Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/4258A6E4A5C811F1899C272B7111F970.roa
File:                     4258A6E4A5C811F1899C272B7111F970.roa (raw, json)
Hash identifier:          Ahnmyjer/Tq5KlPbMUHNSw4GOKBd1rboHr0F21V1iro=
Subject key identifier:   F2:BE:75:67:F9:FF:F9:14:13:C7:B6:1C:24:48:88:E5:C0:CD:F1:2B
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       09A4
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/4258A6E4A5C811F1899C272B7111F970.roa
Signing time:             Tue 01 Sep 2026 05:44:55 +0000
ROA not before:           Tue 01 Sep 2026 05:44:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4637
IP address blocks:        103.6.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 20:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468 (0x9a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Sep  1 05:44:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a966657-d975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:ff:36:2f:a9:ff:4e:ac:9f:6c:45:1e:eb:
                    df:45:d9:c4:e7:64:52:05:58:80:da:f7:98:9d:ea:
                    57:55:bf:ea:97:4d:74:a1:d0:58:54:b8:29:e9:9c:
                    c7:bb:9a:49:67:c7:d9:67:b8:22:7b:90:89:7a:07:
                    b7:29:63:67:23:81:ad:68:b6:d7:27:c8:e1:e4:d7:
                    d1:aa:c4:dc:82:fa:f7:6b:91:c7:a1:37:5c:7c:99:
                    bc:48:be:57:3e:37:59:13:e3:0e:57:cf:74:50:5e:
                    2b:a4:5e:8f:ac:ea:74:7b:d4:1f:5d:a1:2c:f2:b5:
                    59:b3:70:ae:10:0f:40:5f:e5:5e:80:29:0e:c1:e7:
                    27:72:1f:04:7e:e2:f4:e7:6c:af:30:9d:31:88:99:
                    91:38:13:47:7f:da:fd:b7:ae:9a:d5:2a:33:0c:4f:
                    9f:db:c6:c2:b4:c1:1d:15:c2:2f:cb:38:85:9d:ef:
                    b0:47:aa:13:d9:48:3b:72:e6:56:3d:48:80:88:15:
                    08:a8:97:d7:e6:bd:1c:c4:9e:db:91:8f:39:92:45:
                    cf:07:d5:1f:74:18:a1:46:74:2d:ae:dd:9c:02:8b:
                    3d:62:63:ab:6f:b7:0f:b8:c4:b5:3b:d7:fb:da:8c:
                    58:7d:d8:fc:34:80:6c:30:9e:cf:a1:3c:f7:e0:3f:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:75:67:F9:FF:F9:14:13:C7:B6:1C:24:48:88:E5:C0:CD:F1:2B
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/4258A6E4A5C811F1899C272B7111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:80:00:b8:26:cb:c1:75:b1:ef:2a:3e:b6:00:e6:75:f6:
         f1:28:bf:77:67:92:45:a6:bf:4f:5d:48:91:42:7b:59:e4:2b:
         25:6f:1f:9a:9a:4b:17:c7:cf:6d:78:6f:15:36:f7:5e:e9:de:
         b5:0e:3d:cb:de:69:14:dd:89:74:49:74:60:dc:de:b7:3a:de:
         1b:54:d9:eb:5d:3c:95:6c:5f:2a:4b:24:c5:f7:dc:50:89:d5:
         f0:83:99:9e:8b:e7:7e:a6:90:82:78:72:64:61:7d:5c:9e:d5:
         14:00:1e:39:53:16:a1:6a:39:35:df:5c:54:8b:df:87:e6:12:
         d1:ca:b2:c5:e6:24:f8:f2:b1:e5:3c:bb:d1:a4:d9:fc:6d:91:
         08:ff:23:4a:dd:14:e0:a4:3f:10:03:d0:7f:ba:36:ef:67:35:
         7e:d3:b7:0d:6c:18:64:0b:74:54:01:b7:6b:45:22:c2:09:a4:
         14:a5:f7:c1:85:70:9d:32:4c:df:ef:0d:0e:fe:ea:db:09:7e:
         57:dc:6d:cc:2a:2f:22:3d:0a:38:b3:e0:4d:af:2e:0b:35:21:
         25:4d:03:c5:38:c7:c1:67:b0:9b:ff:fc:3a:1b:0f:a2:77:46:
         57:11:93:67:52:dc:54:08:4c:ee:c3:2d:0e:49:11:bb:56:37:
         23:cd:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:44 2026 by rpki-client