Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
File:                     6C9D67B8607D11F18380FD6980EE528E.roa (raw, json)
Hash identifier:          a6VTLfd8CZcr69PcntFmhHlzKBovrVN6n3VnwfNJDk4=
Subject key identifier:   EB:9D:E9:58:D6:21:85:66:01:71:3E:6F:CF:BD:41:64:B1:29:4B:EB
Certificate issuer:       /CN=A91E01F7/serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
Certificate serial:       1D
Authority key identifier: 46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
Signing time:             Sun 26 Jul 2026 17:14:28 +0000
ROA not before:           Sun 26 Jul 2026 17:14:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141198
IP address blocks:        103.156.66.0/23 maxlen: 23
                          103.156.66.0/24 maxlen: 24
                          103.156.67.0/24 maxlen: 24
                          2406:7f40::/32 maxlen: 32
                          2406:7f40::/33 maxlen: 36
                          2406:7f40::/40 maxlen: 40
                          2406:7f40:100::/40 maxlen: 40
                          2406:7f40:200::/40 maxlen: 40
                          2406:7f40:300::/40 maxlen: 40
                          2406:7f40:400::/40 maxlen: 40
                          2406:7f40:8000::/33 maxlen: 34
                          2406:7f40:8000::/34 maxlen: 36
                          2406:7f40:8000::/40 maxlen: 40
                          2406:7f40:8100::/40 maxlen: 40
                          2406:7f40:8200::/40 maxlen: 40
                          2406:7f40:8300::/40 maxlen: 40
                          2406:7f40:8400::/40 maxlen: 40
                          2406:7f40:c000::/36 maxlen: 36
                          2406:7f40:d000::/36 maxlen: 36
                          2406:7f40:e000::/35 maxlen: 35
                          2406:7f40:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
        Validity
            Not Before: Jul 26 17:14:28 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a664074-375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:10:5d:be:e7:15:c9:98:79:41:c9:04:8d:
                    03:33:26:8b:ff:c1:b9:8b:a5:0c:02:0c:9a:4e:10:
                    4e:2d:d5:b8:8b:f1:8a:32:9c:e6:e7:7b:c6:7c:9d:
                    8d:e8:d8:75:46:fa:76:42:9d:02:d1:5c:60:2d:1f:
                    de:fd:8f:4f:c3:06:f0:1f:ce:f8:52:2c:b0:12:08:
                    bc:26:31:39:40:b2:94:50:22:70:36:44:2a:9a:6e:
                    be:91:ab:29:7b:0f:15:b7:05:7b:3e:f2:fb:42:4c:
                    b7:59:ef:9a:7e:de:29:83:a5:d4:0b:4a:c8:36:e2:
                    71:d7:ec:75:74:c5:ac:d2:3d:37:76:7f:db:d9:97:
                    41:b5:6f:28:8f:0a:cc:59:08:d6:1f:9e:2f:4d:c5:
                    3f:6f:d9:bc:78:eb:c9:cb:1b:e0:0f:02:fd:e0:d8:
                    79:48:69:62:b1:be:39:72:77:95:f1:54:cb:ef:eb:
                    d2:d2:42:74:e5:bf:c9:a8:2c:e5:7d:0c:49:7d:83:
                    6f:bb:6a:30:c9:4e:38:41:d9:d9:26:eb:15:06:ad:
                    3d:51:e1:84:ff:a3:72:29:48:ed:17:b3:f0:f3:b3:
                    7d:95:29:c2:55:ca:d5:ae:a6:18:34:63:d9:fd:12:
                    af:6f:ef:82:43:93:6b:6f:78:14:c5:4b:72:a9:1d:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9D:E9:58:D6:21:85:66:01:71:3E:6F:CF:BD:41:64:B1:29:4B:EB
            X509v3 Authority Key Identifier:
                keyid:46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.66.0/23
                IPv6:
                  2406:7f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:5d:c0:ab:62:c8:76:d2:63:2e:94:7e:85:cf:1b:f8:2d:
         05:84:38:00:17:ae:16:2f:b2:47:28:13:10:17:5e:ba:5d:13:
         5c:73:fc:56:ed:67:3b:cf:dd:11:53:4e:55:a6:ee:9a:8d:44:
         82:a9:76:8d:9e:93:b4:17:b2:19:95:e2:00:d2:55:c0:bb:12:
         1b:2a:5b:b2:7b:3d:2b:55:cd:25:ab:f1:4a:3f:42:8b:3c:fd:
         3b:30:92:6d:8c:77:76:f5:8e:56:e2:1d:61:95:77:f2:43:05:
         12:d4:8d:db:91:2e:ea:97:65:b3:af:ac:91:47:89:cb:4c:2c:
         77:8d:a3:c8:02:a9:8a:55:17:06:c3:7b:1b:b4:59:52:b8:13:
         0f:2a:ba:9d:45:51:f7:ff:9e:08:b9:d9:34:41:70:b8:d5:44:
         d1:b9:90:63:11:45:29:11:c5:37:6c:08:b2:73:06:70:e8:d6:
         c0:14:16:11:e2:36:e8:6c:ef:aa:26:83:47:72:a6:23:f8:21:
         a4:f3:21:93:17:2a:92:f1:83:d8:80:4a:f6:7f:d7:9e:0d:29:
         a3:ed:45:ff:5b:a7:8c:bb:a9:41:b9:89:27:7d:93:23:68:f1:
         b0:0a:d2:eb:92:96:7c:b9:e8:52:d8:6c:25:37:bb:6f:02:e9:
         6b:c9:62:29
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDFGNzExMC8GA1UEBRMoNDZERjVGNUMxNkRGRDY4QzIxNjJFRkFGNzExQjE4REJF
NzBFQTkzODAeFw0yNjA3MjYxNzE0MjhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjY0MDc0LTM3NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPCBBdvucVyZh5QckEjQMzJov/wbmLpQwCDJpOEE4t1biL8YoynObne8Z8nY3o
2HVG+nZCnQLRXGAtH979j0/DBvAfzvhSLLASCLwmMTlAspRQInA2RCqabr6Rqyl7
DxW3BXs+8vtCTLdZ75p+3imDpdQLSsg24nHX7HV0xazSPTd2f9vZl0G1byiPCsxZ
CNYfni9NxT9v2bx468nLG+APAv3g2HlIaWKxvjlyd5XxVMvv69LSQnTlv8moLOV9
DEl9g2+7ajDJTjhB2dkm6xUGrT1R4YT/o3IpSO0Xs/Dzs32VKcJVytWuphg0Y9n9
Eq9v74JDk2tveBTFS3KpHfOJAgMBAAGjggJvMIICazAdBgNVHQ4EFgQU653pWNYh
hWYBcT5vz71BZLEpS+swHwYDVR0jBBgwFoAURt9fXBbf1owhYu+vcRsY2+cOqTgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMUY3L0Y5MUQwRDI4MkE1
QjExRUJCODkyMUMzNUM0RjlBRTAyL1J0OWZYQmJmMW93aFl1LXZjUnNZMi1jT3FU
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUnQ5ZlhCYmYxb3doWXUtdmNSc1kyLWNPcVRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi82QzlENjdCODYw
N0QxMUYxODM4MEZENjk4MEVFNTI4RS5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAFnnEIwDQQCAAIwBwMFACQGf0AwDQYJKoZIhvcNAQELBQADggEBAAA6
XcCrYsh20mMulH6Fzxv4LQWEOAAXrhYvskcoExAXXrpdE1xz/FbtZzvP3RFTTlWm
7pqNRIKpdo2ek7QXshmV4gDSVcC7EhsqW7J7PStVzSWr8Uo/Qos8/Tswkm2Md3b1
jlbiHWGVd/JDBRLUjduRLuqXZbOvrJFHictMLHeNo8gCqYpVFwbDexu0WVK4Ew8q
up1FUff/ngi52TRBcLjVRNG5kGMRRSkRxTdsCLJzBnDo1sAUFhHiNuhs76omg0dy
piP4IaTzIZMXKpLxg9iASvZ/154NKaPtRf9bp4y7qUG5iSd9kyNo8bAK0uuSlny5
6FLYbCU3u28C6WvJYik=
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:21 2026 by rpki-client