Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa
File:                     6E16949065A011EFA4AA8E6BC4F9AE02.roa (raw, json)
Hash identifier:          1A3H69lIehBD2AfdLSl5FiHzZaNJ6PDNBZ1XdUVIfpc=
Subject key identifier:   3F:00:43:0B:44:D0:10:8D:2E:1D:B3:D7:50:F1:FE:D2:F5:14:1A:2B
Certificate issuer:       /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial:       0144
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa
Signing time:             Fri 01 May 2026 05:39:00 +0000
ROA not before:           Fri 01 May 2026 05:39:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132158
IP address blocks:        114.30.64.0/21 maxlen: 21
                          2400:8c80::/32 maxlen: 32
                          2400:8c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
                          rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
        Validity
            Not Before: May  1 05:39:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f43c74-3511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:4f:ce:1d:34:b2:81:14:8f:a0:63:c5:73:
                    96:4b:83:db:11:fe:71:9c:05:e1:5b:75:77:de:ea:
                    67:ac:b4:4a:22:ba:0b:ef:8e:bd:2c:ba:5c:93:af:
                    1b:a9:c6:4f:8c:a6:3e:b6:60:79:96:51:4c:42:69:
                    05:44:56:fe:12:3d:3e:c8:6f:68:fc:e3:eb:94:43:
                    16:91:2d:14:69:f3:e6:87:27:8e:8c:20:f1:5f:91:
                    12:4d:7e:15:e7:08:8b:56:11:06:48:09:08:88:1a:
                    c5:48:b3:dc:2d:36:76:34:3e:df:2b:5c:eb:a0:9a:
                    57:c4:ff:27:58:62:0a:7e:ab:4e:ac:da:62:5d:bb:
                    3c:85:42:37:37:e8:9d:d7:fa:9b:5d:d7:bb:e8:e1:
                    75:65:28:3a:a6:d2:d0:f6:85:9d:1a:45:43:10:93:
                    44:75:b5:3b:aa:be:1f:5a:0b:be:67:42:61:ba:ed:
                    f3:34:9a:db:65:96:72:2a:61:e5:47:41:06:62:d3:
                    13:29:08:82:4e:5f:74:30:05:89:44:55:28:f8:41:
                    2e:bd:8a:fb:49:da:b3:a0:0a:46:90:e2:8f:dc:ac:
                    16:85:fb:ed:ba:9b:4d:c6:34:fc:be:58:00:97:92:
                    9a:31:b9:c9:ce:92:db:55:a7:35:35:56:15:64:08:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:43:0B:44:D0:10:8D:2E:1D:B3:D7:50:F1:FE:D2:F5:14:1A:2B
            X509v3 Authority Key Identifier:
                keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.64.0/21
                IPv6:
                  2400:8c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:8f:92:22:4c:04:04:66:b6:d1:ad:e9:a4:92:86:23:88:
         2c:a5:e7:68:66:55:7d:a8:0f:ec:a3:0c:cf:db:31:c5:ff:d5:
         fa:1c:09:49:51:cc:e7:44:9d:cf:ce:cc:2d:3d:44:84:1f:e1:
         60:9c:5e:00:b6:27:82:b9:1f:b1:91:8a:1d:aa:ff:f7:69:c1:
         c5:36:f8:3c:2e:d7:1b:80:f6:75:ff:1b:35:b3:3b:be:9e:f1:
         46:9c:e7:f9:46:8d:38:5a:fb:8e:cc:ee:6b:22:e6:66:01:f6:
         f2:30:55:e2:eb:43:51:18:b3:01:87:80:4c:9a:12:33:fd:0f:
         e5:80:be:9b:6f:f0:ec:95:f1:d3:73:f6:c2:99:ff:a1:cf:39:
         8b:f9:12:1f:8b:23:f7:e7:1e:63:c2:15:f9:63:f0:59:1f:a5:
         3d:a1:19:bc:bd:ae:57:3a:fc:45:fb:a6:98:64:06:d4:09:14:
         f8:6f:5c:ca:e1:75:4f:8d:b2:75:0c:84:a8:2f:fb:96:18:e6:
         6b:61:5e:e1:ff:71:23:25:f7:4d:8b:dd:d7:62:26:b4:e1:87:
         32:9f:17:83:b0:d5:37:f4:a2:b5:9c:a8:79:51:60:86:aa:0c:
         1c:f7:a7:85:c8:11:7d:bb:e2:fe:74:c1:fe:aa:4b:82:a7:ce:
         f3:bb:18:12
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG
QUE0QjIzNTcwHhcNMjYwNTAxMDUzOTAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0M2M3NC0zNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjXNPzh00soEUj6BjxXOWS4PbEf5xnAXhW3V33upnrLRKIroL7469LLpck68b
qcZPjKY+tmB5llFMQmkFRFb+Ej0+yG9o/OPrlEMWkS0UafPmhyeOjCDxX5ESTX4V
5wiLVhEGSAkIiBrFSLPcLTZ2ND7fK1zroJpXxP8nWGIKfqtOrNpiXbs8hUI3N+id
1/qbXde76OF1ZSg6ptLQ9oWdGkVDEJNEdbU7qr4fWgu+Z0Jhuu3zNJrbZZZyKmHl
R0EGYtMTKQiCTl90MAWJRFUo+EEuvYr7SdqzoApGkOKP3KwWhfvtuptNxjT8vlgA
l5KaMbnJzpLbVac1NVYVZAjiKQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFD8AQwtE
0BCNLh2z11Dx/tL1FBorMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0
RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkE1NkMvRERERThDNDg2NEZGMTFFRkE1QTgxMTU4QzRGOUFFMDIvNkUxNjk0OTA2
NUEwMTFFRkE0QUE4RTZCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQDch5AMA0EAgACMAcDBQAkAIyAMA0GCSqGSIb3DQEBCwUAA4IBAQCW
tI+SIkwEBGa20a3ppJKGI4gspedoZlV9qA/sowzP2zHF/9X6HAlJUcznRJ3Pzswt
PUSEH+FgnF4AtieCuR+xkYodqv/3acHFNvg8LtcbgPZ1/xs1szu+nvFGnOf5Ro04
WvuOzO5rIuZmAfbyMFXi60NRGLMBh4BMmhIz/Q/lgL6bb/DslfHTc/bCmf+hzzmL
+RIfiyP35x5jwhX5Y/BZH6U9oRm8va5XOvxF+6aYZAbUCRT4b1zK4XVPjbJ1DISo
L/uWGOZrYV7h/3EjJfdNi93XYia04YcynxeDsNU39KK1nKh5UWCGqgwc96eFyBF9
u+L+dMH+qkuCp87zuxgS
-----END CERTIFICATE-----
Generated at Wed May 13 13:38:41 2026 by rpki-client