f2:d0:0a:0c:1f:0a:d8:2b:
         15:64:d4:48:ec:95:7b:56:64:51:c4:2f:5d:73:3a:f3:48:61:
         05:d8:5b:d1:9d:d8:5c:bf:a2:a9:08:7e:b9:42:01:2b:bd:a5:
         8d:75:2a:ef:d8:e1:e9:4f:3c:bf:05:93:07:5a:92:97:c7:b8:
         bd:9c:6e:17:f3:69:2c:79:89:98:50:c8:41:e7:66:9a:78:7a:
         d1:c2:dc:53:07:6a:ab:a9:41:fd:ee:37:fb:db:82:d7:e9:9d:
         b2:cc:6d:c3:cd:13:2b:67:cb:d9:40:e7:c4:a9:1c:27:67:a0:
         7b:9e:cd:5d:06:2a:b7:6e:ea:37:12:c9:ad:cd:bc:10:ad:35:
         8e:e3:02:b0:bd:29:3a:cc:45:eb:18:42:82:10:b8:10:90:d2:
         27:1c:11:fb:bd:b0:8b:54:93:ae:82:a1:92:b2:1e:b2:08:c8:
         7a:29:24:ad:ef:33:fc:80:37:13:c4:de:1d:82:7a:5f:82:f6:
         b8:75:07:9c:7d:3d:f3:64:81:3a:19:21:ce:52:1d:b9:c3:cc:
         4d:7a:09:c4:3b:3d:90:04:ab:57:cb:70:6f:d3:43:5b:46:11:
         33:92:89:57:65:51:58:09:1b:6c:31:54:c7:5e:92:82:26:b7:
         7d:3c:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:14 2026 by rpki-client