Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
File:                     6C9D67B8607D11F18380FD6980EE528E.roa (raw, json)
Hash identifier:          ETyrui0gZp3PggI9Ew6mkOOOog8nlbDJ8lCJtm1IY7M=
Subject key identifier:   93:D9:A2:86:D1:EF:7D:AA:C3:41:F4:DB:87:6E:DE:80:70:B0:98:79
Certificate issuer:       /CN=A91E01F7/serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
Certificate serial:       02
Authority key identifier: 46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
Signing time:             Fri 05 Jun 2026 01:25:24 +0000
ROA not before:           Fri 05 Jun 2026 01:25:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141198
IP address blocks:        103.156.66.0/23 maxlen: 23
                          103.156.66.0/24 maxlen: 24
                          103.156.67.0/24 maxlen: 24
                          2406:7f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
        Validity
            Not Before: Jun  5 01:25:24 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a222584-231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:bc:0c:4a:b5:55:43:83:31:20:9a:f2:74:
                    c6:c6:1b:a0:43:78:a1:57:86:fb:c7:c5:ac:c0:0f:
                    2a:62:90:43:3a:e5:c6:8e:ac:ca:23:1d:61:71:42:
                    e1:dd:de:a5:01:39:a7:12:95:8f:8a:f1:5d:bc:e0:
                    54:cd:47:4e:32:f2:ce:32:2b:e8:36:ef:bb:63:0a:
                    50:96:76:c0:c4:74:0d:b1:af:04:2c:d8:db:ba:07:
                    50:44:8c:de:ac:fd:91:a5:12:c0:a2:f4:19:7f:7a:
                    fa:c6:72:fa:d4:16:c2:5a:69:c7:bb:50:7b:b2:74:
                    3c:c8:99:ec:ec:f6:03:aa:60:4b:ce:85:b0:87:da:
                    1d:3b:30:82:21:4c:74:0e:fb:a7:8b:4f:4b:fa:51:
                    a0:86:ef:ab:07:04:db:11:b4:04:b2:51:49:7c:7a:
                    69:4e:ac:d4:99:d9:61:f1:de:bd:f3:7f:84:1c:cf:
                    5c:c8:e3:b2:a5:07:03:b7:30:07:c7:91:aa:4c:71:
                    7e:3f:5a:a4:cb:ce:59:0b:08:9e:f9:51:3b:be:5a:
                    ac:59:e3:11:01:4a:71:53:69:64:ea:77:60:a2:c8:
                    d0:42:ca:d5:f2:9e:c9:0c:01:7b:18:50:ad:2c:d4:
                    22:dd:68:9e:2e:9b:da:3f:f5:87:1b:ab:7f:41:47:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:A2:86:D1:EF:7D:AA:C3:41:F4:DB:87:6E:DE:80:70:B0:98:79
            X509v3 Authority Key Identifier:
                keyid:46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.66.0/23
                IPv6:
                  2406:7f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:ab:bd:35:07:ca:3f:93:7a:d7:ed:21:7f:66:c4:34:ae:24:
         31:a6:8f:89:b9:fb:bd:5b:fb:97:18:22:26:a0:ca:c4:83:26:
         b9:4f:b3:20:72:25:46:0a:e7:21:49:ef:31:9d:73:54:68:21:
         89:04:4e:79:b7:a4:8e:aa:3c:b3:24:26:bf:cd:c1:d1:21:76:
         03:78:c5:7c:46:b3:73:c7:72:18:79:bc:54:c2:97:c8:58:14:
         a3:49:ea:be:c0:8d:74:12:af:ba:64:c2:f1:38:72:eb:31:76:
         eb:6e:04:d2:69:a7:17:8c:6a:1c:2c:a0:5f:81:52:da:64:f0:
         c3:bb:7d:54:d1:da:3b:1b:ec:3f:c6:fc:16:80:9e:7b:57:a6:
         83:b7:b2:d7:9d:93:52:4e:8d:5a:2d:7e:bc:2c:92:ba:de:9e:
         6f:e2:98:35:35:9e:f9:54:6c:f4:8d:fa:5f:86:ef:fb:5a:fc:
         7d:f3:f2:05:c4:45:89:16:95:b2:a8:14:65:ca:00:51:a1:81:
         0c:de:c3:ea:39:d1:ef:5f:b8:d7:30:04:0f:79:6a:6a:c4:2b:
         e0:9b:3a:68:bb:16:60:9c:d3:58:95:27:77:d0:f1:45:d9:c6:
         b1:e6:c0:53:5d:e4:14:2a:5b:47:11:ba:6e:2f:b7:f2:d6:c9:
         5e:ca:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:46:23 2026 by rpki-client