Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa
File:                     6F1612BE562511EB9470B150C4F9AE02.roa (raw, json)
Hash identifier:          VN3fbgbN+VB5jjHGJ778LsC3bD0h86H1GfKAiCzDGbA=
Subject key identifier:   DF:57:87:9B:10:26:A0:93:22:00:5F:C1:22:44:AB:19:D0:4E:89:99
Certificate issuer:       /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial:       3607
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:21:39 +0000
ROA not before:           Thu 02 Oct 2025 15:10:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137412
IP address blocks:        118.103.138.0/24 maxlen: 24
                          2405:ec01::/32 maxlen: 32
                          2405:ec01:1000::/36 maxlen: 36
                          2405:ec01:1000::/40 maxlen: 40
                          2405:ec01:1000::/44 maxlen: 44
                          2405:ec01:9000::/36 maxlen: 36
                          2405:ec01:a000::/36 maxlen: 36
                          2405:ec01:a000::/40 maxlen: 40
                          2405:ec01:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13831 (0x3607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
        Validity
            Not Before: Oct  2 15:10:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46793-c8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:9f:43:45:6b:ce:0f:a4:13:8d:68:e6:7a:
                    0f:b2:7f:09:0d:05:cd:2d:13:62:4f:28:b2:2a:ca:
                    70:61:88:1e:e3:e6:bf:f2:a5:be:f3:1e:62:ea:66:
                    f7:8b:b4:90:f4:1d:2e:8e:4f:1e:5b:fd:85:17:4c:
                    33:2a:ee:dc:52:c2:a3:f2:4f:7f:cd:9a:42:c7:b6:
                    02:b3:f6:6d:cb:77:1f:15:8d:a9:76:71:de:62:15:
                    5c:d4:35:1c:e7:be:1e:f2:63:8e:4f:1b:23:2e:d3:
                    3a:a1:71:a1:91:f0:7e:d4:6c:d2:1a:a4:1b:01:23:
                    0c:14:ae:d2:5d:dd:99:bf:92:26:66:a1:ad:a9:42:
                    43:8c:89:4c:35:a7:5b:c1:30:34:b5:b8:70:ef:27:
                    ac:df:8a:fa:58:40:fe:dc:81:31:2c:30:83:97:ed:
                    dc:a2:f3:e3:fd:a4:06:92:31:34:97:8d:e6:6b:db:
                    0c:bd:49:b4:ab:48:57:d2:b8:8b:ae:d7:f5:ff:cc:
                    65:99:0c:44:ca:40:66:48:ef:d5:a7:d7:19:43:dd:
                    b8:2e:7a:81:a5:3a:1c:d0:c0:6b:bf:5f:c6:de:96:
                    6e:f9:f6:82:f2:df:e0:77:b0:bc:e9:b3:87:e6:71:
                    1d:96:7d:25:07:97:bf:e3:d1:ac:75:fd:31:33:74:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:87:9B:10:26:A0:93:22:00:5F:C1:22:44:AB:19:D0:4E:89:99
            X509v3 Authority Key Identifier:
                keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.103.138.0/24
                IPv6:
                  2405:ec01::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:00:95:0f:51:93:92:79:25:79:42:23:38:dc:18:65:fd:da:
         e0:c2:15:8f:e0:06:e7:76:58:7c:c8:72:60:ae:d8:72:aa:42:
         a6:de:66:a8:d4:c0:bd:54:7c:9e:25:d0:ef:8d:89:b7:b2:dc:
         cc:ca:19:c9:07:22:df:c7:e5:f3:5b:da:2f:64:bd:44:e0:41:
         a7:8a:a1:5f:11:32:a4:bb:fd:98:3e:2b:49:c7:0f:d2:62:fe:
         0c:6a:d1:41:02:ac:ff:5f:48:50:da:27:95:07:6a:bf:01:c6:
         fb:eb:57:ce:16:6f:29:59:bc:a1:54:0b:8f:0c:d1:a4:3a:9c:
         42:22:37:47:48:67:51:46:32:0f:3c:fa:a9:c3:0c:ad:2a:23:
         45:03:c5:9a:a4:11:b3:8a:f1:ca:92:74:6b:0a:a3:e4:ec:ab:
         0c:74:32:0d:2f:c4:64:3b:ce:6a:52:d4:44:6b:58:4c:d2:8f:
         47:93:36:fc:38:b8:d9:fb:d3:0e:92:a6:3b:c4:ff:88:14:55:
         fd:7b:1b:b2:1f:48:71:10:b5:62:1a:e9:61:4c:dc:48:4e:c1:
         58:c1:91:1d:1f:6b:74:34:38:10:45:79:ca:b8:d7:9b:3b:37:
         5c:63:d9:c0:5a:bb:fa:12:27:1f:20:d4:0b:ac:42:45:ec:2b:
         67:04:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:13 2026 by rpki-client