Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/F6179D9E736011EA9EDED344C4F9AE02.roa
File:                     F6179D9E736011EA9EDED344C4F9AE02.roa (raw, json)
Hash identifier:          vP35qnvMRkTdLfqeDMEWgBW1aiyRovnKXuS0v/3gyT8=
Subject key identifier:   0A:A5:33:3A:FB:16:A4:F3:DF:C8:FA:46:BB:1C:9D:73:A7:F9:F8:EB
Certificate issuer:       /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Certificate serial:       0A63
Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/F6179D9E736011EA9EDED344C4F9AE02.roa
Signing time:             Fri 31 Oct 2025 20:09:13 +0000
ROA not before:           Fri 31 Oct 2025 20:09:13 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     138149
IP address blocks:        103.121.76.0/22 maxlen: 24
                          2403:6ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
                          rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659 (0xa63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
        Validity
            Not Before: Oct 31 20:09:13 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69051769-1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:bc:4a:46:b3:7e:a7:40:11:72:c3:ff:c7:
                    27:c1:32:a4:4e:13:ca:a3:f1:4b:96:fb:1f:b9:f0:
                    4b:bd:c6:00:ef:46:c8:e4:61:cd:31:ed:1c:86:a6:
                    32:43:86:2a:74:86:9a:b0:08:36:a4:f8:b3:07:22:
                    dd:9a:63:c1:9b:6a:3b:db:0f:2c:07:d7:ca:5c:72:
                    80:95:7c:e6:46:7c:e6:70:c1:e6:9f:ae:16:20:4e:
                    cd:01:8e:ba:92:11:e0:cb:ae:85:c0:fd:b3:4f:36:
                    a1:b7:59:48:2a:2a:d7:56:c8:ab:66:f5:00:1f:9f:
                    50:41:3e:f5:d4:5c:7b:29:43:71:84:28:12:d0:08:
                    55:fe:f9:31:2d:ed:ae:0f:49:4d:e4:39:1d:00:9c:
                    ee:d0:22:66:ca:1d:35:ee:d1:ae:b5:5b:f2:8c:2c:
                    ce:dc:44:7e:e2:14:8b:fb:60:a7:9b:0e:99:42:c7:
                    ce:84:16:6a:40:a5:4f:04:33:d2:2d:52:99:99:c6:
                    f1:1f:a0:f7:df:43:44:18:75:c1:a7:e9:7d:e2:f3:
                    f6:ce:e7:b9:4d:75:fa:3d:8a:cf:c6:bd:62:0c:20:
                    70:3a:c4:8d:45:9b:63:37:9e:3e:7a:5b:52:fc:5e:
                    4c:b3:db:dd:96:5e:54:7a:4f:7e:9c:95:50:f9:33:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A5:33:3A:FB:16:A4:F3:DF:C8:FA:46:BB:1C:9D:73:A7:F9:F8:EB
            X509v3 Authority Key Identifier:
                keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/F6179D9E736011EA9EDED344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.76.0/22
                IPv6:
                  2403:6ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:97:49:38:b1:76:6b:49:e6:5f:69:83:a3:92:a2:d6:88:
         7b:bd:01:3b:29:e7:ca:3c:ff:be:4a:7a:15:d5:67:12:92:97:
         6f:7d:bd:9c:de:3a:4b:d0:2a:d1:86:50:ea:93:b5:b6:37:4f:
         ed:15:95:ce:55:f3:e9:57:dd:62:15:ef:f1:fd:ed:ca:51:0a:
         03:fb:54:67:4a:7c:53:b7:4c:98:17:24:5b:1d:fe:06:aa:44:
         2c:03:8c:ae:4a:2c:3f:87:30:f6:70:18:7d:44:af:94:3a:8d:
         ce:3a:cf:60:3f:24:03:7d:d8:df:e3:50:a9:e8:69:32:27:b7:
         fe:95:02:80:4a:c1:3a:a0:fc:64:18:a3:43:85:88:05:cf:65:
         88:05:71:1c:73:79:ef:40:a5:09:ef:ba:0c:69:46:92:4f:f5:
         9a:a2:26:0b:ac:1c:59:2b:de:36:79:91:b0:49:02:3b:96:ae:
         2b:7e:ec:bd:19:8d:0f:8a:2f:de:45:7c:7f:27:5a:27:90:6b:
         26:ed:8a:15:32:49:13:da:33:58:d1:30:10:d2:6e:ec:c3:e2:
         a6:0d:d4:d6:ed:07:df:06:f3:e5:a3:5e:de:f2:dd:a6:23:6c:
         d0:d1:54:3c:de:b9:a2:5b:19:8b:93:7e:86:10:b8:3a:8a:e0:
         e0:7b:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:49:21 2025 by rpki-client