Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
File:                     00E626A4A57611EF98285E5FC4F9AE02.roa (raw, json)
Hash identifier:          08NPSGEr7+x4MzDThoj8ZzRXxZk450XlydgirrF3WE4=
Subject key identifier:   FE:D5:C3:D5:CE:DD:0E:8B:91:1E:6A:27:73:4F:9F:35:98:55:6D:11
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       019B
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
Signing time:             Wed 13 Aug 2025 04:42:12 +0000
ROA not before:           Wed 13 Aug 2025 04:42:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        203.6.66.0/24 maxlen: 24
                          203.6.68.0/24 maxlen: 24
                          203.6.69.0/24 maxlen: 24
                          203.6.74.0/24 maxlen: 24
                          203.6.76.0/24 maxlen: 24
                          203.6.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Aug 13 04:42:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c17a4-f267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:93:4f:34:f9:e4:a2:bf:c4:c4:63:c2:41:
                    11:7a:f6:6c:f6:75:86:62:89:d0:78:08:b4:10:27:
                    c8:8a:5c:48:9b:39:30:bc:68:18:cd:8e:c1:5c:68:
                    f5:f2:fa:aa:59:d5:0d:32:df:8b:9f:85:95:62:7f:
                    55:d4:2f:0a:ef:1c:e3:42:53:f7:f7:77:88:eb:b2:
                    d9:63:02:4c:40:42:86:59:33:23:94:e6:d4:15:10:
                    a9:95:07:43:84:c0:f1:bf:1d:17:83:a9:a9:c8:a3:
                    43:3b:fe:c5:d0:11:3e:37:3f:0e:a1:ce:f0:2a:68:
                    7e:05:06:50:d2:54:13:37:60:2a:36:3b:8a:6d:28:
                    00:4e:65:36:f4:6b:e9:32:73:3c:05:28:58:6c:4d:
                    3d:77:74:df:da:4c:d8:da:e0:c2:5b:97:9f:31:c3:
                    b3:c1:a4:1e:56:8b:88:4a:4b:df:43:41:2a:3d:71:
                    55:b3:64:36:cf:90:2c:aa:06:d7:17:ef:78:5c:14:
                    33:c6:e8:09:76:53:a2:65:33:96:62:7e:e6:d2:73:
                    f3:a9:78:55:9b:51:71:a9:d3:9d:da:35:2d:4b:7c:
                    95:10:c4:15:76:d6:48:3f:bc:40:16:55:9f:c2:88:
                    5f:c2:1f:bf:48:83:19:e4:b2:4c:2b:a4:48:22:f2:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:C3:D5:CE:DD:0E:8B:91:1E:6A:27:73:4F:9F:35:98:55:6D:11
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.66.0/24
                  203.6.68.0/23
                  203.6.74.0/24
                  203.6.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:d4:2b:ca:15:bf:0e:e3:95:53:30:e3:c0:16:9c:8e:ea:
         b8:9f:a2:25:2f:1b:91:34:19:ad:4c:b2:11:f6:cd:89:5b:46:
         42:20:9e:49:4f:12:dd:7b:23:65:00:77:65:52:ec:75:1e:1d:
         4a:75:4d:c4:fc:fb:d1:00:0f:bb:5b:f6:be:a2:f8:c9:1a:b4:
         7f:28:d1:0f:f8:82:31:73:29:7c:40:dd:85:a3:49:0a:83:e2:
         78:7b:53:66:fa:3b:aa:bf:b9:1c:2f:e8:22:30:28:8c:17:92:
         6e:92:65:a2:2b:15:7a:cb:8e:00:47:89:1e:08:5f:42:21:2c:
         f4:e7:55:d7:27:94:c5:c8:42:d3:42:96:81:8a:ee:33:91:76:
         c7:c7:ff:c4:0a:fc:98:05:98:4e:74:39:bd:26:5b:75:14:85:
         07:c2:93:ea:e5:67:61:1f:20:67:89:77:ff:1f:cf:63:ad:50:
         ca:ee:25:c6:90:62:f7:b0:65:18:f7:3d:c3:8d:13:fb:17:77:
         ce:d1:7c:3a:be:d2:f3:d2:e3:51:e9:80:d4:91:f5:88:c6:ec:
         2e:6d:73:f3:a9:c0:a2:74:cc:9f:8e:8d:26:57:26:09:3d:ed:
         15:1e:5b:ac:05:1d:50:16:a2:f1:91:78:ce:62:ce:47:6a:6c:
         bc:05:9b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:30 2025 by rpki-client