Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa
File:                     6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (raw, json)
Hash identifier:          Wg9RfGn7DWEr8GbZKeTSiadhyGcaa2JL5/PabgAQIOg=
Subject key identifier:   51:1F:1F:20:43:C4:D0:90:A7:F2:19:7C:DE:43:CE:C7:43:D3:4B:88
Certificate issuer:       /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Certificate serial:       0881
Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa
Signing time:             Mon 20 Apr 2026 21:26:22 +0000
ROA not before:           Mon 20 Apr 2026 21:26:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45144
IP address blocks:        103.78.47.0/24 maxlen: 24
                          103.78.48.0/23 maxlen: 24
                          103.211.239.0/24 maxlen: 24
                          220.158.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2177 (0x881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
        Validity
            Not Before: Apr 20 21:26:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e699fe-f528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:7f:ca:9f:44:1f:6c:a6:66:9e:54:2b:49:
                    7d:a7:91:68:11:08:af:b6:3a:f7:31:bb:96:02:ad:
                    8c:b5:6d:cb:3d:84:b8:25:37:bb:f2:27:0c:9b:2b:
                    79:76:c3:41:b2:eb:11:47:15:57:21:58:00:af:76:
                    5d:07:ac:49:eb:d4:f6:05:f6:49:89:88:0c:2d:27:
                    1c:38:c2:52:d2:e0:01:db:95:ec:50:7a:a7:82:76:
                    21:0e:cf:35:55:bf:01:49:b4:dd:38:14:67:7a:99:
                    81:b7:f3:5b:ab:14:92:80:f8:24:2c:d0:ff:57:d4:
                    27:6c:61:8e:51:fa:17:c9:bc:0d:d8:d9:4b:8c:b4:
                    d3:7b:f4:34:61:5f:08:bc:7f:07:98:31:f3:5a:3a:
                    11:b8:34:64:8b:f3:9b:ba:ea:d1:e3:4e:0c:d3:f0:
                    4c:ed:19:9b:04:8e:69:79:d0:57:f3:3a:c7:d9:f9:
                    ba:44:84:66:ca:72:6c:5d:7f:75:93:16:24:92:f4:
                    e7:1c:af:59:e8:c0:d7:e9:ff:2f:6c:3b:a0:29:a7:
                    f9:cd:de:6a:09:d1:7f:56:c9:e7:48:b4:99:d2:06:
                    9c:02:3d:e2:11:10:f8:85:69:03:38:f4:be:4d:bf:
                    d6:43:dd:30:42:f4:5c:55:e2:93:29:af:95:7a:8a:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:1F:20:43:C4:D0:90:A7:F2:19:7C:DE:43:CE:C7:43:D3:4B:88
            X509v3 Authority Key Identifier:
                keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.47.0-103.78.49.255
                  103.211.239.0/24
                  220.158.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:19:c6:c2:8a:f4:d2:20:e0:ae:8e:48:bb:f3:ff:e6:7f:
         09:b8:55:13:b0:26:35:71:c8:14:ba:a1:d9:9d:61:90:25:6e:
         35:3c:cb:e0:a3:50:90:b8:d1:12:6b:65:51:15:cb:c7:cc:cf:
         4a:f5:ac:2a:77:e2:29:5a:7d:25:a3:28:95:bf:ae:f5:bf:fe:
         77:fd:65:01:e2:e1:e3:21:6b:b5:97:a7:b6:55:2e:e4:14:27:
         d6:0f:a3:e0:bd:54:9c:3b:d1:57:3c:24:58:84:b5:22:87:3e:
         00:81:c9:33:42:f3:2d:de:5a:cf:cd:b4:72:63:a1:96:4c:44:
         88:22:23:26:8f:25:34:4a:70:3c:35:9b:10:50:18:8c:bd:02:
         90:2e:5c:7d:b7:c7:a7:ab:74:8b:17:97:fc:e2:80:65:bf:24:
         93:44:a8:bc:29:7b:61:ae:df:a9:d1:52:4e:39:03:ea:58:59:
         38:57:f4:4b:cb:9a:40:54:38:86:75:a6:36:c3:d2:19:fa:bf:
         2c:ec:65:03:80:49:be:c3:5a:88:01:32:b2:db:2d:87:59:d1:
         31:94:63:0e:0b:b5:fd:5c:75:9f:04:62:62:b3:97:a5:9a:e9:
         83:b9:1a:a8:14:1c:3d:f3:e5:95:57:1e:77:44:28:e6:3f:57:
         27:61:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:42 2026 by rpki-client