Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
File:                     6AC62B967FD711EBA2ECB43BC4F9AE02.roa (raw, json)
Hash identifier:          F/n1fw5Wh9KTj/6W2CMzWHfj5GcUWPdwePPGd5S/6ss=
Subject key identifier:   C8:12:9B:7E:C9:6F:7F:9E:77:64:F9:77:16:FD:4E:58:6F:90:FD:36
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       0709
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
Signing time:             Thu 12 Mar 2026 22:29:23 +0000
ROA not before:           Thu 12 Mar 2026 22:29:23 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141763
IP address blocks:        103.163.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar 12 22:29:23 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b33e43-7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:c7:8b:2b:3c:47:74:4f:13:d4:5d:d2:a9:
                    f3:b9:15:f0:d7:05:04:94:4f:d0:34:89:2f:b2:8e:
                    59:41:d2:dc:40:ee:28:43:bc:97:06:db:d7:93:3e:
                    61:fc:50:2e:5c:6c:68:c5:38:e1:b9:69:c2:8d:34:
                    65:00:fb:8d:66:3f:96:72:61:dd:36:a6:36:6f:90:
                    47:c3:85:bb:1f:1a:3a:5f:94:17:2c:cd:80:ac:11:
                    d1:b4:6c:5d:f3:ed:5e:02:4d:73:1c:60:12:ef:ea:
                    49:e9:50:52:52:bd:d5:95:b8:5e:4e:c5:43:7b:b9:
                    ae:b8:b9:63:3f:1a:12:55:85:a2:4a:ca:6b:ca:84:
                    ba:08:fd:e0:68:45:97:77:de:d6:31:53:e9:55:9c:
                    c3:c3:5d:61:47:c6:b2:b9:f7:6a:6c:2a:ec:cf:56:
                    c6:73:5d:30:c3:74:95:c3:f4:4d:9a:23:e0:df:e0:
                    3a:75:3c:e4:01:1b:15:49:77:ff:be:40:30:ad:c6:
                    76:ec:14:c7:79:16:5b:4d:bc:0a:d0:0f:33:8a:c5:
                    33:e7:e5:8b:47:c7:4a:e8:86:c7:c3:2d:26:c1:cf:
                    0a:3a:a8:7a:3c:e5:fb:53:97:97:d0:20:2b:06:d1:
                    83:39:4b:27:4d:d5:02:9b:3f:4a:c5:38:87:8f:d9:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:9B:7E:C9:6F:7F:9E:77:64:F9:77:16:FD:4E:58:6F:90:FD:36
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:32:ac:c4:0e:e6:6b:92:39:6d:d0:35:4a:9d:8f:d0:78:93:
         88:ee:38:40:36:c6:de:63:69:d6:4a:c5:c1:e4:36:15:6a:00:
         ea:f4:b9:4e:a3:20:ef:fd:b8:68:80:52:ee:cc:f7:c8:7f:f1:
         26:d8:ad:3b:33:6c:b1:f6:de:27:fe:22:4e:4b:2d:d3:56:80:
         24:bb:a4:8c:72:ec:7e:93:a3:8a:33:90:d1:c1:ab:b1:f7:dd:
         66:a2:95:68:d8:23:cd:35:07:b4:7e:39:58:1d:f9:30:8c:ba:
         9c:e4:09:0d:eb:75:7a:4d:00:3c:4a:fe:47:e4:69:a6:98:8d:
         db:58:a8:7e:e3:4a:6a:78:da:bf:42:44:2c:5a:7c:6c:0e:cb:
         07:02:3d:6d:0e:85:cb:73:9d:90:e1:31:c3:d5:42:00:ce:5d:
         fc:c9:d4:be:d5:63:cf:0a:40:79:63:8d:c8:3e:be:e6:8c:c8:
         97:49:aa:7a:9a:99:ca:6f:a7:2d:37:ac:2d:e4:36:34:1d:5b:
         f0:06:70:59:4e:32:ab:a2:46:8c:e0:a7:99:bf:33:83:2e:f8:
         8b:74:40:46:fc:99:6a:cb:14:1b:eb:fd:53:c7:f1:80:71:7c:
         4b:7b:15:c4:0b:bb:4a:bf:ca:3e:65:88:fb:87:28:f3:ba:f0:
         19:07:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:23:47 2026 by rpki-client