Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
File:                     C6618F98BD0511EB9BB8C97CC4F9AE02.roa (raw, json)
Hash identifier:          F0cc31VKiHf4FHRnIogdqDRTUiKEa4Y47dIXKp1tdro=
Subject key identifier:   13:1C:C7:4F:2E:2F:00:F2:2A:46:D6:B2:49:E7:B1:C3:56:B2:4A:C6
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       1401
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:49:58 +0000
ROA not before:           Wed 06 Aug 2025 17:26:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4632
IP address blocks:        192.131.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5121 (0x1401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  6 17:26:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a516f6-ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:70:48:16:7f:52:29:49:c9:2e:94:5b:72:
                    46:78:23:c8:4c:3f:ec:91:82:2a:20:fa:b4:e5:e1:
                    b5:25:92:12:13:9a:a1:dd:98:c9:4a:68:58:39:f3:
                    bc:bb:c9:8f:b4:91:56:40:15:90:82:10:1b:a1:96:
                    ed:69:76:09:8d:64:7f:ac:eb:eb:f8:10:13:17:2e:
                    8a:f5:8d:52:d6:af:98:c8:c5:23:b6:f3:82:b0:2c:
                    71:f9:f8:59:97:a5:55:e1:ff:d1:36:6a:e5:cd:df:
                    ed:e5:e1:5b:fe:b5:55:e6:4a:9f:93:08:c0:44:92:
                    50:d7:6d:8e:30:38:1f:09:bb:a1:2b:4a:b1:90:61:
                    01:42:cd:d4:11:65:99:78:0e:dc:df:ad:16:37:e3:
                    49:07:fd:8a:3c:75:a4:10:d2:75:75:77:b4:b4:53:
                    6a:b5:88:57:e1:cb:58:a7:a9:2a:2d:3e:a3:39:f8:
                    ad:97:15:06:2f:33:ed:13:d2:2a:6b:78:74:4d:40:
                    04:38:0e:1f:d8:31:1d:ec:ba:33:32:44:cd:bb:0e:
                    56:ca:d6:4f:92:76:27:e1:26:ac:b9:d2:76:6d:ae:
                    37:9a:d8:76:48:a2:17:0a:63:0d:f7:c0:fe:c6:9d:
                    fd:f9:a2:43:ca:ae:e8:fa:e3:5c:9b:90:2f:0f:9c:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:C7:4F:2E:2F:00:F2:2A:46:D6:B2:49:E7:B1:C3:56:B2:4A:C6
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:63:35:d9:18:7c:d7:9c:6f:4e:86:c4:11:2e:62:6f:d5:
         04:e8:bd:05:5f:03:98:f5:e3:f4:03:48:ee:d0:cd:d4:95:75:
         85:9b:5f:23:41:f0:1f:93:9d:c8:ba:0b:99:d1:6f:46:b5:80:
         54:bd:b2:19:98:3d:1f:1e:bc:de:30:35:4a:5b:9e:07:20:f0:
         ce:0d:6b:61:e3:a2:b0:bb:82:6e:8a:ce:bb:8d:49:d6:6a:4b:
         cf:49:80:a8:4b:00:f2:9e:72:c3:17:b4:1e:80:6e:9d:80:f4:
         f9:61:75:10:92:3c:cc:a5:de:4b:51:a9:e7:18:3e:85:ae:5b:
         28:a9:e1:2e:65:91:c4:e6:25:ee:44:0a:15:fd:7e:69:6a:cb:
         08:5c:70:a4:f9:7e:f3:e6:90:e8:93:41:f2:35:9f:b4:3d:58:
         25:fa:f2:a0:c7:32:e7:73:cd:23:89:cf:7d:a6:8d:3a:40:3b:
         42:ce:4f:4b:f2:6a:37:7a:39:1c:7e:c9:a0:41:c9:e2:14:af:
         f0:6b:79:0e:d8:1d:11:07:d6:7a:20:ab:06:31:1a:8a:7b:08:
         cb:df:6f:a4:77:82:82:17:22:37:63:de:e4:e3:15:a5:d8:be:
         e3:78:0f:cd:10:5f:ca:87:9d:63:a6:26:7e:85:8b:93:32:fa:
         6b:f1:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:48:04 2026 by rpki-client