Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa
File:                     E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (raw, json)
Hash identifier:          w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=
Subject key identifier:   83:4C:02:4E:C9:D8:1C:6B:B9:71:08:7A:47:07:C7:B3:F1:B2:82:D7
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       3149
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:54:15 +0000
ROA not before:           Wed 30 Apr 2025 15:52:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     40009
IP address blocks:        120.29.192.0/23 maxlen: 23
                          120.29.196.0/24 maxlen: 24
                          120.29.197.0/24 maxlen: 24
                          120.29.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12617 (0x3149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:52:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47d46-0395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:be:48:39:1a:53:50:f6:57:c0:43:9f:a4:
                    c1:73:65:5a:4c:bf:42:57:66:c4:db:80:5f:e4:59:
                    20:2f:89:d9:89:e3:7d:b6:47:19:8a:48:26:7e:4b:
                    8f:61:ce:04:24:d2:c8:2f:75:09:28:53:6e:25:eb:
                    e6:3d:d9:48:46:6c:ac:ba:a1:43:5b:57:a9:b0:b9:
                    0b:d6:59:27:b5:c3:db:eb:02:08:47:3b:05:b4:39:
                    f0:c6:25:f6:6d:00:98:56:b5:f7:3c:04:a0:35:10:
                    81:cc:a1:6f:b1:37:d6:29:7b:1e:a0:ef:5b:ab:77:
                    73:a8:3c:af:ed:84:ff:b8:22:0c:a0:bb:64:a0:e7:
                    17:09:13:43:f7:cd:47:d2:3f:23:2a:21:4b:71:1e:
                    cd:7f:2d:30:db:6f:65:d1:fb:bb:c4:28:cd:9a:39:
                    8b:34:12:41:48:a8:76:fe:d4:71:1f:54:be:82:ed:
                    1c:8a:e3:7d:3f:1d:1b:7e:d9:ec:27:6b:88:8f:4e:
                    aa:85:f1:ef:96:8b:7f:44:4e:e6:95:d7:38:92:9b:
                    46:f5:77:7f:5f:90:51:81:b2:ae:a2:ef:9a:99:ef:
                    0f:43:21:68:af:e9:d4:a9:35:4d:5d:ee:d5:09:c0:
                    6e:87:a6:15:7c:90:01:0f:75:e9:b1:73:17:6e:2f:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:02:4E:C9:D8:1C:6B:B9:71:08:7A:47:07:C7:B3:F1:B2:82:D7
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.192.0/23
                  120.29.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:01:6a:cb:a0:df:a1:9a:87:2c:67:b7:3f:17:90:83:6d:1a:
         97:9d:c6:3e:8c:e5:2b:29:85:54:45:06:bf:79:cb:52:1e:54:
         e9:88:bd:4a:62:51:0b:32:f6:45:ab:39:1a:bb:a1:38:9a:6e:
         0e:34:16:70:09:0c:2e:26:fc:a9:35:67:47:59:d1:ea:61:aa:
         63:2e:86:98:f5:d8:79:de:3f:7c:7d:62:2e:14:04:e9:67:05:
         bd:55:ad:96:6f:aa:f2:00:10:c2:25:21:1b:4b:a1:91:2b:94:
         2a:46:43:56:40:ab:cb:de:95:e5:b6:6a:8c:76:4e:35:cc:f0:
         cf:3e:cb:48:18:da:0b:d7:37:f5:5b:97:21:c4:dd:98:1e:bd:
         ac:b7:33:3c:49:50:44:0a:fc:a6:09:26:8f:8c:5d:78:e3:32:
         a4:00:42:39:a5:0c:6f:38:64:d1:3a:87:57:48:bf:eb:47:aa:
         9a:f7:8c:c3:7e:ad:48:e1:5a:30:23:c5:8b:ce:ca:11:53:35:
         a3:87:e5:37:29:eb:db:b2:e9:bd:e4:2f:e8:c4:36:b6:b6:64:
         4b:28:54:9c:fc:13:ae:4f:00:f8:5b:53:51:12:08:f8:67:8d:
         1d:ee:4b:18:94:1f:9e:73:e7:db:d5:60:14:22:f1:21:7d:9d:
         7a:f9:84:a9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICMUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2Q0Ni0wMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDm+SDkaU1D2V8BDn6TBc2VaTL9CV2bE24Bf5FkgL4nZieN9tkcZikgmfkuP
Yc4EJNLIL3UJKFNuJevmPdlIRmysuqFDW1epsLkL1lkntcPb6wIIRzsFtDnwxiX2
bQCYVrX3PASgNRCBzKFvsTfWKXseoO9bq3dzqDyv7YT/uCIMoLtkoOcXCRND981H
0j8jKiFLcR7Nfy0w229l0fu7xCjNmjmLNBJBSKh2/tRxH1S+gu0ciuN9Px0bftns
J2uIj06qhfHvlot/RE7mldc4kptG9Xd/X5BRgbKuou+ame8PQyFor+nUqTVNXe7V
CcBuh6YVfJABD3XpsXMXbi8FOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFINMAk7J
2BxruXEIekcHx7PxsoLXMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvRTZCNkJDMEFF
MDJFMTFFQUExNkVBQTU5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBeB3AAwQCeB3EMA0GCSqGSIb3DQEBCwUAA4IBAQAAAWrLoN+hmocs
Z7c/F5CDbRqXncY+jOUrKYVURQa/ectSHlTpiL1KYlELMvZFqzkau6E4mm4ONBZw
CQwuJvypNWdHWdHqYapjLoaY9dh53j98fWIuFATpZwW9Va2Wb6ryABDCJSEbS6GR
K5QqRkNWQKvL3pXltmqMdk41zPDPPstIGNoL1zf1W5chxN2YHr2stzM8SVBECvym
CSaPjF144zKkAEI5pQxvOGTROodXSL/rR6qa94zDfq1I4VowI8WLzsoRUzWjh+U3
Kevbsum95C/oxDa2tmRLKFSc/BOuTwD4W1NREgj4Z40d7ksYlB+ec+fb1WAUIvEh
fZ16+YSp
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:51 2026 by rpki-client