Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
File:                     6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (raw, json)
Hash identifier:          GdX/1GyvyH3vWVVaXnENxvzt2MHVbC1XIppJcDq7r98=
Subject key identifier:   06:8D:8C:40:58:E1:33:A9:47:CD:36:9F:9E:67:3D:3B:0A:19:2D:A8
Certificate issuer:       /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial:       0266
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 03:53:07 +0000
ROA not before:           Sat 01 Aug 2026 03:53:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134134
IP address blocks:        45.65.58.0/24 maxlen: 24
                          45.65.59.0/24 maxlen: 24
                          45.126.253.0/24 maxlen: 24
                          103.53.24.0/24 maxlen: 24
                          103.53.25.0/24 maxlen: 24
                          103.53.26.0/24 maxlen: 24
                          103.53.27.0/24 maxlen: 24
                          103.212.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
                          rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
        Validity
            Not Before: Aug  1 03:53:07 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d6da2-0e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:5f:d8:d1:2e:81:e0:a9:52:1e:03:0d:b4:
                    86:c3:d3:e4:34:e8:b1:54:fa:28:c8:85:73:0d:ca:
                    e1:fe:50:09:2d:ac:6e:51:6d:84:a7:53:52:6c:74:
                    fb:00:5e:0d:4c:a4:63:2d:3c:17:70:e6:bc:16:b6:
                    1c:6e:b6:22:dd:40:df:3d:1d:12:6d:f9:ef:1f:7d:
                    ea:ef:22:13:02:2b:e8:3d:4d:80:bf:34:42:3f:c1:
                    bf:bf:34:26:21:2d:de:ec:ac:19:af:28:bc:14:65:
                    2d:62:30:64:a2:4b:92:ad:ea:8f:e9:1a:95:6a:06:
                    67:9e:db:0c:6b:31:fb:bb:c4:a1:ca:3a:5d:f5:89:
                    ee:da:6f:ae:68:e5:bc:34:ac:47:8c:89:d3:25:80:
                    7c:f2:6b:41:ec:e6:72:80:85:61:14:2c:60:a2:78:
                    5a:0d:89:e1:6f:d2:6f:41:d8:a3:a4:b2:90:81:52:
                    14:b8:cb:2b:57:1c:60:37:dc:92:a9:13:21:ad:de:
                    ab:15:b2:5d:e9:fd:22:67:cb:3c:75:0f:c1:3f:81:
                    8c:f0:47:6e:ae:a8:60:6a:d0:25:70:97:66:06:b6:
                    1e:f7:f8:b8:e8:72:b5:0f:3e:5c:87:47:a5:48:4d:
                    66:16:89:c1:36:5b:cb:47:7c:c3:1d:03:aa:b6:bc:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:8C:40:58:E1:33:A9:47:CD:36:9F:9E:67:3D:3B:0A:19:2D:A8
            X509v3 Authority Key Identifier:
                keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.58.0/23
                  45.126.253.0/24
                  103.53.24.0/22
                  103.212.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:72:9d:c9:7a:9d:d5:00:37:bd:83:06:95:6b:cf:51:27:
         14:ed:75:68:ee:d4:f0:c5:0e:90:cd:47:7b:6c:09:62:0f:cb:
         58:ff:7f:e0:a1:12:18:3c:df:c2:a8:94:69:c5:25:80:0c:64:
         3c:7b:94:07:1d:b8:a8:ec:1e:19:55:61:d0:01:eb:77:4d:32:
         8f:ee:48:ef:e9:01:a7:20:65:86:2c:bd:5a:f5:0e:1f:e4:93:
         f5:f3:ca:e8:38:d8:74:95:4c:67:54:cc:4a:e7:66:df:f4:a2:
         ca:97:55:e7:70:cd:61:24:5a:38:22:58:24:c9:94:6c:98:76:
         18:f5:ee:4a:22:99:8c:d4:ee:73:41:20:0a:07:82:3e:6a:c0:
         f3:7e:4d:0d:ef:28:6c:d9:01:3c:a1:b3:c7:34:f6:48:5c:fd:
         2c:82:02:47:c1:30:98:14:bd:b3:76:9d:e9:be:c0:73:44:a2:
         ad:db:4d:2b:72:64:41:6e:78:f0:be:02:9d:18:8a:c1:f3:7d:
         9e:58:47:e1:c9:f7:bb:d2:7b:f6:09:3d:a7:b1:b2:3e:8a:7a:
         80:8f:29:76:2c:9e:35:c6:72:b4:a4:8a:cc:c3:dd:ed:f2:e6:
         d7:70:cb:0b:1c:ae:36:02:f0:ea:8e:f2:64:13:5e:7a:dd:9c:
         36:49:84:9e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE
RDJBMThFOUUwHhcNMjYwODAxMDM1MzA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkNmRhMi0wZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLFf2NEugeCpUh4DDbSGw9PkNOixVPooyIVzDcrh/lAJLaxuUW2Ep1NSbHT7
AF4NTKRjLTwXcOa8FrYcbrYi3UDfPR0SbfnvH33q7yITAivoPU2AvzRCP8G/vzQm
IS3e7KwZryi8FGUtYjBkokuSreqP6RqVagZnntsMazH7u8Shyjpd9Ynu2m+uaOW8
NKxHjInTJYB88mtB7OZygIVhFCxgonhaDYnhb9JvQdijpLKQgVIUuMsrVxxgN9yS
qRMhrd6rFbJd6f0iZ8s8dQ/BP4GM8EdurqhgatAlcJdmBrYe9/i46HK1Dz5ch0el
SE1mFonBNlvLR3zDHQOqtrwJvwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFAaNjEBY
4TOpR802n55nPTsKGS2oMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw
QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAzMjEvNTJCMkUwMTYwMEMzMTFFRUE0QUNDRDZFQzRGOUFFMDIvNkMxQ0Q2QTRB
MTZBMTFFRUFDN0IwMTJBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQBLUE6AwQALX79AwQCZzUYAwQAZ9SgMA0GCSqGSIb3DQEBCwUAA4IB
AQAytnKdyXqd1QA3vYMGlWvPUScU7XVo7tTwxQ6QzUd7bAliD8tY/3/goRIYPN/C
qJRpxSWADGQ8e5QHHbio7B4ZVWHQAet3TTKP7kjv6QGnIGWGLL1a9Q4f5JP188ro
ONh0lUxnVMxK52bf9KLKl1XncM1hJFo4IlgkyZRsmHYY9e5KIpmM1O5zQSAKB4I+
asDzfk0N7yhs2QE8obPHNPZIXP0sggJHwTCYFL2zdp3pvsBzRKKt200rcmRBbnjw
vgKdGIrB832eWEfhyfe70nv2CT2nsbI+inqAjyl2LJ41xnK0pIrMw93t8ubXcMsL
HK42AvDqjvJkE1563Zw2SYSe
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:01 2026 by rpki-client