Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
File:                     00E626A4A57611EF98285E5FC4F9AE02.roa (raw, json)
Hash identifier:          7+C/2L+WKOdEH1KPhli+JgCKdoROk+TjdXP5dk7JJEE=
Subject key identifier:   C7:AD:53:83:55:93:E0:B2:7B:27:94:6F:DA:21:A3:B6:45:27:00:96
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       026C
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:54:00 +0000
ROA not before:           Fri 07 Aug 2026 02:54:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        203.6.66.0/24 maxlen: 24
                          203.6.68.0/24 maxlen: 24
                          203.6.69.0/24 maxlen: 24
                          203.6.74.0/24 maxlen: 24
                          203.6.76.0/24 maxlen: 24
                          203.6.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Aug  7 02:54:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7548c8-a5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:c1:b2:c3:52:5c:eb:27:dd:34:6e:56:e0:
                    ad:b5:a0:5a:ce:70:7a:25:83:fb:83:b5:1b:8c:9d:
                    c5:7f:6c:f1:60:bf:70:be:b2:a4:b4:30:2f:05:dd:
                    12:86:11:ee:b6:e2:40:b9:32:19:38:3a:9a:e1:c8:
                    fc:e7:9d:98:cd:eb:8e:d9:fe:11:78:3a:5c:4a:34:
                    53:49:71:a4:f9:7e:78:f7:ae:56:9a:8d:c8:83:d3:
                    a4:88:c0:26:61:aa:95:14:36:3b:97:73:38:e7:52:
                    83:95:01:ad:96:b7:78:26:9d:64:0e:96:0b:9f:13:
                    cd:8f:7b:86:21:79:61:c5:28:d1:67:2f:e9:31:a0:
                    84:a3:11:c1:08:94:9a:d9:be:5b:95:b1:81:9a:30:
                    59:f4:a2:26:96:65:91:61:a2:4a:b1:1e:5d:a9:34:
                    8e:d6:74:50:ca:56:23:40:c6:61:60:f8:38:b6:10:
                    a1:d6:c0:30:d8:f7:e0:2e:5b:42:5f:15:db:3d:75:
                    0a:9f:89:45:5f:25:e3:d1:85:f7:1a:9e:49:53:08:
                    29:94:8f:3a:7b:8b:7d:7e:43:9a:42:9c:c4:d4:75:
                    10:fe:c7:8e:73:e5:eb:bb:7f:d5:cb:c4:f0:a9:71:
                    14:e8:f3:0a:8b:a0:8d:ec:5d:bd:37:e3:83:de:ea:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AD:53:83:55:93:E0:B2:7B:27:94:6F:DA:21:A3:B6:45:27:00:96
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.66.0/24
                  203.6.68.0/23
                  203.6.74.0/24
                  203.6.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:5d:9c:08:11:f9:dd:3e:a1:f4:7a:9e:84:42:ae:a8:a5:
         61:7a:f3:7e:fc:3e:4a:51:e1:fc:11:9b:ab:84:4d:e1:0f:72:
         f5:a8:9d:df:71:2e:0b:d2:12:53:6c:4d:d8:8c:53:db:07:98:
         40:ce:e6:b1:3f:59:e6:82:a3:6d:09:01:66:51:31:40:56:66:
         1e:39:55:b0:3b:8d:10:c2:a5:49:95:17:f0:d8:f4:04:43:54:
         06:65:9a:d1:89:01:51:cf:de:29:08:7c:d5:c1:6f:d8:55:8d:
         8b:f7:ce:83:90:53:a4:ee:1b:28:7f:d0:a2:cd:4a:03:ef:5a:
         73:b1:1d:cf:20:2c:f5:da:b5:73:3a:a5:3f:79:43:79:c7:92:
         1c:fb:fb:66:72:2f:39:36:29:ae:77:c4:86:84:bb:44:86:11:
         e1:ca:be:ed:5b:c7:6a:a8:60:ca:1b:52:83:9b:90:96:07:ea:
         9a:72:e3:e4:74:0b:7e:c4:95:72:1a:5f:14:25:ba:28:82:28:
         eb:17:29:f7:d6:56:e4:9c:85:e8:25:18:3a:c6:ce:b2:3e:0f:
         7f:af:ec:ea:79:ce:99:5f:f1:55:ae:26:2e:db:4f:f6:b4:95:
         bd:0c:02:a5:b9:25:e8:5b:e0:05:e0:18:de:80:e1:a3:3b:7c:
         61:eb:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:00:22 2026 by rpki-client