Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/4F16B51A6AB811F18EBFB70E6347A888.roa
File:                     4F16B51A6AB811F18EBFB70E6347A888.roa (raw, json)
Hash identifier:          g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=
Subject key identifier:   50:FD:B5:07:25:BE:A6:B3:0F:1F:31:9B:84:4F:8E:EF:34:32:D6:8D
Certificate issuer:       /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial:       02
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/4F16B51A6AB811F18EBFB70E6347A888.roa
Signing time:             Thu 18 Jun 2026 01:52:06 +0000
ROA not before:           Thu 18 Jun 2026 01:52:06 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142613
IP address blocks:        103.170.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
                          rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
        Validity
            Not Before: Jun 18 01:52:06 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a334f46-eb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:e9:21:42:2e:97:47:18:d2:ce:bd:3e:35:
                    23:31:47:06:cb:2b:30:37:8f:5b:07:84:ad:cb:e7:
                    d5:ac:80:1e:3d:de:6b:03:66:4f:8b:a1:e8:48:f0:
                    6c:32:de:64:e6:b7:dc:0c:a3:20:61:50:6f:40:ee:
                    af:d9:a8:3d:5e:bd:60:a3:ff:f9:34:0f:40:d4:ad:
                    78:c3:6b:f4:09:bd:fa:8b:f6:5e:bd:8a:5c:4f:65:
                    d7:79:eb:d8:0a:1b:32:6e:8d:8a:b9:db:c7:25:e8:
                    ef:ab:0a:65:6d:bb:8b:dd:38:d6:aa:7d:48:3b:38:
                    fe:2c:fa:93:ce:25:0e:2d:69:d0:0b:ca:c9:c4:8b:
                    b8:08:10:95:77:f3:8a:c3:6b:6f:17:fb:13:46:d9:
                    a2:87:77:cc:02:fb:52:95:06:1c:b2:e1:49:06:f5:
                    03:ba:15:8c:22:bd:61:1d:93:46:56:4d:f4:21:0a:
                    65:ec:07:64:99:64:c7:1e:f0:94:da:a4:53:96:f0:
                    d7:29:d7:dd:ce:bb:78:12:d3:de:b7:84:aa:93:a1:
                    87:ed:46:5f:e9:eb:8b:a0:c7:95:18:ba:a7:68:da:
                    81:40:2a:c7:ac:3a:da:56:d7:6c:60:ff:9d:68:7c:
                    5f:11:0f:4c:e9:3d:37:1f:de:f0:7f:a9:a2:e5:a4:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:B5:07:25:BE:A6:B3:0F:1F:31:9B:84:4F:8E:EF:34:32:D6:8D
            X509v3 Authority Key Identifier:
                keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/4F16B51A6AB811F18EBFB70E6347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:db:a4:10:ca:d4:24:ce:ca:fd:c2:6d:75:74:99:45:18:
         89:6c:84:a4:cb:43:93:38:da:cd:c7:3d:0d:14:97:ca:17:b6:
         7a:47:68:87:65:fc:f8:dc:a1:e6:45:1b:3b:1f:13:3c:39:b1:
         24:8f:41:df:51:62:6d:6b:4d:d7:d2:ba:9d:c6:52:61:de:b2:
         9b:7d:5d:7c:a3:d8:20:18:b4:28:af:e7:0a:19:1f:c0:f5:b5:
         ab:9f:d3:66:ec:01:94:b6:17:f0:66:5a:99:ea:e4:79:f2:48:
         2b:b2:12:2f:67:9c:56:8c:4e:36:79:01:d4:3d:80:2e:a5:0d:
         18:29:cc:e3:52:e3:ab:b6:d7:4c:90:9a:1b:a0:cd:af:47:9e:
         3c:c3:ce:39:b6:0a:5a:7d:93:da:ae:ed:4b:7b:da:84:6a:ca:
         57:67:bf:f6:96:46:86:4c:b5:e1:39:13:b2:d7:42:fe:5f:e8:
         d9:85:5b:7e:c6:ab:77:ac:e8:eb:ba:5e:a6:17:2f:f5:70:ff:
         e8:0a:4a:95:86:7d:74:38:8e:18:07:52:9d:39:fb:cb:e4:ff:
         f9:a5:aa:0c:39:42:40:d7:c0:fd:c1:b9:0d:e6:8d:58:45:71:
         92:be:50:10:88:88:4a:a8:7b:34:33:9d:70:a8:fc:67:d2:e9:
         0c:17:aa:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:09 2026 by rpki-client