Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
File:                     6690D57486FE11F194514C90ABEE528E.roa (raw, json)
Hash identifier:          fV1SDM79oTlS83IQQaXNvbxSE2n0EcvqopvRbECAJVY=
Subject key identifier:   D6:6E:E1:4D:FE:0F:58:BD:66:38:42:9A:98:25:A0:80:F8:C0:4F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       25ED
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
Signing time:             Thu 06 Aug 2026 16:23:21 +0000
ROA not before:           Thu 06 Aug 2026 16:23:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     64047
IP address blocks:        45.125.112.0/22 maxlen: 22
                          45.125.112.0/23 maxlen: 23
                          45.125.112.0/24 maxlen: 24
                          45.125.113.0/24 maxlen: 24
                          45.125.114.0/23 maxlen: 23
                          45.125.114.0/24 maxlen: 24
                          45.125.115.0/24 maxlen: 24
                          103.193.248.0/22 maxlen: 22
                          103.193.248.0/23 maxlen: 24
                          103.193.250.0/23 maxlen: 24
                          2402:b780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9709 (0x25ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Aug  6 16:23:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a74b4f9-0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:97:ef:ff:85:d5:a8:43:99:e4:4b:a3:60:
                    9e:25:09:ad:4d:a5:43:00:ae:a6:ba:40:e5:da:73:
                    03:0f:99:4c:8d:45:9c:85:7f:57:a6:82:fe:79:4a:
                    2e:02:02:e0:45:61:00:50:cd:49:bf:47:b1:12:4c:
                    85:a0:0d:e5:1f:8d:70:68:b0:25:ec:25:5a:86:3b:
                    88:04:71:35:b9:e8:ef:b8:9d:41:ce:a7:e2:ca:f8:
                    cf:5a:f1:8b:f9:5d:70:15:1d:cb:a3:d3:5e:a2:23:
                    62:8c:6f:d4:6a:9d:93:41:02:ce:5d:84:42:44:68:
                    71:e8:52:79:a2:17:1b:a3:f4:18:7c:33:8e:bd:c5:
                    c3:52:80:39:8f:4b:d0:b8:fb:8c:da:e2:1e:5e:d3:
                    8f:81:08:8f:4b:09:56:30:06:05:c4:0a:ae:d4:60:
                    54:84:3d:a7:cb:f9:8a:92:7d:c5:47:51:fd:c2:5a:
                    7c:34:35:4e:57:97:b5:7f:df:65:ff:b7:7c:d5:d9:
                    27:22:e5:ae:05:04:83:b1:b0:21:71:5d:66:0c:ed:
                    d9:bd:87:1b:c4:24:e4:3f:ed:0a:14:f4:7f:34:0d:
                    ff:79:b0:a1:ee:d7:44:be:3b:26:e6:f9:4b:e6:ff:
                    ca:7b:15:46:2c:4c:3f:b6:25:3d:af:fe:69:d5:17:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:E1:4D:FE:0F:58:BD:66:38:42:9A:98:25:A0:80:F8:C0:4F:57
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.112.0/22
                  103.193.248.0/22
                IPv6:
                  2402:b780::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:89:72:15:c3:64:86:6a:21:9b:19:f4:8a:16:f0:2d:36:95:
         13:6c:48:10:a0:a1:a9:61:27:d5:08:d9:84:e7:b4:d2:0c:31:
         c5:98:4a:27:13:80:51:27:d2:50:8d:b7:f7:17:21:2e:cb:c2:
         d4:f1:3c:58:94:8d:f0:f8:40:02:61:24:ea:65:d5:44:fe:6c:
         df:f1:dc:63:0e:23:34:a8:6b:0e:0b:23:b8:81:b1:1d:46:91:
         0b:f9:e6:a5:36:5e:71:82:fd:05:90:2b:3a:c3:27:c8:c5:00:
         f6:de:3e:7a:a6:e3:ee:86:01:7d:61:06:5e:bb:5e:47:0f:a6:
         92:db:89:84:6e:78:ab:da:a9:d7:23:e2:e1:41:53:58:e0:5b:
         a7:3e:3c:98:37:86:98:98:75:6b:da:5b:55:65:92:6d:c8:c0:
         93:e8:5d:fb:44:bc:c2:15:4c:99:71:bd:4f:9d:0b:67:91:ba:
         2a:62:a0:3c:a1:13:d5:4a:cc:99:6b:54:e2:d3:31:92:ec:8b:
         3b:57:46:bd:03:c5:1c:e4:a0:1b:b6:aa:7f:a0:be:a9:ac:88:
         36:a5:ac:74:db:79:8f:5a:e5:b8:21:21:e5:fc:aa:6e:ac:13:
         88:32:37:f1:85:61:a5:70:9d:56:26:12:4f:8c:89:1e:e9:81:
         35:ec:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:03 2026 by rpki-client