Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
File:                     6C1DC926C3E111E9A0172583C4F9AE02.roa (raw, json)
Hash identifier:          6SHyjQmk2UQ9OjE043q684542svK+61l0uj5f8dUL5g=
Subject key identifier:   26:8B:2C:A5:FA:9F:70:2E:E9:76:43:08:7A:B9:13:49:68:35:B8:9E
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B9B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:23:55 +0000
ROA not before:           Thu 20 Aug 2026 16:23:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24211
IP address blocks:        103.49.220.0/22 maxlen: 22
                          103.49.220.0/23 maxlen: 23
                          103.49.222.0/23 maxlen: 23
                          203.190.240.0/21 maxlen: 21
                          203.190.244.0/23 maxlen: 23
                          203.190.246.0/23 maxlen: 23
                          2402:a000::/32 maxlen: 32
                          2402:a000::/48 maxlen: 48
                          2402:a000:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15259 (0x3b9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a1b-5ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:4b:cc:66:5d:09:3c:48:ba:3d:9f:bd:33:
                    e6:a1:5a:e1:43:91:ab:fe:ee:11:78:12:28:30:5e:
                    56:16:4f:d6:b5:d3:f3:fc:26:ae:45:59:6f:d5:b4:
                    82:12:3c:2d:5d:1b:ef:f0:f1:37:31:5d:56:c2:10:
                    52:73:32:8c:2a:5c:eb:05:3c:cb:47:69:bc:9f:68:
                    cb:91:29:e4:ac:ff:dc:24:2b:ff:90:d1:33:4d:00:
                    ac:a3:c0:91:4d:bf:24:84:99:21:56:62:c7:7f:9d:
                    52:b1:89:4c:31:13:56:94:28:0c:55:b8:a5:60:15:
                    49:8e:37:f1:52:1a:4e:c8:8e:32:d2:d2:ce:ea:39:
                    83:8c:82:f9:98:c7:fa:5c:6d:95:ab:df:b3:43:d5:
                    fb:44:99:d5:88:48:ae:62:d3:88:a4:68:f4:a4:8f:
                    36:2b:68:1d:12:33:ef:25:31:b0:e5:1a:9b:ed:6f:
                    b9:36:75:31:d2:c8:a7:c0:1f:4c:07:a2:0d:00:8c:
                    c5:19:68:a4:04:f4:31:15:4f:a1:d8:77:00:e6:e4:
                    5f:85:e9:d2:ab:90:19:f4:19:03:dc:b0:3b:37:b5:
                    3f:cb:1e:c6:6b:75:ce:3f:b9:cb:c3:0c:60:6f:54:
                    64:0d:9a:7c:47:96:ca:5b:95:4e:19:7c:b1:aa:21:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:2C:A5:FA:9F:70:2E:E9:76:43:08:7A:B9:13:49:68:35:B8:9E
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.220.0/22
                  203.190.240.0/21
                IPv6:
                  2402:a000::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:48:7e:d6:7b:8b:60:df:3e:f3:57:ee:f0:04:06:ad:41:
         f3:6a:21:52:5b:34:2c:a1:7d:66:e2:4b:47:10:1a:f3:b6:fd:
         26:1e:fb:63:74:85:c0:05:d3:93:35:36:49:36:78:90:c8:45:
         c5:56:ce:c0:74:c3:d8:ab:ac:42:85:95:0d:a3:04:42:b2:03:
         d1:59:1d:aa:9d:83:05:19:ff:ad:0a:da:86:ac:45:e3:f5:a1:
         53:bd:e1:a8:e6:72:7e:d2:0e:e4:22:6e:f2:57:89:59:e6:09:
         9c:7e:a9:f6:57:81:a1:48:2a:05:98:7a:8a:de:05:12:4f:bc:
         b5:50:a4:a0:8b:3d:f7:56:44:d6:43:33:96:41:ad:71:b1:d1:
         c9:ca:e7:38:1f:3c:d6:3b:86:83:c8:0b:98:47:c6:7d:1d:76:
         97:5e:64:21:1d:54:50:ce:21:9f:af:c5:54:d1:71:7d:65:bc:
         47:17:95:f6:57:d1:4c:9d:08:1a:8b:78:ff:50:57:59:c9:0a:
         84:c7:7d:e1:eb:f7:b6:01:91:3e:29:6a:74:a2:17:df:6a:01:
         32:a8:82:69:1d:b7:a5:95:90:8d:5d:91:c6:6d:5d:9e:91:44:
         4c:15:57:63:aa:5f:70:d4:9c:93:bb:c4:75:79:85:9d:e0:89:
         67:c5:df:28
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICO5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyMzU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MmExYi01Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa1LzGZdCTxIuj2fvTPmoVrhQ5Gr/u4ReBIoMF5WFk/WtdPz/CauRVlv1bSC
EjwtXRvv8PE3MV1WwhBSczKMKlzrBTzLR2m8n2jLkSnkrP/cJCv/kNEzTQCso8CR
Tb8khJkhVmLHf51SsYlMMRNWlCgMVbilYBVJjjfxUhpOyI4y0tLO6jmDjIL5mMf6
XG2Vq9+zQ9X7RJnViEiuYtOIpGj0pI82K2gdEjPvJTGw5Rqb7W+5NnUx0sinwB9M
B6INAIzFGWikBPQxFU+h2HcA5uRfhenSq5AZ9BkD3LA7N7U/yx7Ga3XOP7nLwwxg
b1RkDZp8R5bKW5VOGXyxqiH+IQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCaLLKX6
n3Au6XZDCHq5E0loNbieMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkMxREM5MjZD
M0UxMTFFOUEwMTcyNTgzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZzHcAwQDy77wMA0EAgACMAcDBQAkAqAAMA0GCSqGSIb3DQEBCwUA
A4IBAQChHkh+1nuLYN8+81fu8AQGrUHzaiFSWzQsoX1m4ktHEBrztv0mHvtjdIXA
BdOTNTZJNniQyEXFVs7AdMPYq6xChZUNowRCsgPRWR2qnYMFGf+tCtqGrEXj9aFT
veGo5nJ+0g7kIm7yV4lZ5gmcfqn2V4GhSCoFmHqK3gUST7y1UKSgiz33VkTWQzOW
Qa1xsdHJyuc4HzzWO4aDyAuYR8Z9HXaXXmQhHVRQziGfr8VU0XF9ZbxHF5X2V9FM
nQgai3j/UFdZyQqEx33h6/e2AZE+KWp0ohffagEyqIJpHbellZCNXZHGbV2ekURM
FVdjql9w1JyTu8R1eYWd4Ilnxd8o
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:10 2026 by rpki-client