Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa
File:                     4B6ACA2E21B511F19C8EC293183D8C67.roa (raw, json)
Hash identifier:          hTm1hC4z4/h09pd99dIB7y+cP+dNmHyx5jWFuawvpdw=
Subject key identifier:   4F:F5:54:58:E9:79:90:00:EC:AD:D7:C6:73:3F:07:1A:2E:7C:C5:00
Certificate issuer:       /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial:       62
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa
Signing time:             Mon 27 Apr 2026 08:42:44 +0000
ROA not before:           Mon 27 Apr 2026 08:42:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138940
IP address blocks:        103.137.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
                          rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
        Validity
            Not Before: Apr 27 08:42:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ef2184-17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:50:71:71:b0:cd:e6:d2:61:04:7b:95:d5:
                    e5:b2:e2:5d:e2:dc:19:8e:5e:67:d4:f4:4a:1e:50:
                    f2:b6:5f:3d:a9:a4:3f:3d:fb:ad:c4:f7:ce:33:b3:
                    a9:57:9c:8c:a7:33:b0:4d:0e:de:ba:7b:05:7e:6e:
                    73:c4:9f:b4:73:76:d3:a5:86:a1:7c:62:64:8f:c5:
                    83:32:a0:2d:ce:90:01:51:40:96:64:0b:30:54:30:
                    96:2b:45:7b:7b:34:13:cb:8c:dc:7d:98:ac:23:0e:
                    07:c2:4a:32:29:f4:c9:18:1e:b1:8f:f0:df:b0:b5:
                    c3:8d:78:39:2b:b0:3e:8a:d4:2f:9e:5d:80:88:ee:
                    ae:c0:83:93:0e:44:d2:43:f7:97:91:3f:2c:fe:35:
                    06:cd:2e:82:64:8b:49:8d:eb:9e:81:cc:24:e9:38:
                    52:fc:cd:ae:b6:0b:8e:97:29:6e:65:19:68:23:5b:
                    89:01:7e:24:e4:66:c3:3e:a8:7e:66:5e:72:cd:08:
                    de:1a:37:96:6e:c1:45:d8:59:a9:d1:fe:a3:31:5b:
                    b5:a3:08:7a:45:7f:a8:48:c5:d3:91:29:7f:cd:3c:
                    b5:8a:e0:d3:5a:ef:a9:34:c8:44:26:84:af:83:2f:
                    b5:de:35:74:2c:89:fa:d0:9e:d1:73:4e:b4:6d:97:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:54:58:E9:79:90:00:EC:AD:D7:C6:73:3F:07:1A:2E:7C:C5:00
            X509v3 Authority Key Identifier:
                keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:22:40:79:b9:ff:d8:c9:4e:b1:28:1c:52:51:30:27:51:
         68:79:06:dd:7b:f2:e5:c2:dc:f8:07:d5:42:61:d0:fa:b0:2e:
         01:30:58:21:16:79:96:47:b1:5b:fe:a3:8e:df:63:cf:56:6e:
         fa:c6:de:06:ee:e4:b4:79:7c:ad:b9:c5:8a:b1:52:5d:20:3c:
         04:b7:f3:04:b8:d8:f6:8d:d5:f9:95:63:e6:ff:83:75:99:7f:
         b9:45:61:e7:86:e4:2a:84:93:bb:8a:05:31:4e:ee:7a:dd:18:
         53:53:74:54:f0:24:63:6a:17:89:00:02:fe:2f:16:33:45:06:
         2a:3e:c0:3e:ed:3f:a6:35:d4:3d:16:15:9c:a7:95:74:b9:fe:
         a2:fb:56:6b:c8:55:5c:4d:af:17:12:29:08:74:ae:34:be:66:
         31:87:d6:6c:89:8a:98:c8:ba:c3:c7:90:7c:88:0a:c4:c3:be:
         11:89:bc:de:86:d7:80:ec:bd:52:51:c1:92:2e:c5:17:3e:c0:
         b9:bc:7b:38:08:50:c2:c8:4a:c7:a0:91:00:77:6a:c2:db:7b:
         1f:8c:d2:cd:bd:63:c6:27:51:42:72:71:c0:0b:9b:46:c5:0d:
         32:e0:5b:7a:90:d4:60:f3:b4:e1:47:e5:fb:93:52:6e:45:80:
         5a:66:c6:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:39:38 2026 by rpki-client