Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa
File:                     6993B4CCD43B11EDA821F80DC4F9AE02.roa (raw, json)
Hash identifier:          Xk3DoqygD1m1hjIgA00V9juY4iH7z8jLqrYLiGkjieQ=
Subject key identifier:   D4:AB:97:4D:1B:EE:6D:49:21:E0:BD:2B:7E:42:2C:95:2A:75:AE:90
Certificate issuer:       /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
Certificate serial:       0293
Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:34:35 +0000
ROA not before:           Thu 09 Apr 2026 02:34:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149634
IP address blocks:        45.114.160.0/22 maxlen: 24
                          103.54.112.0/22 maxlen: 24
                          103.183.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl
                          rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
        Validity
            Not Before: Apr  9 02:34:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d7103b-cd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:7b:9a:01:4a:b4:17:d3:06:a0:35:ab:7e:
                    0a:2b:c1:e9:0f:1f:1c:1b:ca:cb:4c:1e:76:42:a0:
                    a3:5d:bc:7a:c8:d9:f8:6a:53:92:bf:ba:db:60:3d:
                    5c:16:9d:6d:6c:da:91:28:83:6a:b6:f9:99:6a:2b:
                    85:22:83:b2:36:06:39:b4:6b:4d:66:fe:00:80:9d:
                    03:94:d3:dd:72:fa:3b:61:4f:ba:d4:1b:68:f0:46:
                    bd:63:f3:91:74:f7:27:b2:7b:84:7c:d5:f4:4a:75:
                    cd:02:6b:c8:90:fd:1f:9f:ac:6d:1f:5f:c9:9f:73:
                    56:05:26:10:03:43:cb:a7:71:90:a8:d9:73:2d:55:
                    4e:15:1b:65:68:4d:fe:ee:4a:ff:b1:c3:75:1b:d1:
                    37:1d:a7:6f:13:ab:71:ad:45:e9:64:b2:35:7d:b5:
                    9d:53:3c:fc:65:35:5c:4e:be:07:bb:51:fa:b3:54:
                    f8:b8:da:6c:21:2c:40:69:c6:4a:06:df:b2:24:c3:
                    b8:8a:9c:1f:f1:93:10:34:d1:d6:a3:3f:ba:da:58:
                    ab:0a:46:39:ab:29:cc:ee:f4:9b:a5:53:db:dd:8d:
                    28:04:2d:a7:65:83:7d:2c:d7:e9:91:a0:92:62:1a:
                    8a:4f:98:22:14:7a:b6:53:31:be:64:61:b1:fa:9d:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:97:4D:1B:EE:6D:49:21:E0:BD:2B:7E:42:2C:95:2A:75:AE:90
            X509v3 Authority Key Identifier:
                keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.160.0/22
                  103.54.112.0/22
                  103.183.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:8d:c1:86:01:7b:e5:44:81:85:6f:50:78:51:71:4b:eb:c4:
         a1:43:66:d9:19:fd:bd:36:3e:28:74:ae:5e:c5:d1:4d:25:69:
         bc:16:90:0b:7a:2e:4f:f7:24:bf:46:c0:0b:2b:0c:54:70:be:
         c9:c2:7b:50:f4:71:f0:8c:b1:96:57:2e:fd:71:63:d5:6a:e9:
         96:06:95:55:54:24:f6:5a:b6:e2:77:da:67:04:41:c0:d5:58:
         22:c3:15:43:a0:60:99:f8:44:05:7f:7f:ba:8a:15:a0:6a:e5:
         3d:99:3e:4a:e5:63:19:79:f7:e7:08:2d:52:ec:fc:92:f6:15:
         b9:c0:25:07:99:bb:8c:78:2e:ef:33:cf:72:1f:4e:c4:e8:a2:
         ce:b0:82:12:39:46:1e:11:93:34:11:9f:03:82:7d:19:a5:11:
         fc:98:0a:df:50:e3:cd:9c:e9:b7:c6:08:35:21:18:06:b0:cf:
         1b:33:48:be:4a:e3:94:c4:86:cd:cc:e2:4c:20:22:9a:a6:d7:
         5d:7a:53:9e:b7:15:87:dc:09:a5:6e:44:bd:ae:0f:25:90:ac:
         22:7e:80:f7:7c:be:79:5f:be:e9:bd:86:db:6b:e9:1a:9f:cb:
         6c:30:69:cc:74:b4:98:9e:7e:80:e7:6a:b0:55:57:6e:06:ca:
         7a:0b:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:56:05 2026 by rpki-client