Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa
File:                     C6D2655A58CE11ECB7F30755C4F9AE02.roa (raw, json)
Hash identifier:          sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=
Subject key identifier:   4C:51:51:A7:DD:ED:5A:4E:63:52:C8:93:4E:4A:09:DA:63:27:CD:C6
Certificate issuer:       /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Certificate serial:       04E6
Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:08:37 +0000
ROA not before:           Thu 05 Feb 2026 10:20:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     1299
IP address blocks:        202.163.0.0/19 maxlen: 19
                          2407:1600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl
                          rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
        Validity
            Not Before: Feb  5 10:20:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46485-8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:47:bc:74:9b:9a:15:9f:34:f0:39:16:c6:
                    81:22:6f:74:0d:5e:63:77:c6:cd:c6:de:e6:43:16:
                    95:37:b5:ba:98:20:81:64:a0:68:84:c1:29:0f:1e:
                    5b:58:2b:05:6c:7a:3c:8a:81:25:76:b3:f5:00:9e:
                    ba:40:ec:b1:4d:01:86:3c:0c:6b:d9:86:9b:d6:ac:
                    eb:62:73:e9:d4:18:28:3a:c6:c5:56:1c:61:9f:15:
                    ad:38:56:77:ac:c7:97:df:7f:6e:69:40:7e:88:23:
                    99:ea:f4:fb:bf:a8:89:8b:5d:b0:87:e1:3d:69:b4:
                    eb:d3:98:25:e4:bb:2c:9c:7d:ef:ea:43:f4:f9:aa:
                    ad:e9:25:76:82:c5:60:6e:79:dc:64:70:c0:0b:93:
                    98:fc:46:08:6c:ca:ff:ae:20:65:d2:ae:c1:b8:a7:
                    0a:07:6a:f9:f6:22:b2:5e:26:8b:a0:72:89:48:1e:
                    96:2a:27:cb:f7:a3:e4:25:92:a3:6e:04:54:2c:72:
                    8f:94:11:84:0d:02:47:91:f5:c3:53:a8:f6:df:86:
                    30:49:3e:88:af:81:76:fb:81:bd:89:57:96:a9:9e:
                    26:55:69:88:d6:26:69:e6:19:47:ea:3c:bf:53:e7:
                    27:da:fd:30:00:fe:8e:0a:19:85:50:68:74:25:91:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:51:A7:DD:ED:5A:4E:63:52:C8:93:4E:4A:09:DA:63:27:CD:C6
            X509v3 Authority Key Identifier:
                keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.163.0.0/19
                IPv6:
                  2407:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:17:62:b8:dc:ea:f7:ae:24:9b:96:bc:d8:fd:87:74:6d:df:
         7e:25:bd:c7:42:76:75:d9:ff:e6:b1:30:1a:37:06:21:0f:3b:
         32:49:02:1f:01:10:65:66:26:00:ab:ae:5d:5f:2d:29:a7:98:
         5e:be:9f:ae:7b:da:81:1d:0a:c1:df:38:8f:37:22:a5:76:89:
         55:56:89:1a:56:48:29:87:01:80:6b:62:18:e8:9f:de:3b:d2:
         62:55:df:84:ce:ce:ba:38:19:7e:d1:73:64:69:84:8f:f9:28:
         e8:aa:47:0a:33:cd:11:c5:23:fa:9d:bf:b0:a5:f9:cf:18:cc:
         23:87:16:59:df:6e:0d:fe:c2:1d:6c:51:d4:37:99:9e:4c:3d:
         6a:f0:fc:2c:13:ca:77:b3:d7:57:30:67:13:f0:76:4f:a2:09:
         10:75:3b:df:02:ad:47:38:61:88:19:d4:ca:1f:ce:21:7c:b9:
         07:ee:5a:bd:2c:52:14:e5:9f:af:0f:24:e9:96:24:9f:6e:bd:
         d1:65:e5:d3:21:ec:74:a4:aa:72:b8:f6:6c:55:b9:fa:e1:4c:
         d5:5b:60:2c:17:e2:ab:34:b2:d9:e3:b0:df:d3:19:38:d6:8f:
         b6:f9:1e:7f:4d:eb:ab:4f:e5:77:54:d2:d4:32:5b:1e:02:44:
         12:7a:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:16:46 2026 by rpki-client