Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
File:                     00E626A4A57611EF98285E5FC4F9AE02.roa (raw, json)
Hash identifier:          yxoJxjt522RCtypxdpCWh8Ki8MQz+o9DlkQu175uTk8=
Subject key identifier:   F6:CF:E2:8F:C2:3B:80:80:30:83:90:1A:37:72:B8:2D:71:84:42:7B
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       0213
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:44:17 +0000
ROA not before:           Wed 13 Aug 2025 04:42:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        203.6.66.0/24 maxlen: 24
                          203.6.68.0/24 maxlen: 24
                          203.6.69.0/24 maxlen: 24
                          203.6.74.0/24 maxlen: 24
                          203.6.76.0/24 maxlen: 24
                          203.6.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 02:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Aug 13 04:42:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47af1-0ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:10:32:c0:b7:64:77:65:ed:99:79:42:fc:
                    e5:88:fa:16:12:dc:d8:fc:bb:92:5c:31:96:3d:f1:
                    57:fe:91:6d:3c:79:3d:77:40:b6:1f:09:6d:5a:e6:
                    bc:27:aa:bf:31:36:bd:b1:7c:82:4a:04:8b:e5:1d:
                    51:ad:8e:9c:bc:1b:dd:16:a7:2b:89:e3:7c:f3:13:
                    4f:e4:7b:fb:0b:5c:09:73:38:56:5e:05:bc:67:f2:
                    40:20:cd:3a:6c:22:77:95:ff:66:33:aa:a3:ee:56:
                    36:7b:76:08:d0:9a:55:ed:ce:58:3b:6a:c9:28:8b:
                    5c:e3:aa:7c:7f:3d:b6:f4:d2:a4:19:a2:0e:25:86:
                    60:d5:75:76:05:66:40:b5:22:a8:6b:65:dd:37:74:
                    f3:36:ee:04:50:39:30:bf:cc:bc:c2:b6:43:72:6e:
                    64:fb:9c:83:38:0b:e1:44:f1:d1:8b:48:91:56:8d:
                    44:c4:bf:fa:bf:d3:11:6a:e8:2e:27:a0:f7:f7:5a:
                    05:4b:1a:87:f1:97:44:68:5c:73:9b:22:c8:75:44:
                    70:cf:67:68:9c:9d:81:7f:fc:7f:eb:88:a4:c4:86:
                    6b:21:95:15:2a:75:f4:6c:b9:9c:d5:67:a7:c1:32:
                    2a:aa:9e:1a:1c:5a:5c:10:3c:18:72:77:b8:45:ab:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:E2:8F:C2:3B:80:80:30:83:90:1A:37:72:B8:2D:71:84:42:7B
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.66.0/24
                  203.6.68.0/23
                  203.6.74.0/24
                  203.6.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:22:ac:be:36:66:41:47:87:e8:f4:65:3d:49:a1:a8:49:
         5a:b7:a9:4b:99:2f:e5:cb:4e:ae:00:38:ac:3e:06:52:93:d9:
         48:9d:a3:46:bd:ea:0b:f3:b1:53:f6:1b:bb:eb:e9:86:e7:bc:
         60:32:41:47:8c:8a:9e:b4:cb:9f:b4:45:88:e8:57:52:32:48:
         d6:46:c8:ed:ee:4e:25:ce:d7:65:2e:ce:9d:67:cb:de:ef:36:
         6f:c4:c3:77:5f:09:ee:fc:7a:ad:ea:b0:63:d4:3a:23:02:8c:
         1c:40:62:a5:b6:f4:67:07:cf:bc:bf:8c:78:b1:90:5b:5c:66:
         a3:f6:c2:fb:ee:0c:e9:79:f2:72:dc:55:38:07:f2:52:3b:d2:
         5c:22:e6:7a:40:95:5e:12:d4:8b:d7:32:fd:53:30:90:c9:bb:
         12:94:05:22:84:f0:d6:9b:02:fd:35:38:8d:4e:1c:2f:a3:3a:
         e7:41:c9:d6:dd:f5:9c:c4:16:14:3e:29:02:e8:82:04:7d:56:
         81:29:78:ac:0a:96:33:47:96:3b:66:38:19:97:a3:41:54:ec:
         bb:50:94:e2:30:d4:95:1c:9e:19:89:22:45:16:8d:82:7c:7e:
         a6:86:20:19:81:15:30:cc:be:82:db:d8:d9:4b:bc:16:00:ad:
         76:6e:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:43:22 2026 by rpki-client