Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa
File:                     69CB6C488A3111EF85E56411C4F9AE02.roa (raw, json)
Hash identifier:          EUCQ55x2UAgluzfxAghXZwkcta20C7tTCTK7POVNono=
Subject key identifier:   6D:86:86:CE:B6:4C:A0:FB:A3:E9:D8:80:A0:DA:7A:65:CD:EB:59:D1
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2B24
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 16:23:12 +0000
ROA not before:           Fri 14 Aug 2026 16:23:12 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     206804
IP address blocks:        116.93.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11044 (0x2b24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Aug 14 16:23:12 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7f40f0-6345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:3c:35:b8:2d:da:fb:ad:11:b2:ff:40:f5:
                    02:18:50:01:cf:f0:7e:f9:98:f8:1c:14:3d:74:37:
                    79:00:61:0a:22:6e:50:db:9a:d1:3b:c2:52:d4:2c:
                    ed:d1:2e:f1:cb:bb:bc:23:c2:9f:a1:ba:6b:21:c3:
                    6e:e5:f0:eb:ed:6a:22:61:ba:b2:f1:11:90:d5:46:
                    45:a0:21:f0:e6:63:72:83:2e:31:d9:9d:46:97:dc:
                    d1:1d:06:41:62:2e:71:59:27:77:9f:76:a6:6c:b1:
                    4a:e1:10:0f:6c:1c:f8:82:4e:02:7c:f3:86:63:b1:
                    5b:7f:0b:7e:13:fe:36:50:f6:6a:8a:48:ff:1f:f1:
                    94:e1:46:eb:81:43:00:47:e4:12:80:e5:11:5c:21:
                    d1:74:4a:10:cd:95:6e:79:33:3e:1c:b8:b1:9f:1b:
                    e9:cf:f2:41:25:d3:b1:57:35:2f:cf:13:e6:08:e0:
                    a1:e9:4b:08:cc:f7:37:e3:47:57:e2:d6:d6:57:1b:
                    1c:ad:e8:fd:11:d8:b3:71:af:38:74:14:80:e7:71:
                    ea:d5:e4:29:ae:ce:3a:f7:5a:05:ae:74:a5:b1:a4:
                    e4:52:eb:ea:d3:c4:e3:68:3c:95:d4:57:a7:0a:16:
                    e5:b1:d1:51:73:eb:bf:ca:e8:71:75:76:47:92:a4:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:86:86:CE:B6:4C:A0:FB:A3:E9:D8:80:A0:DA:7A:65:CD:EB:59:D1
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.93.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:d3:88:2e:9f:cc:d7:6e:8e:54:92:95:e3:32:29:c3:2e:
         e2:d6:5d:ce:96:5f:3a:47:24:42:42:83:be:87:c8:3c:73:3f:
         ec:8b:45:5e:3a:38:6e:1f:d1:bf:ba:38:ae:33:61:99:85:2e:
         14:57:3e:bf:d3:14:0f:89:18:d3:45:06:24:70:d6:04:06:dd:
         51:df:19:b8:91:f2:ef:35:fd:8a:35:d6:40:f1:95:ac:ef:b0:
         fc:7d:13:c4:11:a4:dc:d3:0f:09:18:5a:a2:f6:ef:2d:a9:b0:
         49:30:1f:f2:42:7f:99:ce:3d:fd:2d:bc:2c:ba:f3:3b:3e:57:
         ff:c8:0a:4f:af:6f:2b:97:17:3b:6c:4d:3d:b3:d0:cd:d4:54:
         06:4e:8c:7a:13:9e:ab:3e:74:37:7d:7e:8e:1a:82:ae:97:4a:
         06:fb:8d:de:6c:9c:e9:fb:b5:02:7a:33:ce:de:04:f5:ef:b2:
         fb:c0:6b:a1:06:56:0d:25:da:08:15:8e:97:0e:a9:8d:b0:1a:
         4d:2b:21:dc:e8:b1:71:f6:a5:e0:6b:a6:cd:c4:8e:fc:a6:b1:
         a1:1f:bc:04:68:df:54:ba:d8:a7:cb:9d:dc:ed:f7:4c:25:d3:
         92:c3:a2:35:3d:7a:cc:7b:b4:12:bf:0e:99:59:05:66:5c:e3:
         7e:1d:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:43 2026 by rpki-client