Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa
File:                     6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (raw, json)
Hash identifier:          Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=
Subject key identifier:   C4:FC:D2:5E:A9:E0:7C:D5:E4:C2:39:72:09:FB:1E:92:0F:15:01:A8
Certificate issuer:       /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial:       03F8
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:37:21 +0000
ROA not before:           Thu 21 Aug 2025 01:08:25 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55330
IP address blocks:        175.106.40.0/23 maxlen: 23
                          175.106.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
        Validity
            Not Before: Aug 21 01:08:25 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58481-5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f8:7d:77:f1:5c:65:62:d9:54:85:1c:2e:43:
                    91:8f:ae:1b:84:62:c4:dd:45:d3:d2:f7:3b:46:ad:
                    5e:82:f7:66:d3:b8:be:77:14:4d:cd:25:d6:85:e4:
                    89:d7:ce:5d:41:85:ce:f5:a3:2a:1f:ee:d7:82:b3:
                    e4:7a:a9:93:eb:55:ea:a3:fc:4d:08:31:f7:06:8e:
                    07:e3:25:af:53:f5:6b:43:24:c5:af:3a:96:e8:92:
                    7d:f3:d7:8a:dd:51:85:21:d4:f1:e3:75:f5:5c:45:
                    1e:19:10:75:70:4b:e7:16:e2:67:f6:58:7e:3b:0c:
                    a7:a1:c9:ec:74:d9:8c:8b:46:e7:5c:fd:ff:0a:82:
                    a3:b4:01:a4:0a:8d:81:f9:55:27:3f:92:5e:ea:3d:
                    8a:4d:03:fe:0d:5d:dc:62:6e:97:38:51:82:11:5d:
                    bb:f3:33:a9:db:ff:91:51:d9:27:b4:30:f3:85:1e:
                    ff:59:e0:4e:ae:09:66:da:67:de:90:2f:3b:ac:35:
                    65:3e:4d:a0:12:9c:f6:56:eb:4b:f0:46:69:0a:61:
                    28:76:28:df:0f:61:a9:eb:90:75:19:3b:7a:5c:a5:
                    c9:f3:81:1f:74:3b:f5:2f:cb:6b:bf:4e:e4:27:67:
                    31:78:cc:c4:81:aa:32:ff:ba:a9:ea:28:51:c4:2d:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:D2:5E:A9:E0:7C:D5:E4:C2:39:72:09:FB:1E:92:0F:15:01:A8
            X509v3 Authority Key Identifier:
                keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/6D3CF65A134311EEA2AF3B1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:9a:f8:05:2e:d2:86:84:aa:38:4f:34:70:90:2e:4d:4d:
         6d:27:e2:35:db:d9:a6:17:75:25:ff:ec:66:c0:d5:a7:7f:01:
         cf:a1:d7:cb:d3:bf:be:ea:b3:12:66:d5:68:f1:73:bf:06:32:
         b1:d8:2c:9e:91:b0:61:64:83:90:ef:07:f9:f6:ea:a4:0e:a5:
         e2:07:73:bf:b0:a8:f8:3c:5e:bc:5e:8e:cd:60:40:be:da:0c:
         b3:b9:c3:b3:09:2d:35:a4:bc:68:14:41:f4:5d:d4:f2:91:02:
         96:d2:d5:24:50:d3:fb:de:31:41:87:e4:cc:7e:b8:c5:58:8d:
         66:3a:82:7a:be:4f:03:19:99:a9:f2:4f:68:f7:9a:5d:d7:0b:
         e9:a1:ca:e0:22:2a:fc:f2:61:a0:a6:a2:14:10:c7:1a:f3:5d:
         a7:f3:fd:e1:d2:6b:d0:30:43:b3:52:53:93:aa:e2:8f:31:4c:
         7b:c3:2b:d8:6f:cd:b6:47:04:ca:13:49:2b:61:cd:cb:bb:89:
         99:d3:7b:bc:57:e8:ed:48:bb:02:6c:90:b7:97:11:30:07:80:
         bd:f5:8e:7a:89:00:68:55:8d:ad:3c:d9:53:d8:8f:0d:88:d4:
         79:63:82:b6:62:c3:6b:83:aa:ef:11:30:4f:fd:e6:1f:47:ba:
         2c:cb:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:41 2026 by rpki-client