Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa
File:                     6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (raw, json)
Hash identifier:          IsnopfiraJYXUMgM3zC6fdbepjtRf+a2njqVEtH3VtA=
Subject key identifier:   13:2C:F8:B4:53:79:96:B8:94:59:B1:F2:FC:CB:19:06:52:CB:1F:6C
Certificate issuer:       /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial:       1A86
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:34:17 +0000
ROA not before:           Wed 28 Jan 2026 16:14:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134990
IP address blocks:        103.204.244.0/22 maxlen: 24
                          157.119.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
                          rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6790 (0x1a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
        Validity
            Not Before: Jan 28 16:14:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44e69-ae16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:68:68:de:ad:69:9a:72:02:62:11:50:b9:
                    e3:e9:46:af:af:4e:0d:e5:ee:5a:7a:11:39:02:d0:
                    2d:75:88:87:7b:1a:72:f7:1c:23:24:fb:0d:5b:f2:
                    f6:ee:3f:b3:b9:04:cb:5f:8c:e0:0b:03:71:aa:9c:
                    86:ff:23:3d:9c:32:2f:6b:07:b5:15:e8:67:92:9d:
                    63:ee:c4:6f:19:0c:0f:c8:ed:56:32:ec:4a:13:bd:
                    a1:8f:fd:02:2c:77:57:99:17:50:ba:6f:dd:6a:17:
                    66:0d:be:2b:8c:92:0f:5d:69:0e:dc:d6:87:d9:0b:
                    09:97:03:13:a2:f6:db:fe:6b:68:1e:fc:9e:02:d1:
                    c8:a3:65:fd:e6:e9:b5:c2:f5:e1:cb:1a:d1:c2:c8:
                    4d:7d:0c:2b:fb:64:fc:c8:0b:34:d5:54:1b:09:a7:
                    2e:ae:0f:b4:de:72:e7:fc:55:79:ce:1a:b7:2c:b8:
                    50:3a:0b:cb:9a:1d:dc:de:32:3e:3d:17:45:ad:58:
                    2a:47:81:c9:f7:12:44:f7:54:54:c5:99:ca:c4:7e:
                    81:46:6a:32:16:6b:0a:ae:2b:36:e8:55:c9:d6:47:
                    5c:64:60:b3:a0:f8:a3:1e:16:a1:db:ed:70:ee:2d:
                    d4:84:11:f0:c6:d1:d9:ae:ab:24:48:47:75:56:cb:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:F8:B4:53:79:96:B8:94:59:B1:F2:FC:CB:19:06:52:CB:1F:6C
            X509v3 Authority Key Identifier:
                keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.244.0/22
                  157.119.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:d8:58:f5:82:bb:b7:6c:aa:45:67:9c:bc:7e:c3:d4:65:
         3a:b1:ce:1d:cd:18:92:00:74:b1:b7:35:62:1d:50:39:94:95:
         70:92:85:67:40:4b:22:9d:7d:9f:6a:75:f5:0b:82:bc:f2:52:
         bc:33:da:eb:ee:1d:79:94:14:5c:c3:3c:11:10:22:c9:8e:e1:
         23:52:e6:27:a2:ce:9b:a9:f3:96:2f:98:be:a9:8c:a2:0e:65:
         2d:49:75:ea:cc:37:f9:2b:d5:cb:8c:5c:14:d0:81:5c:cd:68:
         07:42:84:ac:69:ec:27:00:dd:fb:70:8d:2b:a5:c1:ce:78:b7:
         ce:ce:97:07:57:27:b3:9e:e0:89:7e:1d:47:54:39:05:d3:ff:
         b5:c3:04:70:8b:6c:0f:fd:19:57:ec:85:eb:36:a0:b0:73:fa:
         20:67:4f:24:1f:26:1c:87:3c:6d:1d:0e:27:fa:e2:26:7b:03:
         89:66:c5:fa:5b:0f:eb:77:56:1a:9e:cc:b1:0b:87:f7:45:95:
         17:66:f9:c3:e5:08:6d:42:53:93:d5:83:92:68:9b:bc:14:8f:
         6d:18:a6:91:27:bd:03:b3:d0:f1:e2:f6:6f:58:4c:2b:29:fa:
         08:3e:15:17:ff:e5:11:a6:3d:26:22:c8:72:04:06:7f:c9:4a:
         7b:0b:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:34 2026 by rpki-client