Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa
File:                     C6D2655A58CE11ECB7F30755C4F9AE02.roa (raw, json)
Hash identifier:          YCce8tgGIDPMHY1UAJx0Vt+V35//ZESj5TUbI8mggBI=
Subject key identifier:   9F:7A:65:03:E5:E5:4F:09:34:DF:48:F7:FE:42:27:06:70:A2:15:AB
Certificate issuer:       /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Certificate serial:       04D4
Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 10:20:13 +0000
ROA not before:           Thu 05 Feb 2026 10:20:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     1299
IP address blocks:        202.163.0.0/19 maxlen: 19
                          2407:1600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl
                          rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
        Validity
            Not Before: Feb  5 10:20:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69846edd-4ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:14:8e:8f:5a:8d:62:ce:63:1f:06:bf:26:
                    81:f7:9c:0d:50:df:b3:ad:32:dd:c8:54:ae:7c:91:
                    70:ab:78:3b:71:39:1e:e8:48:71:cc:df:ee:a2:b3:
                    2f:9d:e8:24:d9:ac:5b:ec:11:9c:28:df:a3:1e:41:
                    ef:cd:ca:61:b0:30:03:a8:5a:d5:ba:3e:63:e5:14:
                    a1:0c:bf:cb:2c:9c:cd:54:56:96:ef:c3:b9:36:ab:
                    5b:4f:a7:9b:ab:59:e3:1f:23:94:39:0d:87:26:22:
                    eb:65:a5:9b:47:f3:1d:b6:2f:05:59:a3:60:02:4f:
                    79:e4:f7:34:6f:d5:24:2c:0a:f8:c8:4b:b6:8f:f2:
                    f6:3b:93:c3:e8:f0:e7:bc:95:ca:76:f8:2a:a7:bd:
                    1a:0d:ac:e3:3c:f7:db:b0:40:11:d8:06:09:da:c2:
                    fa:2d:1a:28:c7:99:b7:e4:e1:49:31:be:8c:24:7a:
                    c1:a4:fe:23:67:f4:99:1f:c4:e4:83:69:dd:ac:47:
                    b6:ff:61:81:4f:55:c0:37:2b:f4:39:72:c2:68:ae:
                    85:43:f3:16:3b:0b:d2:a7:b8:b9:31:46:a9:07:d1:
                    28:8c:bc:2d:4d:21:89:93:be:0f:2e:cf:a1:ac:23:
                    6d:ee:97:5c:ff:71:77:13:04:92:4e:a1:b0:0d:08:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:65:03:E5:E5:4F:09:34:DF:48:F7:FE:42:27:06:70:A2:15:AB
            X509v3 Authority Key Identifier:
                keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.163.0.0/19
                IPv6:
                  2407:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:59:3c:0d:7b:1e:6f:e6:00:2c:d7:8d:7c:4e:ed:15:26:
         bf:32:cc:9a:16:01:94:d7:e8:69:81:91:a0:56:8d:e7:70:11:
         d3:a6:1e:e3:6d:ae:69:c5:00:77:c3:ea:5e:f7:09:a6:52:03:
         b9:4b:a9:86:5b:7d:c2:be:99:af:51:67:a3:97:af:ed:f7:a2:
         b6:a3:d3:f9:5b:e7:7f:88:48:08:1a:e2:83:a5:30:57:b3:5c:
         d5:48:14:2d:87:50:b5:c8:e6:f3:1a:02:24:2a:4a:01:f1:33:
         81:eb:5f:25:f5:28:c3:16:97:09:2c:01:b6:37:d2:05:18:c8:
         b9:90:16:f3:67:f8:90:df:ff:b4:87:bb:f5:1d:d7:8c:6d:14:
         10:3d:8e:0c:25:cd:db:43:a4:98:4f:77:70:bf:e1:f7:11:74:
         32:37:a6:4c:a5:c0:eb:87:07:12:55:b5:49:15:18:66:89:9d:
         67:9e:f5:1a:93:3c:31:8b:93:93:f3:df:3d:c7:8a:e9:7c:ac:
         29:f8:46:01:f3:ee:ef:16:71:79:31:f4:5c:ac:a1:b4:9f:34:
         2a:92:a8:17:af:64:39:50:98:8f:4c:80:11:55:17:69:68:38:
         4a:b7:f2:8c:69:c1:b2:ad:db:50:9f:ae:48:be:7c:5c:15:2f:
         b6:ad:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:30:29 2026 by rpki-client