Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
File:                     6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (raw, json)
Hash identifier:          utR/09O0AGP/257BXicDFWozKqlEHDXtcXIiW8htsC0=
Subject key identifier:   AA:DD:8A:11:8A:99:7A:50:47:12:EC:D0:9A:B7:D8:6D:67:9F:67:22
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       194B
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:32:49 +0000
ROA not before:           Wed 03 Dec 2025 01:57:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     26337
IP address blocks:        116.90.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6475 (0x194b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Dec  3 01:57:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59180-7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:49:43:fd:9f:d5:43:9a:b5:9f:e1:48:10:
                    4a:c9:50:49:95:1b:9e:86:44:c8:54:5b:06:b7:66:
                    13:4b:55:46:46:63:37:5d:05:96:14:26:60:2a:13:
                    1d:da:72:16:2b:46:eb:71:b1:e3:29:2b:a1:64:8c:
                    f4:29:72:44:32:6a:70:1a:cf:d6:74:c2:57:1c:04:
                    bd:6b:f0:0e:9b:c1:b7:49:3f:ae:f4:f9:6b:91:13:
                    ce:e1:bf:55:4f:1c:1e:06:35:8d:14:79:51:4e:ef:
                    0d:72:99:fd:76:a9:46:fe:31:37:a9:a0:07:44:f8:
                    d6:e6:e5:21:a7:9c:99:56:d7:e1:96:dd:51:4c:03:
                    c2:f5:5b:46:2c:2f:7b:fd:52:e6:19:49:b5:95:ef:
                    d2:ea:34:24:d1:3f:c9:5b:b2:92:37:37:67:30:9f:
                    5f:0a:01:fc:8b:21:cb:e0:c9:f5:88:1e:a9:d7:48:
                    27:ab:1d:48:81:28:84:a6:74:c1:54:33:6c:b6:18:
                    99:83:c8:e0:10:e4:97:c0:3c:e8:ec:d8:5c:de:49:
                    0a:00:c7:10:3a:c0:31:b3:5c:91:f1:d9:8c:1c:05:
                    8c:43:56:ec:88:38:af:61:ef:6c:6f:43:88:b3:4e:
                    99:6c:72:a3:ca:10:1b:2f:1f:68:6f:15:3a:bd:fe:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:8A:11:8A:99:7A:50:47:12:EC:D0:9A:B7:D8:6D:67:9F:67:22
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:35:57:a2:22:2d:70:bf:75:20:3d:64:6d:ba:c7:31:72:
         2a:84:72:dc:88:ba:d7:ba:19:d5:0c:a2:21:94:1d:83:22:0f:
         41:bd:22:73:c8:3b:6a:d3:02:7a:ea:27:b2:0f:e9:d3:59:74:
         9f:1a:a7:01:3b:c3:9d:2d:3d:24:4e:ab:b0:15:14:db:0f:f3:
         c4:47:ee:6e:10:7c:fc:b7:a0:e4:ca:46:bd:33:04:ee:3c:17:
         db:bd:53:21:f5:da:65:d6:09:1a:42:11:75:0a:e4:c9:80:8f:
         84:12:29:97:3f:6e:c3:6f:61:ae:dc:01:7c:d6:fa:ac:73:15:
         dc:8d:5d:aa:60:2d:40:b2:17:8a:43:6a:a5:df:4f:97:c8:f9:
         70:92:62:33:f4:76:68:a4:0e:43:0e:6d:b1:41:16:56:cf:09:
         92:cb:93:3c:a1:fa:2d:0b:24:b3:85:4c:06:74:72:3b:a4:72:
         ac:41:33:6f:50:f8:1e:bd:df:02:2e:84:c9:4f:cd:2b:c3:ac:
         26:5b:b0:43:87:7a:56:ef:83:02:b7:44:b3:05:68:67:0e:30:
         76:ef:80:05:02:8e:2d:25:4c:b9:da:a5:d7:be:e3:03:20:b9:
         fa:89:33:31:c1:87:54:1d:c2:fc:ae:00:aa:4f:53:f0:a4:59:
         14:85:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:13:13 2026 by rpki-client