Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa
File:                     6C2E2E523E6311F18F888BA6CC833773.roa (raw, json)
Hash identifier:          k6TV0drglGkeepv/SOoKqxe07dXcAT0h3N9k3dOCIkk=
Subject key identifier:   29:9D:F8:01:B0:4C:53:03:F7:AA:A9:42:EB:CC:E4:87:C0:A8:A3:54
Certificate issuer:       /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial:       1DA1
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa
Signing time:             Sun 26 Apr 2026 23:55:38 +0000
ROA not before:           Sun 26 Apr 2026 23:55:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149765
IP address blocks:        45.125.223.0/24 maxlen: 24
                          103.239.254.0/24 maxlen: 24
                          103.239.255.0/24 maxlen: 24
                          2404:4580:10::/48 maxlen: 48
                          2404:4580:11::/48 maxlen: 48
                          2404:4580:12::/48 maxlen: 48
                          2404:4580:13::/48 maxlen: 48
                          2404:4580:14::/48 maxlen: 48
                          2404:4580:15::/48 maxlen: 48
                          2404:4580:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
                          rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7585 (0x1da1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
        Validity
            Not Before: Apr 26 23:55:38 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69eea5f9-b7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:33:7c:37:61:60:51:76:c2:77:9b:d8:c8:
                    6b:9a:d4:21:ec:a0:ad:bd:a2:56:9d:d0:8c:1b:3c:
                    5c:15:30:e4:69:c0:f1:83:ca:27:8f:f4:35:e9:74:
                    a4:98:5b:6c:24:0e:a2:10:e3:31:81:4e:7c:13:72:
                    17:83:d5:04:ae:0c:7c:11:e0:b6:62:53:23:4e:f4:
                    63:57:c5:15:6f:fa:59:b0:45:73:0d:81:93:c5:f3:
                    27:96:f2:12:06:74:c1:b6:14:18:45:14:98:05:4f:
                    54:88:d0:a5:1a:7a:5e:5b:67:34:c1:a8:07:d1:46:
                    b5:ac:f2:65:49:b5:b8:70:56:21:fb:31:4c:de:15:
                    60:3f:cc:05:52:82:b9:cb:40:3b:ad:44:13:d8:b3:
                    6f:a1:cf:14:49:30:cd:06:5b:50:fc:c4:eb:09:b3:
                    56:85:41:9c:33:be:0b:1c:2f:b4:48:85:d5:60:b9:
                    96:56:e3:ff:68:55:6b:db:bc:5e:8a:fd:e2:c9:0a:
                    08:6a:e3:ef:00:72:39:6e:a2:29:5e:00:34:fa:05:
                    b8:c1:84:41:fe:74:b8:62:f0:af:e7:85:07:26:37:
                    ca:94:6c:13:83:4a:d0:7e:ad:b5:0f:3e:0b:a4:26:
                    f0:13:d2:6d:c3:69:db:7c:75:0a:8a:a8:ff:2e:96:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:F8:01:B0:4C:53:03:F7:AA:A9:42:EB:CC:E4:87:C0:A8:A3:54
            X509v3 Authority Key Identifier:
                keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.223.0/24
                  103.239.254.0/23
                IPv6:
                  2404:4580:10::-2404:4580:16:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         20:49:6b:18:f0:d5:bc:47:ef:e2:a8:90:76:76:2a:3e:d6:2b:
         40:c9:01:f8:fa:3a:63:56:06:23:a1:cc:24:2a:ab:be:13:ba:
         fc:76:97:98:85:be:7d:5c:d4:c3:49:7a:e5:f2:c2:a8:dd:7e:
         53:02:bf:ff:d6:5e:f8:97:07:bc:15:60:1b:d8:74:5f:df:11:
         b7:d1:2f:fb:65:e6:cf:72:08:3f:79:6c:9e:37:9b:2a:a8:16:
         91:4a:f0:46:0d:23:6e:76:d3:59:22:0a:61:99:a4:3e:c5:c8:
         9c:54:5a:b0:60:bf:c9:05:7d:6f:b0:e8:00:8a:20:45:00:ca:
         94:c2:49:88:25:d9:e6:1f:8f:bf:c3:70:b4:6c:1e:48:df:07:
         3b:21:be:33:cc:63:3e:c2:1c:4b:2c:9e:ae:e0:c0:48:f2:6a:
         c0:75:1e:6f:7d:ec:c2:f1:31:f2:ab:21:e8:04:f1:3b:02:1e:
         49:99:d3:45:3c:87:da:f6:ce:87:2b:8d:d6:f9:ef:4c:37:99:
         3a:c8:6d:ac:09:c9:04:a4:7c:24:ae:02:cb:14:08:7d:9a:e7:
         2b:61:9e:71:6a:5a:7d:3d:1c:0a:c9:44:11:44:70:75:8b:14:
         19:8a:f0:1a:76:63:35:e6:64:6c:b2:02:29:ec:38:8d:00:a4:
         1e:45:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:33:45 2026 by rpki-client