Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa
File:                     6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (raw, json)
Hash identifier:          kHqgL13pwDNCnWVijT06uf83XtGX7ISyin8fJncV3XQ=
Subject key identifier:   EF:20:FD:85:12:8E:8C:D3:20:70:6C:8E:E7:B6:F8:97:F1:ED:99:E1
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       0192
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa
Signing time:             Wed 27 May 2026 05:40:21 +0000
ROA not before:           Wed 27 May 2026 05:40:20 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.142.153.0/24 maxlen: 24
                          2001:def:c001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: May 27 05:40:20 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1683c4-a9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:d8:63:60:3b:70:02:91:b7:3b:82:6f:34:
                    96:13:60:b0:bf:a8:00:db:7a:be:97:88:6d:8c:25:
                    62:7b:b5:61:75:e6:cd:d0:b9:a0:e7:5c:15:8d:23:
                    19:d8:30:d4:f0:07:a2:26:1f:fd:47:9d:f3:e7:2d:
                    6a:b6:5f:c7:a0:20:f2:10:a3:d1:2b:3b:2e:b1:4f:
                    41:74:23:ae:01:75:ee:dc:5d:d9:36:19:87:e7:bb:
                    86:78:65:15:d9:09:54:91:81:2a:44:27:75:42:31:
                    9b:1f:c7:dd:a3:02:a9:6d:26:7c:21:5c:ca:a6:65:
                    6a:6e:e1:66:2e:fe:d4:48:0e:87:ed:28:fb:b1:e7:
                    72:10:6f:b2:2f:83:41:80:09:41:ec:64:2f:70:49:
                    12:e4:48:f6:ef:dc:6d:a4:2a:0b:3b:9d:a1:68:bb:
                    e7:5d:04:23:2a:22:14:0d:b9:0f:21:e3:8f:e5:b7:
                    af:db:61:95:65:5b:40:4d:4a:34:8f:e0:b3:3f:4c:
                    ed:e7:6f:ed:95:74:ee:b2:ca:2e:e5:c9:24:74:ea:
                    f1:f8:d9:8b:27:a9:f2:4c:da:43:d0:9f:79:75:83:
                    dd:c5:fe:94:71:3b:c8:7f:4e:ca:d7:2c:25:20:07:
                    61:55:98:cb:83:b0:91:2a:77:b7:5a:10:3c:3f:91:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:FD:85:12:8E:8C:D3:20:70:6C:8E:E7:B6:F8:97:F1:ED:99:E1
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/6FC4A52C0E9611EF8B4CB827C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.153.0/24
                IPv6:
                  2001:def:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:b7:89:d4:a1:b3:32:6a:b3:86:31:9b:35:eb:57:7b:cd:
         2b:bd:9a:93:9c:3a:55:e3:77:37:1d:4e:d0:42:03:1e:02:ec:
         a7:18:b9:b5:da:dd:92:5a:e2:90:03:a2:81:7e:d5:99:4c:0a:
         27:5c:ae:4b:64:d0:86:d1:c4:00:fa:6a:01:6d:b2:15:3e:07:
         b5:54:d3:4f:36:a1:0a:73:29:85:3b:3f:82:7e:26:c4:21:aa:
         59:66:72:66:26:a3:a0:7a:7f:86:ee:25:03:4e:51:76:64:49:
         16:4d:56:eb:82:d9:e7:66:66:74:23:82:de:cc:85:a8:cd:98:
         ab:32:35:24:e7:73:ff:a7:a0:a7:6c:73:f6:eb:54:ea:db:38:
         1c:dd:9c:e0:08:0f:f8:45:29:11:72:c0:f5:f9:3c:94:dd:dc:
         ed:7f:f6:da:f1:60:80:5b:71:e7:28:7e:d5:9c:46:2f:9a:10:
         87:61:72:e8:31:79:39:5a:60:68:9b:05:52:c5:4f:f1:3e:10:
         93:f8:18:5c:89:2e:eb:b6:09:fc:46:fb:ea:25:65:b8:9f:a2:
         cf:d7:33:91:ed:63:04:ec:40:fb:21:31:f4:df:23:79:99:3f:
         2c:ef:f1:e5:ee:77:3c:d7:fd:96:d3:55:e1:65:da:ca:d6:88:
         54:e1:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:06 2026 by rpki-client