Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
File:                     6B4DE806568411EF8FE2C24EC4F9AE02.roa (raw, json)
Hash identifier:          zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=
Subject key identifier:   A3:16:5B:2F:58:59:7A:10:A5:24:7A:17:2F:C7:49:A2:BB:9B:CC:20
Certificate issuer:       /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial:       0270
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:16:46 +0000
ROA not before:           Wed 25 Feb 2026 01:22:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134952
IP address blocks:        103.85.182.0/24 maxlen: 24
                          103.85.183.0/24 maxlen: 24
                          2001:df1:f7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
                          rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
        Validity
            Not Before: Feb 25 01:22:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5a9de-7bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:3d:b0:88:e1:00:2a:78:d5:5a:cc:fe:15:
                    de:0f:e3:5f:20:7f:a7:5c:e4:0e:c7:57:fe:dc:a0:
                    d5:30:7e:c2:0d:f6:2f:c2:3b:85:6a:4e:09:27:55:
                    68:a7:c4:a0:b0:4a:71:d1:3e:a9:f7:fe:34:d2:c1:
                    c9:4f:21:88:70:82:d2:38:17:ab:58:1f:bd:c0:88:
                    07:1b:42:3d:5a:5b:ca:14:eb:00:6b:14:90:4c:3d:
                    b2:d6:25:35:88:ab:e3:5b:05:8f:22:70:d1:9c:f9:
                    d8:49:72:41:61:86:d1:40:82:b4:90:db:2e:d5:71:
                    30:f6:07:50:b4:f0:4c:5d:64:d7:a2:40:47:36:ba:
                    7d:5b:70:08:13:41:a9:13:51:06:9b:67:42:3b:8b:
                    63:dd:cc:92:34:42:5e:00:ce:48:c4:ff:40:68:e8:
                    55:5f:0a:d8:ef:6e:1a:c9:12:88:3e:63:f4:e2:49:
                    69:1f:1c:84:45:ae:3b:6d:42:b8:b8:dd:7e:3d:9f:
                    ff:86:90:69:1f:28:c3:60:14:73:1d:4f:9c:92:a7:
                    09:27:dd:7b:29:88:08:15:cd:ac:b9:3a:bc:87:b7:
                    32:4c:f6:9a:e9:5c:bf:b6:5d:1f:a4:c6:1b:ec:4d:
                    44:56:a8:bd:54:c3:eb:a9:6d:43:4c:71:f3:c3:a9:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:5B:2F:58:59:7A:10:A5:24:7A:17:2F:C7:49:A2:BB:9B:CC:20
            X509v3 Authority Key Identifier:
                keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.182.0/23
                IPv6:
                  2001:df1:f7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:31:95:e4:3f:df:46:9d:c4:41:01:0e:0f:b0:07:77:b3:
         69:cf:66:29:51:83:e4:36:3e:27:51:a6:b9:64:f0:77:e2:e3:
         0f:d8:85:6d:17:fb:93:e2:55:b6:f8:83:21:8a:38:d9:5c:c9:
         25:2e:ba:24:a8:35:12:3f:36:a7:dc:9b:a6:b1:51:75:3c:24:
         9f:6f:10:b5:c7:a2:36:f6:52:e8:25:c2:e2:03:84:90:c2:07:
         39:57:f6:29:4f:4c:56:7b:8b:c5:5e:93:38:86:62:41:dc:2d:
         8f:a2:b9:a9:2c:ad:f1:ce:40:01:99:c6:65:39:32:2e:ec:72:
         2b:f9:6a:fb:c2:45:71:01:f0:5e:3d:3a:34:0b:87:17:7e:dc:
         06:18:53:0a:b3:95:17:27:d2:19:44:1c:88:04:6e:59:e5:bd:
         48:67:a4:4e:93:94:80:9f:75:63:ce:ae:c4:9b:37:a8:29:b9:
         0b:2e:b8:46:4b:e6:d2:ee:cb:ea:62:65:34:a8:f7:0c:0e:43:
         8e:3e:a3:d1:b5:c7:2b:73:76:25:b2:58:32:d7:06:bb:51:92:
         a7:38:6a:86:c0:96:21:cb:ef:87:a9:16:ac:2d:0c:6f:b0:b6:
         1c:4d:24:b9:dc:31:7c:7f:73:6f:f7:28:ff:f1:83:5e:7f:ec:
         c4:db:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:46 2026 by rpki-client