Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
File:                     63F05DE02F1D11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          meK5qbYaDDS3NgP1iQTl9+RC5ogwZonvvBUGE8vHZIw=
Subject key identifier:   C6:50:DD:5F:C6:D9:68:00:D0:89:D6:78:AF:E1:9D:51:65:A9:2E:15
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       03AF
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
Signing time:             Thu 29 Jan 2026 00:21:07 +0000
ROA not before:           Thu 29 Jan 2026 00:21:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18390
IP address blocks:        27.96.192.0/19 maxlen: 24
                          115.69.0.0/18 maxlen: 24
                          202.172.96.0/19 maxlen: 24
                          203.23.236.0/22 maxlen: 24
                          203.29.65.0/24 maxlen: 24
                          203.29.124.0/23 maxlen: 24
                          203.31.202.0/23 maxlen: 24
                          203.56.244.0/22 maxlen: 24
                          203.57.48.0/23 maxlen: 24
                          210.1.192.0/19 maxlen: 24
                          2407:e400::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Jan 29 00:21:07 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=697aa7f3-4cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:f7:1a:19:9f:4f:a8:e7:7e:94:ec:62:0a:
                    01:9f:8d:d7:63:c4:f0:db:44:7d:a8:a7:7b:07:b5:
                    9e:dc:eb:39:f2:8c:88:c2:8a:76:4a:14:66:0c:77:
                    8c:a3:fc:54:9f:92:69:d4:d9:da:f9:e6:b1:1c:c4:
                    fb:b3:c4:b7:79:54:42:2d:2f:77:a5:15:2a:bf:23:
                    1f:fd:66:ce:9d:2a:6b:22:c6:cd:a7:24:17:ff:27:
                    52:dd:d8:56:7e:42:fc:cb:76:f3:e5:e0:90:c2:f3:
                    4a:97:22:f9:55:4d:8a:9f:ec:92:91:bf:57:df:96:
                    96:6b:67:ec:54:d3:c3:4b:48:09:c5:32:1c:f7:dc:
                    61:ac:15:d3:7c:f8:3f:63:0b:b9:df:95:e5:1c:fc:
                    3e:b8:a8:46:26:d5:6e:79:e6:71:ee:1d:f6:1d:38:
                    25:97:3b:1d:0f:0d:53:3d:f6:4d:dd:bd:61:a0:74:
                    39:47:98:e0:b1:b8:6b:50:eb:5a:37:3e:e5:55:eb:
                    9d:08:2c:32:25:10:cf:ac:47:3c:68:8b:10:d2:6a:
                    fa:cd:0e:88:18:c1:b9:81:50:15:06:f6:28:6f:44:
                    ac:37:e8:64:2b:23:87:59:d0:f0:6a:03:51:a6:8e:
                    63:3a:a2:27:6c:62:01:9c:38:1b:dd:99:bc:db:b2:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:DD:5F:C6:D9:68:00:D0:89:D6:78:AF:E1:9D:51:65:A9:2E:15
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.192.0/19
                  115.69.0.0/18
                  202.172.96.0/19
                  203.23.236.0/22
                  203.29.65.0/24
                  203.29.124.0/23
                  203.31.202.0/23
                  203.56.244.0/22
                  203.57.48.0/23
                  210.1.192.0/19
                IPv6:
                  2407:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:a2:c3:4e:02:ac:d6:98:9d:61:76:a5:ac:fb:36:9e:2a:14:
         5d:db:4d:36:5e:61:5b:3b:96:b3:05:13:00:fe:8d:bb:ad:19:
         b8:e0:c4:f3:f9:33:2f:e1:df:43:92:83:21:e6:cc:c4:f1:95:
         7f:c9:ef:d3:e6:8a:4f:6c:63:f8:65:f1:9c:48:10:1d:7d:ab:
         47:86:79:27:1f:72:f0:69:b7:46:4c:87:df:ca:d3:18:c2:b4:
         a2:8b:9d:4b:5a:7e:31:2f:de:a0:b5:a2:79:9c:65:d0:97:e8:
         3d:72:23:4c:6e:7b:45:79:72:d0:63:2c:80:ae:fa:72:46:b4:
         3c:a9:3a:0d:01:21:30:50:fa:b2:55:1e:ec:64:41:5d:d2:93:
         93:8b:1f:11:e0:20:e7:4e:28:7e:93:e9:8c:59:3b:4b:81:67:
         d7:49:03:29:e0:1a:74:b9:e7:95:58:64:51:81:f6:36:00:59:
         dc:fa:80:dc:f5:c5:4a:0a:97:89:74:f1:b3:a7:92:5b:09:56:
         7a:6c:7b:0b:da:9f:16:72:ea:a3:de:02:82:0a:2b:6e:ad:e4:
         8e:2f:1e:f3:ac:d3:38:68:b2:cc:86:b7:13:d4:2d:16:f0:46:
         d5:70:0b:fe:b0:54:14:38:13:e4:30:05:fa:20:96:c0:2b:54:
         31:0c:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:25 2026 by rpki-client