Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa
File:                     6C18BEE0519811F08E123360C4F9AE02.roa (raw, json)
Hash identifier:          4L0qNczFCVQsT0d5qT7GZf12BVPc/HfNGs+jHWl9kBU=
Subject key identifier:   C4:BD:02:A0:3E:FF:01:4C:56:9F:9F:B6:39:DC:77:3D:0D:6D:64:81
Certificate issuer:       /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial:       0102
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 07:54:58 +0000
ROA not before:           Sat 03 Oct 2026 07:54:58 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     5400
IP address blocks:        203.158.64.0/23 maxlen: 23
                          203.158.66.0/23 maxlen: 23
                          203.158.68.0/23 maxlen: 23
                          203.158.70.0/23 maxlen: 23
                          203.158.72.0/23 maxlen: 23
                          203.158.74.0/23 maxlen: 23
                          203.158.76.0/23 maxlen: 23
                          203.158.78.0/23 maxlen: 23
                          203.158.80.0/23 maxlen: 23
                          203.158.82.0/23 maxlen: 23
                          203.158.84.0/23 maxlen: 23
                          203.158.86.0/23 maxlen: 23
                          203.158.88.0/24 maxlen: 24
                          203.158.89.0/24 maxlen: 24
                          203.158.90.0/23 maxlen: 23
                          203.158.92.0/24 maxlen: 24
                          203.158.93.0/24 maxlen: 24
                          203.158.94.0/24 maxlen: 24
                          203.158.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
        Validity
            Not Before: Oct  3 07:54:58 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac0b4d2-3f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:9d:f1:80:a2:6c:f1:52:00:a5:22:08:26:
                    fc:ef:a4:7c:a2:4e:c1:c6:e8:00:23:7e:15:bd:b6:
                    1d:cc:f5:31:8a:5c:0a:cd:44:3f:ae:b8:dc:82:45:
                    48:a8:cd:52:02:e7:4a:7c:e0:30:8e:a2:52:7d:77:
                    b5:b6:ab:2c:1a:e4:fa:87:0b:f1:22:96:00:07:d3:
                    56:e4:c8:18:6c:4c:83:6f:e6:21:c9:6d:7f:ae:0c:
                    2a:79:ba:58:75:8e:34:11:82:e4:33:f0:1b:06:18:
                    93:6c:4f:59:f5:00:0a:34:6c:20:f1:33:99:5d:2f:
                    0a:bb:1f:5a:bd:8f:71:23:ed:bd:f4:99:0f:4d:ba:
                    39:81:9d:00:b6:7e:0a:fa:71:00:96:14:7d:be:bf:
                    46:5a:66:8b:50:07:9e:37:bf:85:dd:41:22:73:86:
                    c1:27:b2:ee:b9:b6:ae:5b:57:49:46:61:04:6b:15:
                    0f:fa:6f:fa:b1:8b:6e:8c:d3:82:ee:10:fb:bb:9b:
                    09:04:c1:0c:14:03:ad:2d:0a:e5:03:95:11:a9:bc:
                    46:f8:0a:79:23:32:1a:3c:e0:2e:a9:81:0d:12:1e:
                    8c:be:69:f9:54:59:88:87:24:22:ab:5c:63:58:01:
                    cd:b7:65:0a:18:7b:c8:a0:95:94:84:80:8c:1f:41:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BD:02:A0:3E:FF:01:4C:56:9F:9F:B6:39:DC:77:3D:0D:6D:64:81
            X509v3 Authority Key Identifier:
                keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.158.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:8f:43:1f:d8:a8:8e:5b:5c:54:ac:82:56:ba:3e:b0:96:
         22:16:9d:a6:11:bc:c8:2e:a1:56:51:03:f0:8f:4d:e0:65:e2:
         4a:41:14:6f:02:17:8d:3b:33:57:4d:5c:e7:e0:6e:0a:2a:90:
         4a:f2:74:b0:2c:e8:b1:98:b4:b5:13:5a:0b:3a:64:88:b3:5e:
         bf:44:16:f2:f3:8d:d3:c2:63:a7:87:19:d1:90:2b:1d:21:a6:
         31:c0:4d:c7:fe:37:fe:77:a8:19:0a:39:5e:1b:a2:47:7f:f7:
         25:64:7b:2f:80:52:6a:75:b4:77:07:87:c0:f0:06:ee:f6:0f:
         4a:02:dd:10:89:13:27:51:94:20:a2:17:a3:d6:4c:1c:50:0a:
         e9:9b:b9:7d:59:98:5a:53:b5:7b:ac:7e:fc:70:43:32:43:43:
         ac:ca:c7:50:3b:1b:19:5c:b4:c6:df:a4:51:dd:e7:c1:69:f8:
         cd:d7:cc:bd:47:3d:53:63:3f:f2:c9:af:76:81:d4:7b:70:08:
         8c:c7:4f:f7:57:f7:31:a6:1a:c1:be:c5:1b:b2:de:99:de:fd:
         5f:8d:31:47:a7:9d:71:8d:59:56:7c:3d:8a:c7:0a:12:30:b6:
         2f:f2:c3:c9:9b:66:85:fb:94:13:50:75:4f:9a:ce:7a:87:a5:
         ed:f6:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:38 2026 by rpki-client