Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6A4CFDF2CFEB11F08B839838C4F9AE02.roa
File:                     6A4CFDF2CFEB11F08B839838C4F9AE02.roa (raw, json)
Hash identifier:          9jyAvIyV1OlPF0d6mHiVerv4JVbecfoxwK6m8wjGhKg=
Subject key identifier:   CC:6E:D6:21:12:D3:EC:19:77:A3:D0:F2:74:C5:DC:4E:1C:F6:04:78
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       194A
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6A4CFDF2CFEB11F08B839838C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:32:48 +0000
ROA not before:           Wed 03 Dec 2025 01:57:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        116.90.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6474 (0x194a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Dec  3 01:57:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59180-b7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:40:fd:5d:c0:ac:1e:14:50:a0:7d:00:06:
                    18:00:16:44:c5:92:d0:a6:5e:b9:c9:cd:d2:30:44:
                    58:2d:93:a1:05:d3:6c:55:d1:9a:39:8d:36:2a:66:
                    16:b4:29:17:e5:74:ec:7c:da:f4:30:4f:aa:87:e2:
                    0c:71:ac:97:61:d4:d3:d8:a0:91:5c:83:a0:09:d9:
                    b4:f7:51:de:24:0e:ca:73:30:40:13:b9:07:62:7a:
                    d6:ff:33:f0:bf:84:11:9c:15:90:98:a0:6f:14:01:
                    2c:76:6b:fd:d5:12:c5:70:fd:0d:15:7d:ea:13:13:
                    a0:74:37:9d:88:4e:00:15:21:ab:0a:22:37:6a:f7:
                    21:ab:79:79:c6:b7:e0:ef:10:3b:a2:e1:06:33:36:
                    13:f3:df:ee:27:f6:9f:60:5b:6f:9d:a0:f6:e5:2c:
                    9c:e6:e8:ca:39:23:56:10:0c:13:9a:14:e7:68:fb:
                    60:a3:b6:09:9d:08:a2:ee:b0:b7:87:4d:b2:7d:2f:
                    80:c1:bf:36:6c:50:2e:9d:5a:0d:e3:a9:91:4e:0e:
                    29:8a:29:42:ac:55:aa:82:36:e9:06:ed:0f:84:23:
                    b5:33:15:0a:07:b4:86:28:00:27:78:6d:dc:7e:ac:
                    a7:53:46:cb:73:3e:68:1a:9a:ac:c3:eb:3a:12:51:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:D6:21:12:D3:EC:19:77:A3:D0:F2:74:C5:DC:4E:1C:F6:04:78
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6A4CFDF2CFEB11F08B839838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:7b:e6:ad:7e:c5:73:e8:d2:a0:36:36:56:40:48:a2:bd:
         d2:6a:14:bf:a5:e7:21:78:1f:80:bc:13:0f:6a:55:e8:64:f0:
         3b:94:cb:bb:eb:33:42:f8:64:33:84:90:74:40:2e:f1:05:c2:
         b3:68:52:74:30:3f:df:b4:a7:f2:19:6e:02:57:64:39:b3:f3:
         a0:f1:48:a6:a8:f4:2d:f5:b4:18:1d:47:fb:ec:06:c4:f6:bd:
         90:58:3a:4a:70:39:04:31:82:8a:31:d4:59:15:ce:43:36:bd:
         97:6a:fe:50:ae:ec:9b:c3:68:b9:6d:0f:f0:a3:ad:e2:1a:5a:
         fc:c9:80:28:be:f7:24:6d:7c:54:4d:61:9b:ee:ab:6f:e8:ed:
         0b:22:86:1d:6e:5c:16:7b:04:c1:d3:ab:48:94:6d:ee:3f:27:
         51:f5:eb:aa:43:de:7c:78:f5:72:03:fa:d5:c8:64:1d:e4:95:
         f4:23:d4:53:b9:3f:71:af:7b:b4:03:fc:06:3f:ae:ad:17:07:
         7c:ab:31:5a:01:3f:cb:ca:4c:c7:57:c6:48:39:32:42:9d:66:
         c7:b4:24:47:39:eb:bf:cc:03:05:c6:9c:75:40:88:24:29:98:
         26:54:64:8f:34:ef:91:f3:20:00:ed:8f:97:0b:ea:b7:e5:10:
         20:07:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:54:05 2026 by rpki-client