Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
File:                     6FB1CD6EE04211EC8F5BA126C4F9AE02.roa (raw, json)
Hash identifier:          Eh+YF691/mNWRx61vK+TGiiIkuqLisPYxXGYIhY+wSU=
Subject key identifier:   25:20:EE:49:5A:BB:6E:63:C3:64:FE:10:5D:8E:D4:4B:EE:7B:4C:0D
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0667
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:59 +0000
ROA not before:           Wed 27 Aug 2025 01:05:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38444
IP address blocks:        203.146.62.0/23 maxlen: 23
                          203.146.62.0/24 maxlen: 24
                          203.146.63.0/24 maxlen: 24
                          203.170.228.0/24 maxlen: 24
                          203.170.229.0/24 maxlen: 24
                          203.170.230.0/24 maxlen: 24
                          203.170.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59f7-9d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:b9:75:6d:95:51:cf:7e:85:52:7c:14:38:
                    61:3e:ff:bc:71:5a:8c:01:02:eb:51:61:07:ac:5a:
                    19:2c:9d:98:de:fa:f3:cc:33:de:2d:6c:3f:d4:55:
                    60:ac:56:6e:fa:10:a7:b5:d5:99:0f:5a:26:8a:20:
                    b8:1b:d6:6d:23:81:f3:dd:1a:e5:2b:8b:2c:49:7f:
                    cf:78:26:55:20:fd:12:af:ec:d4:da:b9:f3:45:76:
                    e4:54:c0:c7:a5:08:91:52:b4:f3:d5:e8:79:dd:68:
                    6d:c7:b7:cf:fb:2c:fd:eb:85:29:e9:13:ae:6f:8b:
                    d8:46:93:ed:e6:2f:ac:37:7e:1a:7b:e1:b8:41:3f:
                    a9:6c:66:31:c5:67:2c:26:98:7f:6e:65:8b:c7:f4:
                    3c:0d:51:00:4d:cb:a2:08:98:a2:4e:22:5c:ce:a3:
                    83:6a:9b:31:84:17:30:aa:2d:14:3b:4b:6f:8a:5d:
                    e8:9a:5b:d7:67:9e:a3:dc:61:c5:5a:7e:3a:ed:70:
                    67:8a:ec:6d:ba:2e:d2:58:d9:72:7c:17:9f:e2:ff:
                    14:1c:ee:cf:8c:e8:4b:2b:c2:cb:82:e2:0d:8f:66:
                    32:5a:a4:e2:76:02:8f:b4:82:0c:fc:51:b7:59:32:
                    fd:c0:7d:1a:cf:da:d2:b4:b8:55:7f:50:7b:3a:84:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:20:EE:49:5A:BB:6E:63:C3:64:FE:10:5D:8E:D4:4B:EE:7B:4C:0D
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.62.0/23
                  203.170.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:99:49:48:54:86:d3:99:7e:8d:bb:64:59:bb:31:64:6c:
         6f:5b:35:65:93:c0:85:33:1d:d2:f7:8a:b7:ca:a6:e8:5c:a8:
         ed:76:14:64:e6:3b:22:8c:61:62:ab:31:21:ec:b5:1a:71:c6:
         ef:9e:76:8a:40:16:a8:68:44:c1:a9:b4:a7:a9:cd:9c:d0:97:
         37:6f:5f:71:9f:e9:a4:c0:ad:05:1e:e4:8e:f4:81:f5:d5:36:
         da:fc:c3:34:6f:4f:a6:78:80:68:ab:f1:f6:f2:67:48:e9:5b:
         4b:5d:8b:f1:d2:ac:b4:d7:af:61:20:b9:19:20:c1:1a:45:6b:
         b8:f7:7a:cd:99:36:81:ac:42:5a:9a:49:04:9d:de:9c:e5:53:
         dc:55:f0:62:38:0b:86:b1:aa:81:c9:e2:72:a1:13:1e:da:44:
         2d:90:42:55:28:ce:24:7c:66:d5:16:e8:34:2a:7a:5d:38:2e:
         15:0d:5a:3f:4f:5a:89:73:fa:1c:cb:f8:9c:b2:71:3e:ee:7b:
         79:fd:16:16:3d:8e:9f:ea:d4:d2:50:db:ba:fe:17:d4:b4:d3:
         68:5b:b8:94:fd:5e:f1:61:74:0f:82:d3:ec:8e:4e:71:7b:d5:
         f0:4a:dd:c8:87:96:e5:26:76:45:d3:fc:d6:1a:e1:8d:12:17:
         d3:61:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:37 2025 by rpki-client