Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EFE689283FDE11EE8EC3E546C4F9AE02.roa
File:                     EFE689283FDE11EE8EC3E546C4F9AE02.roa (raw, json)
Hash identifier:          l4cH+Kd8IS2iSsBJ5FqvVYqBQcR5SdbO0GPyafLEhSg=
Subject key identifier:   7E:4F:1E:31:6D:88:27:87:26:9C:D7:C4:58:4A:40:79:E8:12:D5:CA
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       093B
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EFE689283FDE11EE8EC3E546C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 20:25:29 +0000
ROA not before:           Mon 02 Mar 2026 20:25:29 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.6.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 19:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2363 (0x93b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Mar  2 20:25:29 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5f239-e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:02:3d:4a:83:e2:39:c6:b3:ff:a2:b6:44:
                    71:84:45:1e:a7:ee:42:5f:ec:b5:ee:80:b4:87:b0:
                    54:36:44:38:bf:d4:13:7e:6e:65:bf:2f:a6:df:33:
                    e3:ec:e4:8c:19:ee:28:fd:90:bd:f1:4b:fb:15:e4:
                    7c:70:08:b8:22:86:1a:da:a4:38:d9:26:5b:6f:f4:
                    2a:18:a8:af:95:47:c2:7c:3c:6e:ab:7f:50:54:9f:
                    cb:d8:3d:91:34:81:0a:6d:c1:14:06:ba:73:63:3a:
                    68:0c:4e:fe:ca:ab:72:65:7c:8b:c3:ec:7b:04:11:
                    b6:bc:66:c4:4a:97:bb:cf:68:4c:ec:7d:b1:dc:62:
                    54:d3:90:62:80:80:43:4a:87:79:6c:d2:cd:b4:a0:
                    04:d6:87:9e:f7:2a:aa:86:26:25:65:19:b5:eb:3f:
                    27:84:95:be:82:42:23:0e:dd:9f:98:2c:9c:fe:30:
                    41:a5:42:19:29:bf:c4:a5:a5:3c:3b:9f:9d:72:da:
                    61:08:10:04:a3:08:dd:be:4c:72:3e:a1:bf:4a:7a:
                    f0:a6:6a:a3:9d:19:c8:21:ab:cd:53:bd:b6:b1:ff:
                    93:18:dc:50:33:47:88:67:c6:9d:a9:8f:47:19:3b:
                    4e:ad:2d:79:9e:31:18:7d:4a:5c:f1:fb:c6:c6:48:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:1E:31:6D:88:27:87:26:9C:D7:C4:58:4A:40:79:E8:12:D5:CA
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EFE689283FDE11EE8EC3E546C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6c:a9:8d:2e:d9:3d:e0:66:a5:1e:b2:e5:77:19:6b:83:b0:
         a2:c1:bf:f2:4a:0a:ce:8c:5c:25:0f:a7:d4:77:79:bd:49:8f:
         55:b5:ad:de:b2:c0:00:cd:42:ba:38:3b:85:a8:66:8d:63:e8:
         76:c9:65:41:76:0e:e8:8b:6b:20:a9:15:e8:80:44:82:61:15:
         ca:69:ab:2c:6a:7a:b9:45:32:7a:bc:cf:2e:3d:e1:60:bb:37:
         20:34:78:73:22:6b:e5:c7:c7:90:10:34:bd:42:7f:8c:c9:bf:
         f7:88:aa:b2:ba:e1:f6:e5:04:7e:5e:36:03:81:14:5d:3c:f7:
         ca:59:e8:f6:1c:24:47:94:1b:b9:2a:89:55:73:be:80:b2:12:
         97:96:f4:0a:2a:27:08:84:5e:32:f2:a4:c0:50:d8:31:8c:12:
         6f:54:63:e1:4c:10:9d:4c:08:2a:c5:95:bd:b0:74:a7:50:01:
         24:c8:6b:8c:b8:22:88:af:d2:b3:5a:99:0c:65:39:59:6a:77:
         79:da:3b:93:f1:00:bd:0b:e3:5d:df:8e:4e:7d:ec:66:fa:96:
         2a:30:d4:3f:76:7d:d0:20:9e:8f:5b:05:79:8c:39:80:5f:e1:
         30:1a:25:bc:67:51:6a:41:e5:ca:13:ed:c6:91:b3:ef:61:3e:
         7b:f5:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:16:58 2026 by rpki-client