Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/6DEFE6D8A14611EF93AB8E21C4F9AE02.roa
File:                     6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (raw, json)
Hash identifier:          XPN51TPloT0Sb6kUSDOMyNz4bBTH/IHqHYJPkeZz8vA=
Subject key identifier:   79:1D:86:B1:20:47:EC:55:12:70:F6:3B:F9:E2:EC:DD:C7:ED:F0:76
Certificate issuer:       /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial:       FC
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/6DEFE6D8A14611EF93AB8E21C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:37:50 +0000
ROA not before:           Mon 15 Dec 2025 05:24:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133091
IP address blocks:        203.12.139.0/24 maxlen: 24
                          203.12.141.0/24 maxlen: 24
                          203.12.142.0/24 maxlen: 24
                          203.12.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
                          rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
        Validity
            Not Before: Dec 15 05:24:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5a0be-37d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:a5:68:c9:86:0a:bb:e5:2d:ae:e1:15:81:
                    82:be:8e:83:43:bb:88:c5:1a:ee:4e:67:06:8b:c0:
                    fe:53:5a:49:c7:a0:cf:52:a0:0d:6d:4b:e9:2a:2d:
                    b6:6e:d5:c0:5c:59:c6:7f:46:2f:dd:07:cc:ff:5e:
                    71:e3:8d:0f:83:23:fe:bc:31:3e:70:5b:ab:db:96:
                    18:c0:78:5a:d4:07:b3:38:48:2f:82:7e:26:fc:50:
                    ef:e7:7b:82:86:8a:b1:0d:90:7f:98:63:39:a6:75:
                    ee:63:e2:ff:12:9a:f9:09:09:9e:aa:24:34:d8:e6:
                    42:ae:ec:a2:c3:e5:07:6b:98:5d:40:bb:6f:dc:82:
                    9a:99:63:78:69:19:55:5d:b1:ce:3f:1c:fa:af:94:
                    5e:e6:04:50:2d:e1:f6:df:a8:a1:d6:e6:00:57:69:
                    c5:33:71:b5:7e:ff:bf:c0:c5:cd:7e:97:09:f5:f2:
                    db:2e:0e:04:c4:a6:e9:58:3c:43:3e:67:c5:87:a5:
                    9f:ab:98:a4:32:d4:fc:b6:d1:8d:4e:8d:81:ea:43:
                    5a:82:bc:6a:4a:94:0f:cd:c2:8c:e3:a5:71:e2:20:
                    ac:04:ba:8f:89:9f:d4:f8:8c:7a:67:7f:26:08:b8:
                    2f:d6:6e:95:af:50:6f:46:2f:1d:37:c8:47:08:90:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:86:B1:20:47:EC:55:12:70:F6:3B:F9:E2:EC:DD:C7:ED:F0:76
            X509v3 Authority Key Identifier:
                keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/6DEFE6D8A14611EF93AB8E21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.139.0/24
                  203.12.141.0-203.12.143.255

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:48:8b:cc:2a:84:5c:5d:0e:82:15:da:1f:e3:5e:62:57:
         ff:c6:51:ea:b9:aa:9a:0f:63:2c:ec:ec:d3:74:a4:a1:84:23:
         ae:ad:ca:82:59:bd:a6:ea:30:98:40:7a:97:bf:20:29:e3:44:
         0c:bb:47:47:0f:5e:f9:e9:b6:de:69:47:36:f0:e2:70:02:67:
         a6:c3:87:01:f1:a9:75:9d:46:99:5a:a8:45:59:7b:31:44:a6:
         81:9c:35:38:05:3b:90:b2:4f:d3:08:ab:21:82:66:4a:01:d0:
         f7:fb:fb:a0:f1:31:b1:3c:da:2b:93:e6:39:b2:e1:27:99:6f:
         8a:35:60:58:17:69:f2:4e:ca:ce:a5:fb:ae:57:09:9f:25:b3:
         b1:ef:12:30:e2:3f:31:d7:b9:9f:1b:40:fc:72:87:ff:b9:48:
         99:a7:fd:db:21:8f:a4:54:61:49:e7:92:4e:eb:cb:e2:1d:40:
         19:f9:d1:92:de:f4:64:45:ac:6b:a8:ba:f1:45:2c:86:b4:46:
         50:99:65:82:5a:aa:c4:b3:da:8c:67:89:be:81:da:f7:89:65:
         d8:fa:21:61:c6:d6:78:99:27:c8:15:5a:54:af:23:8f:f9:5d:
         60:6d:90:8c:ad:89:8b:47:b3:f8:53:3e:1a:25:86:e8:95:58:
         75:e1:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:45 2026 by rpki-client