Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/6C10D5744A0611F19EF0673DC3833773.roa
File:                     6C10D5744A0611F19EF0673DC3833773.roa (raw, json)
Hash identifier:          rDSLYpi4yqRvgfgIpZgHd4oeIvbMu/Y+8PXxGH15jyE=
Subject key identifier:   40:C3:D3:5F:6D:8C:D3:F9:B7:AA:F1:FE:CB:E0:7B:00:96:6D:A5:AB
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       01E4
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/6C10D5744A0611F19EF0673DC3833773.roa
Signing time:             Fri 29 May 2026 04:35:06 +0000
ROA not before:           Fri 29 May 2026 04:35:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38207
IP address blocks:        110.172.16.0/21 maxlen: 24
                          219.90.96.0/20 maxlen: 24
                          2402:4300::/32 maxlen: 32
                          2402:4300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: May 29 04:35:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a191779-a5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:9b:82:96:70:91:6c:a8:6c:4b:2e:36:d6:
                    7d:0a:74:30:44:c9:b4:dd:c1:f9:5a:a9:3e:88:9f:
                    fa:c8:88:76:5f:1a:ef:fa:1d:45:0e:c0:2f:f3:dd:
                    22:ec:63:fc:9f:f9:da:bd:1c:05:62:0c:4e:e8:51:
                    f8:27:85:9b:9b:a5:de:4a:67:37:9c:7b:32:5e:7d:
                    30:c4:dd:2c:ae:8b:3c:23:01:c0:fc:eb:9b:36:86:
                    4d:94:2b:c4:bd:48:94:1e:08:be:e4:45:9b:c2:6a:
                    73:1a:db:e4:8e:2c:76:35:ca:8e:37:30:97:03:c0:
                    26:cb:9d:7f:4d:6f:f3:bc:c4:20:07:7a:e5:9e:a5:
                    05:00:ce:12:b1:fb:04:eb:22:94:dc:ec:d7:cf:a4:
                    d5:5f:3a:7d:cb:e9:cc:2d:48:27:cc:82:01:bf:fd:
                    ae:b8:d4:30:0d:6e:3b:78:79:68:0b:72:8e:eb:16:
                    18:9b:9b:7d:5d:35:06:5d:f4:42:0a:ce:fd:a8:e2:
                    6b:89:eb:30:f9:c1:cd:b6:c2:80:e7:f1:b0:1b:28:
                    f0:9b:c2:d6:99:64:9d:89:dd:49:05:8a:28:fc:ce:
                    72:10:4d:3f:fe:e3:ee:4e:dd:88:7c:ee:22:d9:1d:
                    cf:ba:fc:61:bc:79:25:54:e6:5c:8a:5c:ab:a2:be:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:D3:5F:6D:8C:D3:F9:B7:AA:F1:FE:CB:E0:7B:00:96:6D:A5:AB
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/6C10D5744A0611F19EF0673DC3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.16.0/21
                  219.90.96.0/20
                IPv6:
                  2402:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:67:a2:60:4b:7e:41:bb:99:ec:19:20:f8:c2:50:a7:fd:49:
         9b:7c:e5:ef:b4:d1:5c:a4:85:d2:0c:e6:48:52:4f:2e:b0:a8:
         c1:93:a3:ec:d7:7d:90:65:86:e3:98:da:75:12:2a:71:10:32:
         bd:7b:b5:73:09:b3:2d:00:4a:3f:11:13:6b:89:cd:ac:29:5c:
         1f:dc:75:e8:8c:f2:eb:92:5a:e1:57:3f:58:a7:25:bc:41:1d:
         35:47:fb:72:fc:dc:ad:6f:9c:4b:0d:27:56:07:60:80:6f:52:
         31:e2:92:31:2d:53:1e:0e:21:73:31:9d:00:49:82:ee:81:f5:
         58:fc:95:53:a1:a6:1c:d8:4e:60:b3:de:8a:b5:aa:c1:66:af:
         47:73:75:ef:14:60:dd:25:fe:da:65:6d:53:d7:48:b0:e6:9a:
         1a:f4:cd:89:d7:aa:de:2e:83:98:fd:65:86:08:57:b2:d3:cb:
         89:30:41:23:5b:98:0e:5b:57:6c:4a:c9:71:2b:9f:e7:14:cb:
         d3:80:f7:e3:86:5b:5b:d8:e7:7c:4a:31:5b:77:71:aa:77:57:
         2c:ff:93:25:20:67:9e:a2:71:3b:11:b6:c1:a4:9f:63:73:56:
         16:0e:46:7b:a2:8b:1e:62:b6:c5:3b:e8:e6:ad:2b:e9:98:d5:
         e6:a7:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:59 2026 by rpki-client