Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/C6EC9794487611F1BB18259CA9833773.roa
File:                     C6EC9794487611F1BB18259CA9833773.roa (raw, json)
Hash identifier:          48d0jSRCZi2DKlUlTgdascCDNIVRIlqnCKvBq0U5q7U=
Subject key identifier:   0B:70:48:E5:52:51:55:B8:81:91:A8:2A:56:1A:F0:6A:E2:A2:81:84
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       1616
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/C6EC9794487611F1BB18259CA9833773.roa
Signing time:             Tue 05 May 2026 11:37:21 +0000
ROA not before:           Tue 05 May 2026 11:37:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138346
IP address blocks:        103.114.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
                          rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5654 (0x1616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: May  5 11:37:21 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69f9d670-004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:78:5b:d3:9c:a2:63:27:55:99:0b:1a:45:
                    af:92:bd:80:ee:9f:b2:57:26:df:91:83:3a:67:1f:
                    ac:c6:89:3d:ba:d4:86:91:84:cf:f1:a2:f8:3f:b2:
                    75:03:c2:4d:41:57:2b:34:8b:0b:0f:67:c6:75:00:
                    90:8d:b0:c5:46:c0:1c:c3:37:99:95:39:3a:41:99:
                    8a:15:7b:09:22:1c:a5:db:1b:18:80:6d:e3:69:bb:
                    77:96:02:2c:f5:9c:85:8a:3e:dc:73:3e:6a:36:1a:
                    82:d2:e3:65:b9:9e:f8:c1:ba:61:45:82:6c:08:55:
                    3d:17:23:5a:a5:46:73:4a:b5:d4:0e:62:1b:b1:81:
                    9a:ce:c3:61:8f:97:5a:a4:79:a4:b1:b9:90:fa:57:
                    99:95:74:1b:89:8e:4a:e0:88:8e:f9:13:78:77:c1:
                    29:cb:39:a7:87:30:df:98:ea:a2:39:27:2e:e6:a0:
                    7b:1c:ee:2b:a7:5a:fc:7a:d8:ef:c0:d2:58:ea:fd:
                    64:bd:f9:2c:b1:73:b4:f7:5f:9d:eb:fd:45:b8:a4:
                    26:41:d8:05:83:02:2f:71:f8:dd:95:f1:03:db:49:
                    36:98:65:b3:ad:b3:22:cc:ce:ad:a5:f8:f0:9d:05:
                    c2:35:47:72:1b:f7:16:a6:6f:d6:e8:10:37:d2:26:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:48:E5:52:51:55:B8:81:91:A8:2A:56:1A:F0:6A:E2:A2:81:84
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/C6EC9794487611F1BB18259CA9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:2e:c0:34:46:aa:fb:4b:06:50:cb:6b:11:b5:47:ec:30:
         07:a9:6d:9f:81:cb:7e:08:d7:e8:fb:ab:04:f1:61:5b:99:1f:
         85:0f:a6:de:fe:64:0d:d6:8a:05:e4:60:a0:ce:96:08:00:cc:
         53:8c:85:f7:0c:ba:e6:52:8f:42:d6:a9:58:ef:36:7e:be:16:
         21:d8:9f:6b:9e:ef:a2:8e:b9:e1:a9:d4:4e:7f:23:a0:40:60:
         3b:49:21:e5:ae:4c:aa:70:85:49:e6:55:19:2a:3c:da:03:a7:
         33:a5:c4:e4:10:d4:01:33:61:93:59:fd:51:3a:a5:a0:fc:29:
         4b:56:00:07:d3:ac:ea:3b:d6:ff:2c:fc:a7:0e:2e:2e:4f:09:
         73:c9:fb:dc:64:d6:4d:de:c7:2d:22:e1:b6:97:88:2b:9b:1a:
         37:f6:e3:41:a7:f7:7e:18:39:ec:10:37:10:be:a9:ac:35:62:
         7d:01:2e:0f:0c:13:ab:2c:61:b7:7e:b6:17:23:7c:bc:2f:01:
         d5:20:89:22:2c:e0:eb:32:bd:8a:a8:c8:f5:3b:c8:87:f3:6a:
         bd:e5:56:b5:da:4a:af:4d:a9:13:f5:c8:36:2a:ae:76:09:41:
         c3:eb:cc:af:0e:e5:d7:85:68:34:e2:d8:d2:ac:4b:5f:93:2f:
         a9:7a:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:58 2026 by rpki-client