Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6AE0DC4E1AC711F191E10968393D8C67.roa
File:                     6AE0DC4E1AC711F191E10968393D8C67.roa (raw, json)
Hash identifier:          EIquPTmzhNm/EgMF6y+odwoHMOmuWe10Hl5flxr8E0U=
Subject key identifier:   D8:FD:8D:CB:42:71:F4:84:CC:AB:29:6F:2F:AA:BD:06:4F:B9:F2:9A
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       357F
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6AE0DC4E1AC711F191E10968393D8C67.roa
Signing time:             Tue 07 Apr 2026 03:30:26 +0000
ROA not before:           Tue 07 Apr 2026 03:30:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        101.0.16.0/24 maxlen: 24
                          101.0.17.0/24 maxlen: 24
                          101.0.18.0/24 maxlen: 24
                          101.0.19.0/24 maxlen: 24
                          103.46.205.0/24 maxlen: 24
                          103.46.206.0/24 maxlen: 24
                          103.46.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13695 (0x357f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Apr  7 03:30:26 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69d47a52-9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:e6:22:e1:64:79:36:71:b7:5b:88:59:f5:
                    0a:9b:c8:30:5a:95:cc:e7:aa:13:49:11:d8:a3:8f:
                    25:48:b6:aa:df:8a:ec:77:b6:86:8d:ff:6c:5b:6c:
                    98:99:a5:bc:c4:85:e8:27:f3:ef:e9:ef:69:89:99:
                    3c:4d:b8:8e:f9:ad:c9:06:76:8f:da:4d:c1:84:9c:
                    5b:7c:3b:31:de:47:0c:35:9e:11:b8:41:a9:09:5a:
                    c1:aa:4e:36:6b:84:bd:e1:6b:82:01:49:f1:0a:2d:
                    fd:31:88:db:a2:4c:a2:8d:0b:71:a0:e3:1c:54:82:
                    6b:d8:59:97:6b:2d:07:3a:09:6e:41:9e:6b:22:50:
                    5e:98:29:af:af:97:b5:88:bc:10:11:66:ba:3a:e5:
                    b8:96:33:13:83:fa:91:36:47:99:eb:2b:50:00:c1:
                    8c:19:02:08:f5:26:42:45:2a:72:18:79:5c:e6:7e:
                    17:db:fc:72:cc:d4:ae:02:51:81:33:99:43:76:cf:
                    52:0d:ab:f2:00:43:1f:a4:71:69:35:d2:63:ce:46:
                    da:19:af:dd:e1:14:cc:84:5f:33:ee:4f:24:06:d2:
                    42:6e:31:d1:f1:5f:ef:38:59:ad:8b:a4:3b:34:10:
                    d8:91:94:4e:da:96:8c:b5:e9:ae:5e:dc:a0:6f:37:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:8D:CB:42:71:F4:84:CC:AB:29:6F:2F:AA:BD:06:4F:B9:F2:9A
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/6AE0DC4E1AC711F191E10968393D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.16.0/22
                  103.46.205.0-103.46.207.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:99:82:11:b1:8d:8e:ac:d0:0d:3d:f2:dc:96:65:8f:c8:
         7d:69:a3:9e:c1:ec:d8:20:a6:ac:11:36:65:37:58:eb:15:d9:
         1a:46:b4:ac:ca:32:05:eb:5d:d4:25:ae:85:18:12:fa:32:76:
         c7:78:f0:c7:ca:88:c5:e2:0f:c3:6b:0d:72:a2:73:81:23:12:
         94:ad:f9:93:7a:58:e6:89:92:f5:4c:86:a1:a4:93:cd:19:10:
         9f:0b:98:4e:4c:d6:55:29:4d:4f:b4:f0:21:e5:92:ae:27:d7:
         70:32:73:40:65:01:d0:2e:3e:52:38:e8:6b:a3:c8:b9:d5:f0:
         b8:3f:71:b6:cc:a4:f7:7f:f4:f7:8e:60:c5:a4:95:c3:33:88:
         f7:d5:33:35:cb:10:17:b5:42:cd:36:80:4f:48:7d:e4:f0:ea:
         ce:b5:b7:cb:92:69:c0:cb:10:a9:1c:9f:cc:1c:7b:ef:3a:7d:
         5f:a0:21:59:67:28:9f:5a:4d:ef:f3:25:4d:68:9b:15:98:ad:
         8a:9c:fc:ee:b3:7a:2e:ea:06:3b:9a:37:a5:4d:ff:e8:79:91:
         57:55:9a:53:7c:5b:69:78:fb:05:85:bf:27:41:7f:68:a0:4b:
         79:fc:b4:4b:ca:1c:da:20:ea:ae:dd:43:7f:a8:8f:21:9b:e2:
         25:40:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:24 2026 by rpki-client