Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
File:                     6877A622A9DB11E9B353AF85C4F9AE02.roa (raw, json)
Hash identifier:          I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=
Subject key identifier:   5A:87:08:8C:2B:83:91:85:BD:74:AD:CE:F3:2F:D9:13:C0:DB:8F:01
Certificate issuer:       /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial:       0EC8
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
Signing time:             Mon 20 Apr 2026 18:22:14 +0000
ROA not before:           Mon 20 Apr 2026 18:22:14 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137818
IP address blocks:        103.114.198.0/23 maxlen: 23
                          103.114.198.0/24 maxlen: 24
                          103.114.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
                          rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3784 (0xec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
        Validity
            Not Before: Apr 20 18:22:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e66ed6-b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:6f:93:28:1c:13:1b:0b:ca:71:f7:ad:90:
                    69:c3:e0:64:30:25:1e:00:b2:96:ef:0c:a1:58:70:
                    e3:30:de:f3:a9:c2:3b:7e:77:af:82:19:21:39:d5:
                    37:f1:27:4e:d7:06:5c:25:43:78:8c:f8:45:9b:c9:
                    60:1c:d4:74:f5:5a:a3:c3:ba:a6:49:e5:82:8c:2b:
                    30:2f:ab:90:b5:68:90:47:0f:9e:8a:33:75:b8:dc:
                    a1:34:7d:d9:6d:c4:80:a4:52:12:32:79:59:69:27:
                    42:28:dd:98:92:3f:78:f7:53:51:61:8f:28:45:e5:
                    e3:0f:1c:89:06:85:01:5e:ce:9b:bd:27:fd:f9:4f:
                    86:30:90:27:6e:e6:a9:5d:81:94:f1:6d:3f:5e:cc:
                    56:b5:45:08:e1:7e:89:06:60:18:2e:28:75:9c:cc:
                    0f:05:30:ab:eb:87:89:62:32:96:2f:80:3a:2e:5d:
                    40:ee:fb:f6:ed:74:41:c7:66:ae:14:9b:14:b3:88:
                    39:1b:88:60:d1:f5:4b:b9:8c:75:b0:a3:c8:aa:f9:
                    1a:f8:a4:a6:7c:20:40:54:7d:1d:79:1c:cc:ef:f2:
                    48:00:be:d3:00:10:35:89:99:cd:77:fe:d2:f7:2d:
                    2e:38:53:43:de:4b:de:1b:83:9f:3d:eb:54:bd:39:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:08:8C:2B:83:91:85:BD:74:AD:CE:F3:2F:D9:13:C0:DB:8F:01
            X509v3 Authority Key Identifier:
                keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:88:e8:07:f5:a8:2c:42:45:00:8d:82:9b:08:d0:5c:b3:
         8f:0c:6d:48:46:99:31:3b:73:21:40:64:83:7b:11:a8:7f:14:
         c6:b5:de:68:69:e5:ba:7f:de:78:94:71:14:c8:f2:e3:59:67:
         a1:51:28:b3:be:8a:99:f7:e0:13:04:1f:4d:ab:b4:d1:b1:d4:
         0b:61:97:62:97:85:4a:45:8b:1e:19:42:48:25:35:3b:1f:f0:
         d2:37:4a:bd:83:db:c6:8b:42:d7:9b:3e:db:17:c7:c7:dc:02:
         9f:fb:3f:f9:9f:40:44:5e:b6:ef:82:29:b7:9d:05:f3:45:16:
         b3:d7:36:98:c6:31:b7:9d:09:7c:8e:ae:b5:d0:ec:fa:39:88:
         0a:5f:5c:ea:e0:c5:d5:9d:d2:97:a7:20:5b:4f:e8:8f:05:38:
         96:78:2d:5a:f6:9d:ec:53:d0:ce:16:a7:9a:65:aa:9e:d6:3e:
         bc:49:22:40:ae:15:1b:7e:dd:02:f0:fe:25:26:af:c3:2a:3e:
         d1:51:f5:72:ab:66:ac:68:a9:a1:47:04:c7:1a:21:73:e9:19:
         c9:5f:3d:c5:4a:07:b7:fc:f8:57:a1:13:5e:bf:00:1b:a9:a3:
         86:a7:20:0c:33:aa:8e:40:f1:53:87:6c:9f:ff:15:e4:15:6c:
         7b:0c:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:42 2026 by rpki-client