Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa
File:                     6B7E8FC670DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=
Subject key identifier:   8A:A9:1B:8F:5A:3A:0E:74:78:97:A0:3A:48:12:32:E3:80:D3:CE:BB
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E83
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:33:31 +0000
ROA not before:           Tue 02 Sep 2025 18:08:23 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139470
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24
                          2405:22c0::/32 maxlen: 32
                          2405:22c0::/36 maxlen: 36
                          2405:22c0:1000::/36 maxlen: 36
                          2405:22c0:2000::/36 maxlen: 36
                          2405:22c0:3000::/36 maxlen: 36
                          2405:22c0:4000::/36 maxlen: 36
                          2405:22c0:5000::/36 maxlen: 36
                          2405:22c0:6000::/36 maxlen: 36
                          2405:22c0:7000::/36 maxlen: 36
                          2405:22c0:8000::/36 maxlen: 36
                          2405:22c0:9000::/36 maxlen: 36
                          2405:22c0:a000::/36 maxlen: 36
                          2405:22c0:b000::/36 maxlen: 36
                          2405:22c0:c000::/36 maxlen: 36
                          2405:22c0:d000::/36 maxlen: 36
                          2405:22c0:e000::/36 maxlen: 36
                          2405:22c0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3715 (0xe83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:08:23 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45c4b-9395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:04:fa:fb:b5:c3:f0:5b:10:66:4d:62:dc:
                    a6:b7:65:a3:e3:68:75:e6:e3:d0:1c:c0:ec:db:d4:
                    59:71:06:a0:27:d7:11:dc:35:33:c8:d7:44:da:ef:
                    aa:ab:f1:30:06:76:9e:d4:3b:3a:fc:dd:3f:a0:c2:
                    30:1c:f3:a0:de:c4:e8:f5:f0:69:29:4d:0c:36:13:
                    75:b7:e8:d0:c0:ec:5a:7f:6f:a0:36:f9:26:62:88:
                    ed:59:76:15:02:55:ed:5b:02:a3:6e:bc:c2:ea:b6:
                    db:d7:1a:41:f9:f3:07:2f:fc:34:49:3f:db:a4:f9:
                    5a:0d:eb:0e:a6:63:ec:27:8d:77:c0:81:db:de:52:
                    19:c2:a7:a1:78:b3:77:b6:36:88:0a:8a:93:83:da:
                    5e:12:30:36:7e:77:68:0d:18:63:6f:b2:f7:0d:ef:
                    26:79:22:aa:70:9a:3a:87:fe:53:a8:94:1b:eb:29:
                    45:76:89:93:ae:f7:73:70:6f:ad:4f:90:48:a0:2f:
                    3a:c7:59:fd:73:e6:0c:5a:ba:67:1d:d2:8e:18:13:
                    54:b4:55:22:cf:cd:aa:2c:d3:14:fe:82:e3:17:67:
                    65:7e:b0:8a:32:e2:16:c7:16:8b:df:b2:83:bd:98:
                    b0:a3:7c:5a:4b:1d:1e:fd:e2:84:ee:1b:04:75:eb:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:1B:8F:5A:3A:0E:74:78:97:A0:3A:48:12:32:E3:80:D3:CE:BB
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23
                IPv6:
                  2405:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:82:c0:3a:37:d1:29:12:f3:6d:91:7b:0c:6e:b2:a7:8a:af:
         2a:42:63:de:5c:ed:1a:c0:ea:77:a9:49:c3:d2:6f:43:0c:48:
         34:ac:39:f6:1d:50:08:98:66:75:82:54:1d:fd:9e:7b:34:cc:
         d0:e6:c1:42:01:11:35:dc:b5:40:cb:64:30:b9:b0:1c:9a:be:
         06:e3:c1:1b:49:36:fc:02:eb:a8:b0:a0:86:fc:ae:be:1c:8a:
         7e:c9:c9:91:3c:4c:a1:1f:4b:3a:7f:01:8f:d3:99:20:d3:7e:
         40:37:30:2b:c2:c9:83:91:42:1e:9e:2a:9c:ef:8b:d6:53:42:
         1a:d4:3c:1b:e0:80:09:40:b8:c7:cf:77:14:0d:06:fa:78:48:
         ff:c5:83:1f:a0:79:6c:8f:15:34:b1:42:58:be:7a:ff:54:cc:
         65:e3:5f:8c:04:41:58:85:20:98:9b:a2:ab:08:c2:e5:42:f8:
         dc:9c:4b:65:ab:a5:c7:82:cb:60:ba:67:86:c7:c1:45:2b:20:
         60:e1:51:c8:80:d8:65:26:62:e7:f8:51:f3:6c:bd:44:73:bd:
         e0:34:01:ae:07:dd:42:56:0e:b1:80:fa:87:74:82:91:b0:f4:
         13:ab:9e:ef:79:08:69:4e:dd:93:31:df:de:eb:70:38:3c:33:
         e4:d5:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:34 2026 by rpki-client