Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
File:                     A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (raw, json)
Hash identifier:          M6pucHFMXfG0koXLLg4E/7INSEC19wV7hM909Gs8BUM=
Subject key identifier:   C5:49:13:E2:AD:8F:67:4F:DE:91:B8:11:98:1A:40:FB:1C:46:A1:C8
Certificate issuer:       /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial:       0CA1
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
Signing time:             Wed 28 Jan 2026 19:15:45 +0000
ROA not before:           Wed 28 Jan 2026 19:15:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38565
IP address blocks:        36.252.0.0/15 maxlen: 23
                          36.253.19.0/24 maxlen: 24
                          36.253.24.0/24 maxlen: 24
                          36.253.26.0/24 maxlen: 24
                          43.243.96.0/22 maxlen: 24
                          49.126.0.0/16 maxlen: 20
                          103.38.196.0/22 maxlen: 24
                          116.68.208.0/21 maxlen: 24
                          2400:9500::/32 maxlen: 32
                          2400:9500:4000::/36 maxlen: 44
                          2400:9500:6000::/36 maxlen: 44
                          2400:9500:8000::/36 maxlen: 44
                          2400:9500:c000::/36 maxlen: 44
                          2400:9500:e000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
                          rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
        Validity
            Not Before: Jan 28 19:15:45 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=697a6061-72b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:af:1e:12:ee:fb:8c:fa:88:9a:e4:17:07:
                    dc:04:1b:51:a3:bb:8a:d5:a0:f5:e5:31:96:13:91:
                    3f:b5:90:7f:b8:51:95:e6:12:86:61:1e:bb:7c:ec:
                    b8:28:40:f0:22:26:48:1b:b8:1b:0e:35:a0:19:55:
                    ec:4a:0f:08:04:e0:f0:39:4e:41:97:8b:69:1c:da:
                    68:96:05:75:6d:16:6d:2f:38:19:51:2d:37:67:be:
                    9a:8f:66:65:0d:93:36:43:2a:90:37:25:e5:39:81:
                    bd:e8:fc:8b:4f:73:4d:a6:bf:e3:89:bd:69:a4:2a:
                    c5:fd:23:ad:6f:26:c5:d5:6a:85:97:fa:90:4b:e7:
                    30:4e:56:6d:20:8d:e4:a8:45:90:4b:4d:f5:67:3d:
                    13:d9:c8:3f:a6:11:d3:50:7d:ed:13:b5:44:7c:c9:
                    90:03:16:e2:57:aa:b4:95:9c:17:a2:f2:9b:04:f5:
                    45:67:d7:d8:99:92:6e:18:0b:71:3a:d0:3f:63:51:
                    38:e4:db:b7:1c:c7:5c:6e:62:4f:f2:79:d5:6b:3a:
                    35:2c:a4:f5:0b:74:f1:37:0c:04:5f:95:fa:ae:0a:
                    46:c7:8e:52:9d:b3:90:dc:5e:c1:4d:f7:9f:0d:e8:
                    8d:85:f6:fd:bb:ce:09:cb:06:a9:fc:e5:b7:d8:b8:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:13:E2:AD:8F:67:4F:DE:91:B8:11:98:1A:40:FB:1C:46:A1:C8
            X509v3 Authority Key Identifier:
                keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/A6A53FA2D67E11EEAA2CA218C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.252.0.0/15
                  43.243.96.0/22
                  49.126.0.0/16
                  103.38.196.0/22
                  116.68.208.0/21
                IPv6:
                  2400:9500::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:bd:13:36:6f:ef:0a:69:64:a5:ae:d2:cd:0c:63:f1:47:
         09:8e:ed:b1:0b:f8:61:40:89:89:dd:d1:1d:54:96:8a:fa:82:
         c2:60:f8:73:ec:32:a8:6b:f8:7f:42:52:e6:30:a0:1b:3b:80:
         bb:4d:4a:11:43:d3:2c:91:d6:ac:d6:d0:28:88:cc:b5:a0:d5:
         7d:92:d9:ca:48:b1:da:82:15:c8:ec:ec:08:60:d6:58:81:81:
         33:c8:0f:e0:44:53:e6:bf:c3:8d:07:0f:42:f9:17:f9:dd:f5:
         7d:e0:6e:13:7d:13:53:7b:06:23:51:87:f1:d1:a6:35:ad:16:
         94:41:b4:55:c8:93:4f:d9:d6:35:81:4c:dd:6c:c5:f0:fb:1d:
         c5:4c:b9:20:42:80:cc:fb:5d:de:6f:34:79:91:39:5f:1a:7e:
         f8:b1:3e:b5:cf:7d:d1:78:07:e7:f1:23:45:4a:51:07:d2:3e:
         b7:e0:33:8f:ec:4a:4c:e0:f7:e8:c2:64:c4:0c:9c:fe:97:79:
         b4:ec:d4:2e:27:68:2d:64:3d:df:d9:8c:82:3c:8d:90:2d:c9:
         e5:f5:c3:e4:16:e6:62:8c:24:16:00:1b:eb:b4:93:38:75:26:
         94:90:35:01:ec:66:f5:db:ef:b0:99:16:f4:bd:87:61:8a:56:
         ad:01:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:59 2026 by rpki-client