Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
File:                     6C0C85D0A43011ECA230771BC4F9AE02.roa (raw, json)
Hash identifier:          XMDinqojg8A6VfOUYX1iK27264aRErFSa0yq2TM1+Qo=
Subject key identifier:   2B:14:CB:C7:9A:ED:43:76:9F:81:C9:2C:26:5B:7C:B9:14:88:21:D1
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       360B
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
Signing time:             Fri 25 Sep 2026 13:00:32 +0000
ROA not before:           Fri 25 Sep 2026 13:00:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58470
IP address blocks:        103.65.248.0/23 maxlen: 24
                          119.160.62.0/24 maxlen: 24
                          119.160.63.0/24 maxlen: 24
                          119.160.90.0/24 maxlen: 24
                          119.160.105.0/24 maxlen: 24
                          119.160.107.0/24 maxlen: 24
                          119.160.109.0/24 maxlen: 24
                          119.160.110.0/24 maxlen: 24
                          119.160.122.0/24 maxlen: 24
                          119.160.124.0/24 maxlen: 24
                          2404:3100:a::/48 maxlen: 48
                          2404:3100:b::/48 maxlen: 48
                          2404:3100:c::/48 maxlen: 48
                          2404:3100:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13835 (0x360b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Sep 25 13:00:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ab6706f-56f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:49:a3:b0:06:ae:ec:17:92:85:bb:26:ae:
                    a5:66:38:d9:c0:54:ff:b8:c8:19:1d:b5:1b:cb:72:
                    be:75:80:7e:26:f8:eb:2d:dd:c3:c3:c1:dd:8f:6c:
                    5d:ec:e6:3b:47:f2:02:38:92:9f:05:36:f7:1c:29:
                    4a:25:c6:a0:e8:fe:e1:71:8d:db:9a:1c:77:46:54:
                    13:bc:2c:a5:9c:fc:bb:70:ad:4b:68:66:25:f7:4e:
                    c6:0c:6c:e2:94:76:a9:f8:7f:27:a9:09:e1:ba:5e:
                    f0:f1:6c:bf:b8:6d:ad:72:46:a5:29:81:a3:3f:0a:
                    01:de:fe:cf:25:ee:1c:53:de:34:4f:d0:f1:b4:5f:
                    69:6e:34:93:89:69:d1:e7:37:92:cd:74:bf:2c:86:
                    74:ef:60:34:8c:de:66:ac:e8:28:20:cb:a6:a2:75:
                    92:2a:c6:7f:53:61:76:19:cb:b2:29:74:92:69:f2:
                    cc:e8:ce:26:bb:39:66:fe:a5:7b:53:06:76:75:0d:
                    d2:e9:4f:6e:6a:88:dc:a1:a0:cf:2e:1b:58:85:eb:
                    7b:ad:fb:b0:f6:1e:14:0f:d6:68:dd:95:f7:47:95:
                    a5:4c:d3:94:3b:9b:c7:a2:3e:27:9a:c0:65:70:68:
                    07:a5:24:21:b8:46:9c:c6:55:78:1b:56:96:8b:6f:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:14:CB:C7:9A:ED:43:76:9F:81:C9:2C:26:5B:7C:B9:14:88:21:D1
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.248.0/23
                  119.160.62.0/23
                  119.160.90.0/24
                  119.160.105.0/24
                  119.160.107.0/24
                  119.160.109.0-119.160.110.255
                  119.160.122.0/24
                  119.160.124.0/24
                IPv6:
                  2404:3100:a::-2404:3100:d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:33:c0:67:5f:e4:6f:30:3f:38:86:1b:ae:40:14:54:78:
         4b:f3:be:47:61:08:94:a1:bf:01:94:35:80:3d:85:73:41:37:
         5c:4a:2b:cd:aa:61:26:d9:7d:4b:fe:f9:52:24:2a:6f:b9:95:
         bf:3c:59:0a:55:e9:7b:15:63:a0:b9:8f:0e:f5:14:02:bf:13:
         8d:c3:32:3f:44:ea:7e:c9:1a:82:57:46:c3:f1:b5:a1:ab:6a:
         27:5a:2f:90:7f:7c:ea:fb:a3:aa:77:39:f0:b3:09:65:30:fd:
         74:1a:3d:c1:f1:63:d3:4e:05:0f:aa:f6:bc:98:b0:a8:4b:a4:
         d4:90:91:dd:ae:8b:e4:b5:e9:4e:7f:7a:aa:8f:4e:79:f6:3d:
         a6:e0:03:3e:ae:59:cc:b0:98:ee:d8:ee:b2:8e:2e:7a:f5:f6:
         1f:fd:0e:74:84:fa:19:a9:de:a2:7b:ad:81:9f:7c:1f:5b:3b:
         17:08:fb:7a:c0:ed:d3:5e:76:0c:1d:e0:75:64:a8:e5:58:58:
         51:50:35:fe:5c:e3:46:6d:c9:11:bb:8f:d3:dd:22:48:77:7c:
         75:12:0a:87:4a:cb:cd:c6:a8:fb:2a:18:6b:aa:56:7e:96:ab:
         9b:c0:bb:ac:0e:2c:28:86:26:ca:3d:ec:d4:0d:f7:25:54:ee:
         ad:3d:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:11:01 2026 by rpki-client