Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
File:                     A6F2C5C2491F11F193C776FB9E833773.roa (raw, json)
Hash identifier:          UYXcv3ua2KvUcQTw3hjviZWaO6Oocz7OB4734PgJciM=
Subject key identifier:   87:BC:7F:D5:00:38:20:2E:C8:5E:16:67:50:E6:F5:64:30:A8:13:43
Certificate issuer:       /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial:       1C
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
Signing time:             Mon 22 Jun 2026 03:06:24 +0000
ROA not before:           Mon 22 Jun 2026 03:06:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     963
IP address blocks:        111.68.0.0/21 maxlen: 24
                          111.68.13.0/24 maxlen: 24
                          111.68.14.0/24 maxlen: 24
                          111.68.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
                          rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
        Validity
            Not Before: Jun 22 03:06:24 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a38a6b0-e105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:b8:c6:54:df:ca:92:9b:66:3c:9c:00:e2:
                    9c:d3:af:9d:cc:9e:5b:5a:12:27:cc:04:d8:7f:29:
                    ee:84:66:13:03:de:4a:fa:3a:bd:8a:aa:f6:e8:44:
                    06:d2:d7:59:ad:43:29:79:71:d7:f0:cd:c3:89:60:
                    21:62:4a:ff:51:6f:7e:ae:85:c9:91:74:1d:6a:7a:
                    0b:48:92:29:f4:b5:66:a4:b9:ee:9b:64:5c:06:2e:
                    ea:53:cf:b3:4c:fd:9e:71:59:fb:62:69:bc:38:e5:
                    34:73:73:3b:b9:26:1b:c7:56:1b:e9:6e:74:f7:82:
                    e0:5e:ba:7c:03:13:60:65:72:39:39:9a:0b:13:d9:
                    a4:bb:ae:f4:24:de:4a:57:6d:0f:ec:39:df:bd:87:
                    62:c4:55:e3:ff:0c:4c:61:45:76:9d:57:27:9a:11:
                    81:29:6c:56:e4:64:12:30:62:47:12:65:a1:a9:bb:
                    4b:fa:8c:bb:aa:95:90:f4:3b:97:ee:cd:c6:d0:99:
                    65:40:bc:72:7f:00:98:13:8b:dd:29:92:41:f6:18:
                    5a:61:4c:1b:e3:76:76:3f:8e:4c:9c:38:16:4c:88:
                    0f:9c:7f:75:dd:2c:3b:55:93:38:b2:34:a1:4f:f5:
                    10:8f:31:e5:60:cf:f1:ad:d2:df:64:d5:56:cc:1e:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:7F:D5:00:38:20:2E:C8:5E:16:67:50:E6:F5:64:30:A8:13:43
            X509v3 Authority Key Identifier:
                keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.0.0/21
                  111.68.13.0-111.68.15.255

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:e4:a1:ee:b1:94:5e:22:59:b4:bd:76:18:28:b2:95:38:
         0a:45:f7:30:8d:c9:3d:ad:9e:89:72:ce:3e:35:70:c3:34:e9:
         6f:40:b8:2b:b3:33:72:fb:72:19:33:05:68:62:b8:c1:1a:78:
         4b:f1:47:0c:95:64:9a:ed:dc:f2:ca:87:5d:a5:1a:aa:ae:f5:
         ba:23:34:35:5c:e8:f4:78:c1:6b:c8:1c:f3:26:f4:eb:6a:99:
         ee:24:82:46:0d:0e:8d:ca:97:88:2b:d9:16:01:32:90:db:d2:
         94:15:ac:d2:c6:54:77:80:bc:53:0f:88:d3:bf:32:08:32:3d:
         9f:83:0c:4f:0b:62:5e:2c:d1:81:1c:1e:62:ce:d5:60:fa:3c:
         ae:be:18:66:20:f2:a1:f6:b4:f1:5e:13:21:b0:c7:1f:c3:7c:
         76:8b:90:c7:7e:89:ca:2e:ee:1a:24:54:46:ac:db:5f:b3:54:
         c3:49:2d:e8:71:43:c2:d7:63:b6:83:ec:c4:b1:62:b0:8b:e3:
         0f:2f:b6:bb:e2:c2:9e:4f:fa:9f:44:9e:12:7c:86:5f:6b:be:
         16:c2:81:da:ec:8f:82:2f:fb:9f:ad:4e:16:22:56:dd:29:67:
         d7:bb:b7:6b:96:86:f1:b5:ca:3a:64:6a:c0:7c:45:af:22:aa:
         f4:52:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:23:38 2026 by rpki-client