Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa
File:                     C6E2CBD4558011EDA4773D7FC4F9AE02.roa (raw, json)
Hash identifier:          /Dqt2HwM0BcWGAoWSpStXJi+r1CLDF1wY9noSpki7qg=
Subject key identifier:   B8:48:24:93:D4:95:A0:E3:91:B5:00:6E:58:EE:00:10:4F:1F:05:BC
Certificate issuer:       /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Certificate serial:       0638
Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:15:54 +0000
ROA not before:           Wed 04 Feb 2026 22:19:26 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141468
IP address blocks:        156.16.0.0/16 maxlen: 16
                          158.40.0.0/16 maxlen: 17
                          158.40.0.0/24 maxlen: 24
                          158.40.1.0/24 maxlen: 24
                          158.40.2.0/23 maxlen: 24
                          158.40.4.0/23 maxlen: 24
                          158.40.6.0/23 maxlen: 24
                          158.40.8.0/23 maxlen: 24
                          158.40.10.0/23 maxlen: 23
                          158.40.12.0/22 maxlen: 22
                          158.40.16.0/20 maxlen: 20
                          158.40.32.0/19 maxlen: 19
                          158.40.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
                          rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
        Validity
            Not Before: Feb  4 22:19:26 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44a1a-f55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:a9:bd:d5:5b:bd:80:f7:cd:3d:7d:5b:38:
                    5d:31:d4:4e:79:e5:db:8e:8f:f6:86:26:05:79:de:
                    67:09:9f:fb:42:10:9a:94:fd:7a:35:f9:f3:73:fd:
                    53:08:f5:6e:5c:c1:8a:5b:73:1b:4d:da:22:1d:e4:
                    50:4a:14:41:bc:de:21:2b:87:98:46:89:c4:d2:4f:
                    80:6b:70:ad:97:7f:6c:a5:31:b0:c9:c2:50:4b:5c:
                    5f:43:fa:87:10:93:b6:90:f4:27:94:3d:87:9a:02:
                    60:b6:df:53:53:11:14:ce:1b:81:a5:40:61:7f:ef:
                    6c:08:9d:e9:5e:62:67:21:79:37:73:35:3c:fd:32:
                    8d:2a:13:d3:70:6c:b4:98:69:b1:3b:6c:1d:3b:d0:
                    fd:5b:71:bc:af:a7:69:bd:96:60:8f:f5:8b:01:db:
                    ff:f6:f6:a6:d5:9e:95:7b:ce:51:ce:4f:9a:65:aa:
                    8a:f9:01:4d:53:b9:00:21:eb:85:84:3e:f8:c2:e6:
                    9b:bd:d9:48:e3:36:41:22:4e:c0:4c:03:87:89:e8:
                    93:92:bb:7c:76:d3:a3:96:6a:6a:0a:92:be:cb:a1:
                    25:d9:45:9c:63:57:14:5c:72:db:a6:de:1f:6f:80:
                    cf:c2:53:c7:c2:88:18:1a:1b:73:fe:84:2a:92:c1:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:24:93:D4:95:A0:E3:91:B5:00:6E:58:EE:00:10:4F:1F:05:BC
            X509v3 Authority Key Identifier:
                keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.16.0.0/16
                  158.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:07:e6:b3:11:6f:23:75:a2:8c:af:34:48:ab:f3:de:33:b9:
         87:0c:45:2f:a2:e9:ce:c7:5a:e4:de:87:3d:b6:16:ff:0a:23:
         cb:81:79:fe:af:53:2b:4e:f9:84:07:39:c4:0b:4f:61:c6:0e:
         bd:5b:d5:f4:bf:c7:38:40:dc:f3:72:50:6b:7d:ec:5a:47:90:
         98:c2:0c:30:80:79:de:20:a7:b8:b3:b8:22:1a:92:36:c2:ae:
         fb:18:f3:1e:f2:b1:7d:a5:8f:3d:b1:e1:72:ee:f6:85:ce:35:
         69:9a:36:ff:6a:02:49:1e:d6:d8:87:8b:99:84:99:77:37:51:
         3a:7d:81:6f:0b:d4:e4:9e:9b:db:90:c2:55:1c:b2:b5:aa:70:
         75:19:b6:3a:36:dd:af:f1:a3:cd:24:47:a7:fc:e7:41:20:92:
         e3:01:63:96:fa:cb:f5:de:e1:7b:60:cd:93:23:4b:56:e2:f2:
         d5:b3:72:5a:75:d9:a0:e9:be:ba:70:52:d6:47:17:72:b5:09:
         e4:b6:48:f6:b7:21:ee:95:69:e9:51:12:32:5f:67:dd:de:06:
         72:ce:44:ff:e9:66:f6:1d:bc:56:23:84:da:29:74:8c:ab:dc:
         03:c0:18:4a:1d:65:90:73:13:61:c6:b9:19:b6:11:0d:d8:c0:
         34:7c:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:49 2026 by rpki-client