Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa
File:                     694EC58664AE11F189DF701D9347A888.roa (raw, json)
Hash identifier:          uf1w2K+QavHMr69P1XIOXrrKK1vFbrU3GZGJb7MtqTI=
Subject key identifier:   07:CE:DB:1F:5A:15:87:C3:E6:2B:CB:13:26:62:73:6F:54:63:65:49
Certificate issuer:       /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial:       08
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa
Signing time:             Wed 10 Jun 2026 09:27:28 +0000
ROA not before:           Wed 10 Jun 2026 09:27:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     10219
IP address blocks:        202.133.76.0/23 maxlen: 24
                          2402:2720::/32 maxlen: 32
                          2402:2720::/36 maxlen: 36
                          2402:2720:1000::/36 maxlen: 36
                          2402:2720:2000::/36 maxlen: 36
                          2402:2720:3000::/36 maxlen: 36
                          2402:2720:4000::/36 maxlen: 36
                          2402:2720:5000::/36 maxlen: 36
                          2402:2720:6000::/36 maxlen: 36
                          2402:2720:7000::/36 maxlen: 36
                          2402:2720:8000::/36 maxlen: 36
                          2402:2720:9000::/36 maxlen: 36
                          2402:2720:a000::/36 maxlen: 36
                          2402:2720:b000::/36 maxlen: 36
                          2402:2720:c000::/36 maxlen: 36
                          2402:2720:d000::/36 maxlen: 36
                          2402:2720:e000::/36 maxlen: 36
                          2402:2720:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
        Validity
            Not Before: Jun 10 09:27:28 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a292e00-e948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:6d:35:db:3d:2d:c9:75:61:c3:26:04:50:
                    05:73:88:76:c3:cd:cc:69:ab:61:3c:0e:8d:50:67:
                    b4:61:d2:d6:1c:17:a0:d8:ba:f6:66:78:5e:d7:36:
                    51:39:8b:c1:74:3b:81:06:55:d5:0d:a6:8a:c2:f8:
                    e6:2d:9a:5f:56:ec:74:06:67:8f:2c:0a:69:45:ab:
                    6f:03:25:fd:9a:b3:a2:e5:b0:51:6a:a4:75:74:ad:
                    ed:ec:db:a2:84:b0:02:05:0c:b1:27:4e:86:b4:8a:
                    9f:79:51:ee:f2:be:4d:dd:1b:06:1c:c8:58:41:b4:
                    21:e1:a7:bc:12:9e:7d:1e:b8:0c:48:1d:cf:e8:23:
                    c2:05:85:29:51:75:49:a8:00:07:b6:f0:50:2d:87:
                    11:86:ec:a0:a3:b3:30:eb:a7:13:2c:5d:b3:a1:55:
                    df:77:6b:82:be:a8:10:82:e7:a9:99:19:c6:21:20:
                    f5:bb:08:1c:e7:60:57:7d:a7:c9:02:3b:68:83:46:
                    a6:be:84:7e:4c:6d:96:58:e5:fa:e9:5b:65:e1:0a:
                    ef:9c:a0:f7:58:d7:23:bc:dd:e2:88:e2:d2:35:41:
                    41:17:f8:53:b8:92:e2:b5:54:3b:1c:91:9f:9c:11:
                    50:29:35:4c:fd:f5:dc:70:96:9c:0a:1a:91:51:30:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CE:DB:1F:5A:15:87:C3:E6:2B:CB:13:26:62:73:6F:54:63:65:49
            X509v3 Authority Key Identifier:
                keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.76.0/23
                IPv6:
                  2402:2720::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:01:96:23:d5:95:91:e2:da:94:4f:81:0a:4a:97:e1:1d:ea:
         9d:f3:25:71:2d:85:cf:b7:33:44:c9:cf:8a:be:90:5e:dd:39:
         7e:e2:a0:48:6b:67:75:de:91:39:d9:4e:e5:2f:de:10:3a:cb:
         aa:5a:0b:54:76:0f:74:bc:f0:f2:7f:9a:11:7d:5b:e4:be:1f:
         e8:04:07:9f:16:17:28:78:88:09:08:00:de:7c:e2:4a:07:06:
         f0:dd:d9:e4:14:0c:12:9d:70:fb:f8:b0:a1:3d:ab:57:90:2b:
         1a:39:78:06:50:49:53:4b:b7:6a:41:d5:41:79:e7:e8:14:63:
         da:18:1e:de:ae:82:10:f9:37:fa:62:0c:4d:aa:97:af:8a:f5:
         19:b7:22:70:7f:c5:0b:b1:b4:88:72:27:b7:e3:9d:f8:48:23:
         4b:0e:27:4e:bb:7a:0a:ff:d5:c5:88:a8:22:8c:51:0e:79:76:
         b5:4b:40:50:69:e8:23:a3:e3:4f:6f:e5:25:b8:5d:65:d0:50:
         4d:9e:77:22:81:80:3e:a6:46:cb:59:28:35:33:88:88:00:90:
         02:e5:1c:bc:2e:81:11:2f:74:41:1a:5b:d7:09:6d:9b:c6:96:
         41:0f:b0:1c:18:80:4e:fd:e6:37:33:60:31:9c:21:9b:48:82:
         92:25:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:25:57 2026 by rpki-client