Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa
File:                     6F1612BE562511EB9470B150C4F9AE02.roa (raw, json)
Hash identifier:          BrIt4ULt/nWqzogqGuBCD8Hp7rvk2fEABSPjkLFLvVw=
Subject key identifier:   C4:40:F5:15:EC:C7:7E:73:51:6A:C3:97:0D:29:CD:72:78:3E:A0:07
Certificate issuer:       /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial:       35A6
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 15:10:56 +0000
ROA not before:           Thu 02 Oct 2025 15:10:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137412
IP address blocks:        118.103.138.0/24 maxlen: 24
                          2405:ec01::/32 maxlen: 32
                          2405:ec01:1000::/36 maxlen: 36
                          2405:ec01:1000::/40 maxlen: 40
                          2405:ec01:1000::/44 maxlen: 44
                          2405:ec01:9000::/36 maxlen: 36
                          2405:ec01:a000::/36 maxlen: 36
                          2405:ec01:a000::/40 maxlen: 40
                          2405:ec01:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13734 (0x35a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
        Validity
            Not Before: Oct  2 15:10:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68de95ff-a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:2d:d4:ff:87:fa:14:0e:32:c8:e7:b2:f8:
                    b0:57:63:8d:78:b1:92:6e:15:23:d9:40:5a:9c:e5:
                    1f:31:56:c2:85:07:63:d3:a7:d6:a7:38:63:27:b7:
                    33:ac:2c:e8:40:26:b9:3f:f9:c5:22:87:1f:b5:ab:
                    93:d0:cb:5a:39:75:6c:68:a8:c9:62:44:8b:8a:34:
                    9e:48:66:13:d1:ba:55:f3:3d:b7:f7:8f:44:ed:d5:
                    e4:73:65:27:1e:a6:3b:12:5e:0a:53:8f:fb:6c:7b:
                    33:69:34:fb:c0:d3:76:d2:49:d1:c3:05:0c:49:5a:
                    79:c5:e1:60:30:f5:11:2c:c8:66:8b:cd:30:97:79:
                    80:7c:02:88:db:ed:60:c9:87:33:1f:cc:66:f3:39:
                    f9:bd:c1:8c:61:85:40:28:99:46:68:c8:e5:0b:65:
                    ee:5b:5f:e7:3f:69:0d:13:35:3f:79:60:55:71:b0:
                    1a:a7:c2:42:38:c7:84:d5:65:ad:f2:9c:08:26:0c:
                    a0:12:4c:14:53:38:34:3c:9a:61:19:cd:e1:fc:3d:
                    d4:2b:e6:bf:a3:ef:99:f0:fb:15:7e:11:21:34:f8:
                    d9:62:e3:be:3c:a2:53:f4:f8:9c:4d:c9:8d:a9:09:
                    9f:08:df:17:b3:ee:35:32:8e:ea:73:25:6e:8a:a8:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:40:F5:15:EC:C7:7E:73:51:6A:C3:97:0D:29:CD:72:78:3E:A0:07
            X509v3 Authority Key Identifier:
                keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/6F1612BE562511EB9470B150C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.103.138.0/24
                IPv6:
                  2405:ec01::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:b8:d0:4b:ae:87:57:86:4d:98:d9:18:89:76:27:3f:d3:
         db:ad:b3:a1:41:b2:6a:66:ff:0a:86:8c:89:e1:f1:d4:cf:6d:
         9d:c2:d6:34:e9:10:8f:ac:b1:cb:8d:15:34:c5:36:5b:34:d9:
         cf:c2:f0:7b:61:54:64:37:67:ad:4c:6f:df:4d:e5:70:97:c5:
         6a:bb:29:e5:03:49:5d:8a:0d:c9:32:8c:ea:2f:0d:00:a8:a4:
         03:46:ae:cb:57:ad:1a:70:ae:f9:78:1f:48:ae:c9:19:59:47:
         9e:7e:6f:55:61:3b:00:f8:64:6c:08:56:0d:a3:9a:48:b1:cb:
         dc:eb:86:e9:c0:38:2a:83:3d:3a:e1:f2:64:44:9e:6f:ac:dd:
         8c:16:1e:27:78:76:0a:58:5a:fa:8b:e8:ad:1d:7d:de:e0:ee:
         c7:5a:e0:3c:0a:32:17:35:f2:b2:41:91:a0:46:bc:a2:a6:7e:
         26:02:b8:94:c7:66:fc:d5:84:3c:4e:22:09:ac:b8:5d:90:56:
         35:dc:2e:74:79:fa:29:cc:29:5c:3a:b6:ec:e0:26:75:9f:ce:
         eb:b5:51:4f:33:95:a5:3f:3a:3e:72:a8:90:cf:ee:28:d3:bb:
         c1:b9:fd:a3:14:a9:87:c7:ce:79:61:6f:aa:37:12:78:a4:cc:
         45:f3:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:16 2025 by rpki-client