Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
File:                     6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (raw, json)
Hash identifier:          K305m9uOZTuOTkPiVHWrrTbPAlJ8kkqXBF99r+NCmzY=
Subject key identifier:   83:B3:35:12:43:A8:06:C8:29:4C:1D:CC:73:61:C4:89:C5:CE:11:DE
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       19D9
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:29:25 +0000
ROA not before:           Thu 30 Jul 2026 17:29:25 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     26337
IP address blocks:        110.173.128.0/19 maxlen: 24
                          111.118.160.0/20 maxlen: 24
                          116.90.0.0/18 maxlen: 24
                          182.160.128.0/18 maxlen: 24
                          203.19.59.0/24 maxlen: 24
                          203.98.73.0/24 maxlen: 24
                          203.98.75.0/24 maxlen: 24
                          203.98.80.0/24 maxlen: 24
                          203.98.84.0/24 maxlen: 24
                          203.98.91.0/24 maxlen: 24
                          203.123.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 16:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6617 (0x19d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 17:29:25 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b89f5-6511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:af:e9:e5:9e:36:63:a5:80:12:0f:5d:b5:
                    fc:35:7d:14:f1:d6:ec:50:2d:29:ef:15:12:17:54:
                    12:cb:0f:17:8b:98:01:03:8d:12:a8:4a:61:a7:03:
                    bc:b9:1d:d4:b5:cf:9e:09:81:1d:5a:cf:f2:08:e2:
                    39:20:a4:06:fd:84:84:db:d7:96:56:ef:e3:3f:e7:
                    52:a5:ff:9c:9f:c7:06:96:17:ab:01:09:a7:d3:3b:
                    ba:bf:31:af:ed:cb:d1:57:f8:f2:5f:3a:43:f2:b7:
                    b8:e5:44:de:f9:e4:ee:b3:96:5c:04:a4:c2:27:b1:
                    5a:c2:a8:cf:94:9c:70:20:32:3f:ae:d2:32:0b:79:
                    70:f4:af:9e:87:09:de:4c:ce:59:64:b2:d5:37:9c:
                    ed:b9:88:93:11:4d:d1:4d:79:24:db:ee:e3:75:70:
                    87:87:a1:6e:78:bf:d5:dc:82:63:b9:ad:e4:fa:14:
                    ca:d4:93:25:91:2c:48:a9:72:78:a2:db:d0:eb:06:
                    c1:cf:2a:63:d4:d0:ff:e0:1e:12:2b:5d:f0:f2:f6:
                    a2:dc:c7:8e:55:f1:00:5a:2f:f5:90:59:b2:19:d7:
                    12:7d:13:8f:33:9d:5b:47:36:d2:ea:4e:a5:f4:d2:
                    97:23:19:87:2a:91:80:6e:00:3a:45:b9:37:af:43:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:35:12:43:A8:06:C8:29:4C:1D:CC:73:61:C4:89:C5:CE:11:DE
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.128.0/19
                  111.118.160.0/20
                  116.90.0.0/18
                  182.160.128.0/18
                  203.19.59.0/24
                  203.98.73.0/24
                  203.98.75.0/24
                  203.98.80.0/24
                  203.98.84.0/24
                  203.98.91.0/24
                  203.123.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:28:0c:01:2c:68:79:df:57:4e:65:03:89:84:78:d6:28:
         07:ed:01:76:36:ad:63:7c:29:cf:fc:9a:27:09:ad:87:4c:74:
         b1:0a:3d:14:2c:bb:a1:94:ea:19:3d:0e:db:47:42:05:2f:96:
         f2:95:3b:d8:fa:39:b6:e9:0b:d1:74:d5:8a:d9:b7:9c:d3:be:
         10:92:d9:a8:44:49:c0:a8:2d:2d:5a:82:9e:0f:93:db:f9:8e:
         95:69:e8:8e:45:9a:e5:4b:64:7b:f8:8e:fd:37:c5:71:40:98:
         2d:2d:13:0d:55:f1:03:c2:8d:ff:2b:3b:b3:0e:df:c2:5b:59:
         72:db:39:4b:f9:72:f6:a3:4e:52:b6:e9:53:a9:0f:88:88:14:
         88:b3:23:85:cb:b0:7c:7d:49:1d:42:fb:63:54:4b:4d:9f:f6:
         3a:1b:38:5e:70:92:b8:4e:ac:07:4e:35:a4:9e:8b:ca:99:89:
         c0:3f:c7:ee:dc:99:f6:8e:6e:bb:74:f5:ca:5f:89:06:77:c3:
         2a:0b:67:50:26:e4:68:cb:f9:93:48:72:f7:cd:e8:06:63:0e:
         04:40:3e:a5:f8:da:10:ff:c5:ac:97:99:69:18:ed:d8:80:cd:
         e2:19:d2:19:35:06:aa:b5:67:c4:b7:d9:e8:7e:16:28:2b:51:
         97:43:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:12:35 2026 by rpki-client