Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
File:                     B5629336843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          f5ufXPW8gahI3Z/PeTreIN5YE9okS84HwEbPwnN11B0=
Subject key identifier:   BA:5D:AF:D9:66:22:5A:D7:FF:68:06:D7:D1:70:6E:8E:DB:5F:3F:A6
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       19D5
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:29:18 +0000
ROA not before:           Thu 30 Jul 2026 17:29:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     10145
IP address blocks:        203.98.69.0/24 maxlen: 24
                          203.98.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 16:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6613 (0x19d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 17:29:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b89ed-393f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:2b:52:a3:7a:a7:24:ce:e7:eb:aa:34:ed:
                    a5:d0:64:54:10:7a:73:c7:08:39:e4:be:4f:5c:51:
                    86:f1:5a:98:b4:91:6c:dd:47:08:6b:81:74:82:57:
                    26:58:57:3a:7e:2a:94:a0:bc:9f:e5:d5:39:1d:e3:
                    cc:27:d7:2a:16:8a:20:66:bd:72:97:12:9a:f7:40:
                    df:c8:7f:db:e2:d0:e7:f4:b5:e0:38:cc:2a:0e:3d:
                    1a:57:71:90:d0:66:23:c0:71:52:9c:96:f4:a6:a9:
                    81:6a:c3:06:25:3f:94:04:d3:80:26:45:62:1b:1a:
                    4d:1f:5c:9f:ba:07:12:4d:32:47:ad:61:ac:03:19:
                    03:39:cf:8b:85:c5:3f:31:79:6e:26:23:5c:5b:53:
                    37:44:8a:4e:e1:54:ff:00:3c:55:cf:f6:89:24:76:
                    d7:4b:e6:46:fc:1f:91:bf:f5:0c:99:f8:22:ba:96:
                    17:0f:c8:3e:3e:e4:aa:5b:51:3b:85:bf:42:50:67:
                    37:01:b3:41:a4:c0:22:a8:f0:35:89:d7:d9:c1:19:
                    c3:b2:46:fb:fd:f7:d1:db:fc:3b:a7:b3:0e:fd:1f:
                    1c:30:15:6d:7b:19:53:b9:32:09:e8:16:74:e2:a0:
                    7b:08:78:0e:a0:b3:1f:55:ba:92:a2:aa:28:97:00:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:AF:D9:66:22:5A:D7:FF:68:06:D7:D1:70:6E:8E:DB:5F:3F:A6
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.69.0/24
                  203.98.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:89:4b:0a:ad:49:e4:bb:91:df:7d:de:de:07:5f:05:0b:a9:
         0a:b6:fe:cd:dd:f4:ee:82:88:34:ac:06:0c:e8:b8:b2:1e:29:
         88:90:9e:78:65:9c:f9:7b:9d:13:49:9b:18:db:49:7d:63:f7:
         89:50:13:b5:1e:2c:a0:e5:ef:e2:60:8a:4f:5f:23:29:9e:53:
         05:2f:62:05:ef:b5:1b:7b:3e:05:d0:ce:35:a4:28:5a:93:90:
         a1:8a:1e:ef:82:5b:62:13:d8:d8:69:63:e4:95:2f:7d:a4:53:
         ce:15:2e:dd:a5:0f:5a:9c:d5:58:94:81:0e:3b:41:a4:f8:5c:
         00:a7:b8:b8:06:92:18:88:e2:6a:97:27:7c:6f:ab:9e:70:89:
         d7:aa:19:05:36:65:89:e0:16:96:89:8e:c2:87:97:3a:91:a8:
         18:6a:a3:49:93:60:fd:8a:f1:fc:8b:2c:aa:d0:1c:bb:5c:c1:
         99:ea:f4:c2:c5:67:e8:29:d0:84:f1:7a:c9:f1:0a:65:26:c2:
         ea:38:d8:9a:23:a1:3f:1b:0f:0d:80:1c:51:49:7d:36:68:db:
         46:c2:11:97:17:b5:c4:ea:bb:f4:33:f1:40:12:ab:8e:74:39:
         01:c9:d0:f4:95:64:1e:11:2d:ee:39:ed:e4:0e:03:0e:0f:c7:
         9d:7c:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:37:55 2026 by rpki-client