Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa
File:                     C6454260AA9A11E7B4776E52C4F9AE02.roa (raw, json)
Hash identifier:          Vi/z+ybxC9owzZhA5rem9ojMHdxbp7LyWOc9Ai5M6UA=
Subject key identifier:   CD:EE:29:5C:14:0F:EB:81:EE:25:C5:9D:D7:6E:54:B9:F8:88:68:8B
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       195A
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:32:40 +0000
ROA not before:           Sun 30 Aug 2026 16:32:40 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17929
IP address blocks:        103.246.196.0/22 maxlen: 22
                          103.246.196.0/24 maxlen: 24
                          103.246.197.0/24 maxlen: 24
                          103.246.198.0/24 maxlen: 24
                          103.246.199.0/24 maxlen: 24
                          2407:e500::/47 maxlen: 47
                          2407:e500:2::/47 maxlen: 47
                          2407:e500:4::/47 maxlen: 47
                          2407:e500:6::/47 maxlen: 47
                          2407:e500:60::/47 maxlen: 47
                          2407:e500:70::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 16:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6490 (0x195a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Aug 30 16:32:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a945b28-5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:7b:bd:ad:ea:88:d7:61:cb:d5:f0:ee:e9:
                    9d:23:c6:e2:5d:4f:bb:37:9e:00:78:fe:7f:95:f9:
                    8a:a9:50:eb:9d:b8:95:f0:b0:f7:dd:50:7f:2c:95:
                    50:a7:e1:70:26:47:f0:e4:60:ac:31:9f:cf:ae:4c:
                    4a:3e:6e:ea:a3:25:80:fa:03:06:0a:75:d5:6b:7c:
                    35:42:ca:fa:1d:55:12:e3:ec:30:be:36:75:7e:c1:
                    a1:f3:6d:0b:54:1d:c7:9c:92:6e:ed:36:50:b9:1c:
                    d4:c4:9a:cb:27:a4:fc:49:6b:f6:24:9b:57:18:17:
                    da:f5:67:4d:58:91:53:64:40:90:4b:44:dc:13:47:
                    9c:1a:0e:2a:25:00:bf:1b:1e:85:f6:50:9b:ed:c2:
                    fa:61:8e:2b:78:35:66:f4:69:a2:15:10:40:99:07:
                    44:19:57:e2:34:83:37:82:5a:12:59:09:cc:40:bd:
                    6d:32:12:72:d0:2f:cf:ae:e7:d8:ed:71:15:6d:2c:
                    78:2c:06:dc:7e:c8:13:72:ba:32:fc:80:56:dc:01:
                    f9:07:12:31:00:40:bc:47:58:de:9f:64:36:2b:ad:
                    c1:98:8c:9b:7f:e1:3c:aa:bb:f8:bb:0b:2c:bc:04:
                    e2:3a:12:bb:2a:51:6c:30:21:3a:b8:32:4a:49:aa:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:29:5C:14:0F:EB:81:EE:25:C5:9D:D7:6E:54:B9:F8:88:68:8B
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/C6454260AA9A11E7B4776E52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.196.0/22
                IPv6:
                  2407:e500::/45
                  2407:e500:60::/47
                  2407:e500:70::/47

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:ea:81:8a:e3:c3:c7:c0:56:8d:03:5c:cf:ca:5d:fe:ff:
         2e:78:54:3a:cf:5f:47:fa:fe:89:32:6e:18:87:50:75:3e:e6:
         c7:de:e6:55:ea:1f:a5:1f:6d:c3:3d:b4:d2:33:9c:0e:b2:2c:
         a5:39:02:7f:b0:eb:dc:58:40:7e:f9:ae:db:05:07:48:09:41:
         51:b7:49:b9:31:dd:f9:07:3d:2a:a0:33:9e:8c:e9:1d:f0:66:
         9e:ba:4a:de:a3:c4:34:c7:44:7a:f5:59:d5:f4:52:cf:75:f4:
         34:48:b4:40:4a:02:5f:22:94:9f:c9:a8:73:e6:14:a6:c9:c1:
         2f:66:b7:73:a8:6d:2e:b4:1f:09:21:4c:ae:53:10:e4:f8:af:
         7f:47:83:49:5d:f8:58:90:af:f3:6e:b2:70:ac:54:78:83:71:
         87:ce:76:da:92:ac:1a:d3:67:1f:ba:db:a4:81:19:f5:2c:a6:
         1a:2b:fe:61:65:a5:89:93:eb:d1:a7:08:94:09:fb:c4:63:fe:
         b0:d7:08:84:11:da:b2:9f:81:3c:07:58:66:ee:7b:bf:2d:2a:
         59:4f:d4:2d:d1:5b:ca:55:8f:34:71:6e:fc:1b:e1:55:4b:6d:
         19:ba:c0:e3:42:e5:60:6b:86:39:24:cd:ee:25:b3:b8:08:1f:
         c3:02:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:15 2026 by rpki-client