Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
File:                     6B0DCABA80D111EFA7138B77C4F9AE02.roa (raw, json)
Hash identifier:          oWpG1nY6YtRqxK8aObL9bgFm1TD/g8S09MHOvEEMyUc=
Subject key identifier:   88:1B:41:FD:A0:F0:CC:F0:28:B8:B1:9E:C8:BD:8A:E7:C5:34:A3:0E
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       02BF
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:08:17 +0000
ROA not before:           Thu 27 Mar 2025 02:08:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     142295
IP address blocks:        103.182.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
        Validity
            Not Before: Mar 27 02:08:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40200-5732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:d5:90:8c:e5:fd:c7:88:41:da:36:ca:2c:
                    bf:db:a9:88:25:ed:5d:4c:9b:0c:ed:25:9d:45:02:
                    fa:06:34:ee:50:66:e8:eb:6f:a3:c4:62:47:da:a5:
                    84:de:59:47:1e:9d:53:b6:ed:92:72:35:eb:d2:b5:
                    2c:73:06:e2:dd:2f:b6:23:3e:99:3b:37:ca:c9:05:
                    3f:4a:fe:0d:98:30:43:13:1c:19:9b:a3:44:ed:5a:
                    68:2f:20:97:89:76:c9:9a:53:59:87:84:6c:3c:fa:
                    0f:2e:0c:ad:3f:f2:81:0e:4a:33:22:5e:5d:e8:06:
                    b4:88:c8:e9:85:7c:3c:dd:16:05:b7:43:f3:3b:b1:
                    9b:aa:60:b8:95:b4:fd:54:92:b5:77:04:32:54:7c:
                    da:26:c7:f4:dc:0e:f8:10:9d:27:82:04:9d:a9:38:
                    8c:70:21:fd:15:1f:ae:bb:59:a0:b3:b5:2c:32:c3:
                    5a:70:40:9a:de:23:6a:fb:e9:47:57:7e:29:58:f7:
                    50:3f:ce:09:fc:9d:69:72:0f:e6:7a:1b:be:80:9d:
                    58:96:7b:74:71:6d:ac:42:07:83:6c:70:98:bb:b5:
                    c0:68:69:2a:29:85:7e:8d:13:27:02:b1:26:5f:ed:
                    36:e1:5c:b1:23:c7:ae:44:32:1f:bf:5e:b6:17:bd:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:41:FD:A0:F0:CC:F0:28:B8:B1:9E:C8:BD:8A:E7:C5:34:A3:0E
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:1e:b4:52:a8:11:e9:36:36:74:42:d8:95:87:13:f1:0b:
         be:3c:82:ac:7a:4b:6a:35:6a:b3:73:83:e9:44:20:06:d7:bc:
         53:4f:57:4e:a7:22:dd:b4:ff:b3:d0:46:6c:25:6a:9e:b6:80:
         50:d0:de:a5:f8:15:6a:98:fe:29:32:6e:02:35:ae:a7:7c:d5:
         4f:a4:87:0e:83:ae:fa:1e:3e:29:c7:0c:2a:1f:4a:67:8d:6e:
         4b:d4:74:66:11:3e:4f:7f:27:54:9d:31:1f:0e:2f:ba:d9:10:
         28:a3:14:1e:f2:1b:47:3b:01:2a:ff:ac:4c:bb:fc:cf:eb:0d:
         03:65:e0:e4:e8:98:73:ec:00:10:22:3a:a5:98:2a:ba:b3:50:
         69:67:fb:e4:e3:24:61:dc:5d:06:6c:4b:65:37:1f:8e:28:ff:
         36:fc:ca:89:f3:86:34:40:71:4c:e6:48:68:99:27:ab:62:ef:
         7e:f2:80:2e:0b:20:7b:a2:8a:57:1b:0d:eb:bb:30:71:2d:d0:
         bc:10:31:6f:ce:4b:6f:be:c0:2f:14:f6:71:5b:66:0d:46:1f:
         d8:85:9d:d7:aa:04:c2:87:fa:a5:b5:87:06:9e:86:4b:1e:07:
         71:8d:5d:d5:dd:7c:f0:3f:7f:aa:02:98:da:03:5f:ca:97:40:
         fa:37:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:52 2026 by rpki-client