Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
File:                     6690D57486FE11F194514C90ABEE528E.roa (raw, json)
Hash identifier:          srPJd4xUL6/Vf1zKO1/lDgBKkQ8LR7aRoLfFW6QTLcE=
Subject key identifier:   22:A8:34:CC:7F:AD:36:C4:DC:62:AA:E0:51:85:F0:D9:F0:DA:4B:5B
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       25E1
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
Signing time:             Fri 24 Jul 2026 01:24:23 +0000
ROA not before:           Fri 24 Jul 2026 01:24:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64047
IP address blocks:        45.125.112.0/22 maxlen: 22
                          45.125.112.0/23 maxlen: 23
                          45.125.112.0/24 maxlen: 24
                          45.125.113.0/24 maxlen: 24
                          45.125.114.0/23 maxlen: 23
                          45.125.114.0/24 maxlen: 24
                          45.125.115.0/24 maxlen: 24
                          103.193.248.0/22 maxlen: 22
                          103.193.248.0/23 maxlen: 24
                          103.193.250.0/23 maxlen: 24
                          2402:b780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9697 (0x25e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Jul 24 01:24:23 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a62bec6-6270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:be:4d:87:a4:4c:67:3c:a5:65:f5:47:82:
                    bc:19:ac:ab:fc:bf:c2:71:d7:7c:22:92:b5:7e:96:
                    db:3f:b9:32:69:50:e7:68:1a:31:6e:19:f9:c4:d4:
                    5d:2d:f7:5d:82:f6:9d:99:e1:62:9c:1e:dd:b2:06:
                    58:32:8b:04:50:9d:c9:95:40:5a:91:a8:98:35:54:
                    89:76:3d:59:77:d3:c5:9c:a0:cf:bc:20:8f:ae:8b:
                    df:1f:fa:9d:c9:8f:43:5a:16:a9:16:d8:0b:aa:66:
                    12:7d:41:a2:23:8b:da:3a:f8:8b:d2:c5:9d:b4:d4:
                    56:7f:88:29:77:23:56:78:d4:06:0a:be:47:58:8b:
                    9e:2a:e3:6c:ad:8f:4b:3a:a5:98:4e:a4:99:f6:92:
                    61:e0:3a:9a:a6:e8:2a:e3:b0:1f:6f:a7:db:63:2f:
                    0f:04:aa:3d:82:db:30:43:68:a1:59:b2:11:1d:f5:
                    80:01:6d:9f:82:8e:66:1f:44:8d:7f:ab:e5:35:56:
                    5e:28:c5:8a:84:84:62:28:49:75:47:46:d1:d5:98:
                    5a:cd:7f:46:69:35:a5:22:25:bb:08:5f:0f:e8:e2:
                    80:7e:66:8a:68:9f:96:98:46:5b:6b:82:5a:c0:89:
                    e3:dc:1f:a6:77:a8:43:b5:bd:df:ec:71:37:51:46:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A8:34:CC:7F:AD:36:C4:DC:62:AA:E0:51:85:F0:D9:F0:DA:4B:5B
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.112.0/22
                  103.193.248.0/22
                IPv6:
                  2402:b780::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:3b:d7:46:7a:d5:d9:b5:5c:76:0d:a5:77:ed:3a:99:f8:
         5c:86:34:67:c4:05:cd:99:f4:0f:c1:ba:44:b6:25:2f:22:7c:
         46:71:a3:e1:8e:ef:b8:72:74:b5:82:a2:5b:81:d2:97:b4:46:
         af:36:9a:3f:00:8b:be:b3:f3:d7:0f:0a:1a:2d:9f:09:04:01:
         85:2c:aa:b8:7f:12:52:9f:85:8c:40:71:66:3d:8c:af:b6:5c:
         18:b0:94:f2:f9:3b:5b:34:2d:1b:7b:19:66:cd:41:3c:03:e4:
         78:32:09:db:ee:59:ec:a8:19:e2:15:d5:a1:f3:7e:28:95:68:
         59:08:e7:aa:30:6b:60:81:64:26:dd:37:b9:9c:71:84:2c:13:
         39:58:34:6c:3f:f0:f5:55:28:03:25:4f:7e:58:f4:1c:ad:96:
         c1:92:4e:5d:83:3d:09:ca:c6:4b:4c:a2:9a:e3:4a:19:6a:74:
         59:04:93:17:49:f9:2e:65:38:d6:94:36:53:1b:51:ec:e9:a0:
         09:b4:3f:c4:7f:48:6a:a8:f4:eb:c1:68:bf:b0:a8:80:63:b5:
         c8:7d:10:97:8e:f2:5c:fd:6f:8f:74:b4:19:f6:c8:fc:16:21:
         e2:90:97:43:e2:4b:f0:d4:7b:e9:80:61:08:85:78:b8:82:80:
         3f:b4:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:22 2026 by rpki-client