Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa
File:                     B6FC3096EB1611EBB525CD6AC4F9AE02.roa (raw, json)
Hash identifier:          ZPBt0egrhOJrKekibnVTE6GSDFlqHOpnvTM4pJu29Jg=
Subject key identifier:   63:F2:E0:F0:E8:15:EE:49:B6:DD:16:73:41:DF:0A:74:AD:7A:FD:16
Certificate issuer:       /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial:       063D
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 23:44:48 +0000
ROA not before:           Fri 24 Jul 2026 23:44:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136793
IP address blocks:        103.96.60.0/22 maxlen: 22
                          103.96.60.0/24 maxlen: 24
                          103.96.61.0/24 maxlen: 24
                          103.96.62.0/24 maxlen: 24
                          103.96.63.0/24 maxlen: 24
                          123.253.200.0/22 maxlen: 22
                          123.253.200.0/23 maxlen: 23
                          123.253.202.0/23 maxlen: 23
                          2401:75c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
        Validity
            Not Before: Jul 24 23:44:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a63f8f0-8937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:c7:5a:c1:21:14:82:64:bc:aa:66:13:b9:
                    48:4e:d7:f0:f4:f3:bb:14:ce:8a:c7:9c:62:3a:46:
                    57:1d:84:6b:96:0d:ad:80:f4:07:a0:04:5f:4b:3a:
                    3a:c5:85:31:71:2d:31:e8:8a:db:21:82:6b:42:2d:
                    ad:30:21:48:75:b3:7e:e8:d7:4b:eb:2f:bc:d1:28:
                    5e:ac:f0:6a:47:0c:0a:5c:01:5a:dd:cf:fe:6b:b6:
                    8f:04:02:8e:b0:a3:65:b9:63:97:fe:35:55:3f:a3:
                    42:8d:55:3a:23:48:12:28:02:b2:93:90:ad:1c:ca:
                    61:c2:5c:3c:ba:ab:99:da:8c:9e:e9:33:0b:94:8b:
                    b5:f6:27:68:81:05:2c:b9:35:6e:d1:54:d0:90:3a:
                    47:14:fd:e5:fe:0a:42:95:3b:5a:74:72:72:4a:a9:
                    40:0f:e2:02:fb:e9:86:38:9b:43:7a:c7:58:31:71:
                    12:92:82:55:8c:4d:7b:2d:b6:dc:53:5d:84:15:3d:
                    9d:c3:56:8f:6b:29:92:e4:53:47:cc:9b:db:a7:93:
                    6d:2a:67:2e:f3:bb:9e:95:6a:8f:20:30:64:56:93:
                    0e:a4:1c:7f:66:17:10:2f:fe:08:16:1b:40:89:7d:
                    19:41:66:f9:a1:ea:60:29:22:36:4f:f0:19:fc:22:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:E0:F0:E8:15:EE:49:B6:DD:16:73:41:DF:0A:74:AD:7A:FD:16
            X509v3 Authority Key Identifier:
                keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.60.0/22
                  123.253.200.0/22
                IPv6:
                  2401:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:df:18:38:93:55:87:36:d2:5e:f3:1d:83:41:50:f4:b5:
         7b:c0:3d:3f:29:8b:6e:9f:5b:4c:cd:68:8b:d7:dc:17:d2:d2:
         3b:b6:13:9d:3d:5f:d0:e0:2f:f6:60:f3:f0:8b:06:8c:d6:2f:
         2b:89:76:e8:b3:99:13:3f:c9:96:5a:be:03:b9:02:13:d3:a3:
         3b:32:cd:ca:aa:38:d9:c9:81:3b:08:12:be:b6:9a:1d:90:33:
         23:1f:33:23:c6:48:04:5f:8b:55:fd:b3:44:04:3b:c9:65:65:
         10:9f:2d:94:e3:63:0d:93:d2:51:ad:1c:c1:68:8d:1d:de:b9:
         7e:8b:05:96:57:fe:fb:b2:42:4a:5b:1a:6e:1e:c5:5e:8f:54:
         47:06:a6:c0:f0:ac:9b:98:a4:db:82:dc:d0:3d:39:0b:e0:c7:
         47:77:1e:1f:07:ab:36:36:b7:15:a9:13:9d:7a:64:71:fc:58:
         9d:b0:25:36:36:e8:74:8f:71:b1:52:e5:95:ef:3a:e0:db:a9:
         9c:14:f8:80:ee:94:cf:4f:63:a2:ca:9b:7c:3a:3f:55:9c:4d:
         0c:ab:f7:3c:4b:46:d3:de:97:f2:f9:8b:52:f8:f9:ef:cf:7b:
         7a:5a:12:ec:76:b2:2d:2e:6e:a9:aa:8b:75:6a:f8:bf:78:e9:
         ba:a5:c2:36
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE
NDQ5NjFCMTQwHhcNMjYwNzI0MjM0NDQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYzZjhmMC04OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUXHWsEhFIJkvKpmE7lITtfw9PO7FM6Kx5xiOkZXHYRrlg2tgPQHoARfSzo6
xYUxcS0x6IrbIYJrQi2tMCFIdbN+6NdL6y+80SherPBqRwwKXAFa3c/+a7aPBAKO
sKNluWOX/jVVP6NCjVU6I0gSKAKyk5CtHMphwlw8uquZ2oye6TMLlIu19idogQUs
uTVu0VTQkDpHFP3l/gpClTtadHJySqlAD+IC++mGOJtDesdYMXESkoJVjE17Lbbc
U12EFT2dw1aPaymS5FNHzJvbp5NtKmcu87uelWqPIDBkVpMOpBx/ZhcQL/4IFhtA
iX0ZQWb5oepgKSI2T/AZ/CK+EQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGPy4PDo
Fe5Jtt0Wc0HfCnStev0WMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC
MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA4ODgvNkM4RTNBQTZFQjE0MTFFQkIyRDdERDY4QzRGOUFFMDIvQjZGQzMwOTZF
QjE2MTFFQkI1MjVDRDZBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ2A8AwQCe/3IMA0EAgACMAcDBQAkAXXAMA0GCSqGSIb3DQEBCwUA
A4IBAQB54N8YOJNVhzbSXvMdg0FQ9LV7wD0/KYtun1tMzWiL19wX0tI7thOdPV/Q
4C/2YPPwiwaM1i8riXbos5kTP8mWWr4DuQIT06M7Ms3KqjjZyYE7CBK+tpodkDMj
HzMjxkgEX4tV/bNEBDvJZWUQny2U42MNk9JRrRzBaI0d3rl+iwWWV/77skJKWxpu
HsVej1RHBqbA8KybmKTbgtzQPTkL4MdHdx4fB6s2NrcVqROdemRx/FidsCU2Nuh0
j3GxUuWV7zrg26mcFPiA7pTPT2Oiypt8Oj9VnE0Mq/c8S0bT3pfy+YtS+Pnvz3t6
WhLsdrItLm6pqot1avi/eOm6pcI2
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:58 2026 by rpki-client