Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
File:                     6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json)
Hash identifier:          OwRUzuQroalc1cy5B+Anh6MY7IANW3CG/sTYPfIy2lA=
Subject key identifier:   BE:05:52:3D:6A:6B:5E:AC:8C:8E:EA:5C:A1:D5:42:E8:4F:E3:C2:9A
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       0753
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:45:24 +0000
ROA not before:           Tue 03 Mar 2026 05:45:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        122.10.140.0/22 maxlen: 24
                          122.10.149.0/24 maxlen: 24
                          122.10.196.0/23 maxlen: 24
                          122.10.221.0/24 maxlen: 24
                          122.10.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Mar  3 05:45:24 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a67574-a5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:b8:13:b0:12:3c:8b:d7:af:52:e2:45:2e:
                    14:51:0b:56:03:74:15:e0:50:90:cf:eb:17:67:8c:
                    56:ef:fb:21:64:04:4d:fd:40:f4:02:5c:0f:a1:df:
                    95:9d:15:fd:47:b9:c1:dd:d1:b4:2c:2b:4e:fa:5b:
                    30:db:71:69:a9:8f:13:a1:bb:bb:dd:ad:4c:b7:c7:
                    99:98:82:3c:1a:e6:c9:9e:75:bf:d6:18:46:b8:9b:
                    32:72:d4:07:94:03:56:97:a7:0f:bb:ca:be:81:8c:
                    0c:04:b0:73:71:a9:d2:b6:8a:6e:a2:31:15:f9:3a:
                    43:67:20:b4:76:7a:6a:20:7d:c8:72:6c:9c:d8:16:
                    3d:49:a3:62:95:d4:b0:68:1f:65:71:6a:80:89:dd:
                    dc:70:09:c3:5b:00:28:ce:62:2d:9b:bd:c3:98:b1:
                    4a:a2:5a:5a:38:75:5e:e7:69:95:20:cb:02:bf:c8:
                    e2:9c:8b:89:d7:3c:2b:40:f5:fe:42:e1:c0:39:c1:
                    35:69:c6:04:0b:28:2d:48:31:fb:d1:af:9c:40:58:
                    ef:a3:c7:a1:6f:5a:ad:e6:4a:fe:6d:f5:57:53:7b:
                    e2:7a:d6:0f:b9:b5:ae:35:51:d4:99:7e:0d:5a:1f:
                    b6:d3:bc:6b:89:3f:f0:54:c0:51:87:99:71:f3:21:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:52:3D:6A:6B:5E:AC:8C:8E:EA:5C:A1:D5:42:E8:4F:E3:C2:9A
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.140.0/22
                  122.10.149.0/24
                  122.10.196.0/23
                  122.10.221.0/24
                  122.10.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:94:ed:6e:ee:df:8d:bb:c3:d9:6f:e7:92:0a:e6:6e:77:
         54:a2:a6:8e:c6:a6:9b:7f:15:3e:81:44:44:60:fa:40:f4:c7:
         98:04:36:c4:84:30:73:03:b8:98:ac:e4:1e:eb:36:0f:c8:07:
         aa:b4:82:c8:aa:99:1a:e6:51:ea:15:ef:34:29:a9:2d:fb:27:
         15:e5:cd:62:ab:c9:3b:0f:f6:43:11:32:41:be:cb:69:ff:ce:
         2e:3c:17:f0:99:87:1e:5e:7c:30:7e:dc:9d:87:36:66:b9:c6:
         d7:a1:71:7d:f5:5d:ee:f4:01:b3:09:a1:89:1f:18:a0:b0:a4:
         ea:32:ae:e0:c5:eb:d1:38:36:52:8b:c2:c5:e1:6b:22:93:76:
         98:8c:86:8c:a6:02:11:54:02:6c:a7:91:59:a7:1c:ee:66:b2:
         9e:1f:a2:24:67:d3:bb:62:b2:0f:ca:fa:c7:fd:80:22:3a:ce:
         0f:c7:4c:ed:d1:f1:91:fe:ab:da:94:48:61:37:99:44:3f:e7:
         8d:07:33:53:13:f0:9d:04:0e:1f:fc:c5:ba:8d:35:5a:f0:3b:
         c5:e3:70:f7:72:43:a0:81:16:c0:91:39:74:a2:33:57:2b:0c:
         06:39:f3:d7:ce:03:71:89:76:4a:41:99:6e:5b:90:d6:37:d9:
         a1:e8:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:28 2026 by rpki-client