Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa
File:                     C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (raw, json)
Hash identifier:          ACwMHQJQ4E23jnEheit3IBhH0p1Mz9Y2fP++jvIfqGM=
Subject key identifier:   AB:23:79:49:FA:64:AC:B7:AF:6A:E1:E7:2F:66:30:57:32:ED:51:05
Certificate issuer:       /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Certificate serial:       0118
Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:44:50 +0000
ROA not before:           Mon 07 Jul 2025 06:42:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132049
IP address blocks:        103.187.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
                          rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
        Validity
            Not Before: Jul  7 06:42:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59452-57b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:52:49:6a:1e:4b:f1:8b:4f:30:11:03:36:
                    6d:4e:98:fc:4f:86:3c:58:92:81:93:d2:ba:79:b6:
                    34:3e:44:23:e4:f9:2a:18:24:66:fa:59:d8:63:96:
                    c9:0f:68:16:1a:74:5d:46:95:29:d3:bc:d7:c9:27:
                    89:2d:34:3f:ab:1e:4f:3b:60:22:50:bd:6c:bc:95:
                    91:8f:37:a7:d7:4f:1d:fc:85:dd:3e:e4:fa:51:9c:
                    24:bf:51:01:a6:0c:40:86:e1:b2:99:39:99:61:81:
                    a2:be:84:bc:dc:fd:d2:d8:98:46:59:a6:b1:83:0d:
                    89:36:77:0a:30:b6:5c:0f:c5:fa:0c:3a:78:ce:c7:
                    16:db:c7:3d:c4:be:d9:88:c6:45:60:0a:05:0b:55:
                    ab:e0:81:ca:ac:62:ab:07:32:b3:b8:de:c0:ce:4a:
                    1c:70:b1:e5:6f:1f:5f:55:2f:fc:ef:35:a8:eb:a5:
                    d1:79:e9:fc:ee:89:c6:7e:a6:50:4a:f3:e4:e0:c2:
                    0d:36:33:05:98:90:d8:a7:df:96:08:c9:e5:45:cd:
                    14:b3:27:36:a9:dc:3d:5e:e5:cc:2c:14:ff:69:7f:
                    41:21:80:67:d2:c6:71:1a:38:51:18:d0:45:2e:9a:
                    ef:dd:84:cb:3c:6b:45:e7:ea:39:fd:75:87:b1:7a:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:23:79:49:FA:64:AC:B7:AF:6A:E1:E7:2F:66:30:57:32:ED:51:05
            X509v3 Authority Key Identifier:
                keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/C6EAD83876DA11EFAE91CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:57:0d:4f:68:3f:64:67:fb:e7:2f:02:46:0b:12:38:d1:a0:
         25:9c:15:68:97:0a:78:59:51:db:b7:da:9e:af:88:6c:eb:06:
         8b:d8:7e:41:d0:11:a2:c5:ba:48:74:3f:f2:17:da:30:28:3f:
         80:bb:88:49:c1:40:90:16:73:3e:3d:23:8d:8a:81:b6:cd:de:
         66:9a:72:e8:8a:16:af:71:42:47:bf:71:9b:fc:19:64:62:1f:
         9f:44:93:c1:30:a6:2a:f0:a7:4a:42:03:16:49:75:b5:cf:42:
         bc:ab:aa:46:ea:2d:d2:fe:18:30:72:13:80:44:81:1e:fe:0f:
         45:32:13:59:1e:dc:b8:9c:d0:2c:5c:9d:76:fe:33:1b:c4:a4:
         21:f4:0a:eb:03:45:4a:05:0d:5c:0a:d3:6e:86:df:a1:81:0f:
         39:aa:24:f9:c5:fb:d1:ec:c0:0a:e5:be:7c:a6:74:ae:64:f9:
         bb:2c:12:5a:0b:f6:fc:be:69:80:bf:f3:e3:f9:d0:b5:71:46:
         de:6b:89:58:b9:a5:90:72:24:f6:d2:33:71:40:ac:83:ae:f4:
         1b:fc:10:3f:28:e1:f7:ba:32:e5:28:de:e1:f6:cf:b2:6c:40:
         8e:c4:3d:57:c9:07:11:02:52:87:2d:70:83:79:5b:cf:b6:1b:
         a1:ba:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:04 2026 by rpki-client