Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6A18A5B0F88811EF9CB20317C4F9AE02.roa
File:                     6A18A5B0F88811EF9CB20317C4F9AE02.roa (raw, json)
Hash identifier:          8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=
Subject key identifier:   BE:39:07:C3:08:2D:12:B1:33:B9:BB:EA:E0:15:B6:91:F6:24:71:8F
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       35AB
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6A18A5B0F88811EF9CB20317C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:20:22 +0000
ROA not before:           Mon 03 Mar 2025 23:37:06 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     131072
IP address blocks:        203.10.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Mar  3 23:37:06 2025 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=69a46746-9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:ad:f8:bc:b7:35:17:5b:f0:ba:73:b6:5a:
                    67:cf:ae:e5:51:bf:56:dd:bf:7f:94:fe:6c:25:f8:
                    ac:47:b2:2c:3c:c7:e2:67:2b:60:b3:32:c9:5b:b1:
                    78:66:58:3e:a4:bd:d6:26:0d:17:ea:46:21:e4:a3:
                    d8:8d:a0:fc:ef:9f:4f:19:fa:f0:fc:a0:60:1e:f7:
                    f1:d9:75:46:ca:40:c3:c8:26:7a:23:5f:44:2a:76:
                    6e:39:a6:1c:ff:ea:34:be:26:87:15:d5:7b:ec:cd:
                    17:f7:6b:fe:9a:86:cb:15:5a:5a:ae:f4:7f:94:18:
                    6b:5b:ec:a2:a2:e3:2a:c9:ba:7e:38:f9:04:c1:57:
                    79:40:79:4e:85:45:38:be:be:d3:66:ba:7d:0b:da:
                    3c:09:22:fc:0e:36:4f:86:e6:91:73:8e:6f:13:62:
                    9c:1a:e5:3c:2e:2e:87:47:52:af:3c:db:20:99:31:
                    29:ee:b8:13:9f:38:c0:fb:c6:00:dc:83:ee:27:4b:
                    26:dc:dc:1d:5e:ef:76:c4:ce:fb:0d:80:c7:e0:81:
                    aa:35:26:7c:37:5b:f8:f3:1a:24:da:1f:91:76:0d:
                    de:ab:e5:92:04:0c:78:2f:43:de:5f:d6:21:62:24:
                    06:14:61:33:7a:02:23:3e:9f:78:71:1b:b8:fe:04:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:07:C3:08:2D:12:B1:33:B9:BB:EA:E0:15:B6:91:F6:24:71:8F
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6A18A5B0F88811EF9CB20317C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:eb:eb:4e:86:e9:37:dd:85:4e:58:73:18:1f:97:64:79:
         c5:59:05:40:95:ed:47:f1:48:35:8e:cb:6c:f9:77:ef:b1:17:
         6d:46:0f:30:fb:7c:cf:69:18:58:c5:7e:85:52:7f:03:f5:ca:
         16:12:16:10:9d:ee:f5:86:f3:6e:6b:e3:65:09:1a:1c:9a:ca:
         5a:3b:65:ac:13:c1:47:c3:05:de:b1:ca:d7:6d:b5:06:cb:f5:
         04:28:a7:0e:bb:03:d8:d4:20:ff:04:90:5f:8c:94:2f:2f:96:
         91:0f:fb:be:56:f1:a8:b9:bb:82:d8:19:d9:40:90:6a:37:9c:
         0c:e5:35:e9:63:a9:f2:ee:fa:36:75:a0:20:7c:1f:e4:6f:a7:
         3a:68:57:12:93:6a:84:70:aa:36:8e:74:45:65:63:38:3a:13:
         8e:02:3e:c3:98:d5:61:15:a1:d6:ce:66:8a:43:84:16:f5:50:
         25:d7:a3:c3:66:39:ac:bd:e6:1d:af:d4:f7:58:20:09:53:e0:
         2d:73:f6:95:85:61:cd:02:72:f7:4f:60:bc:98:56:43:84:e6:
         82:59:41:12:71:89:0c:59:ce:68:91:80:84:e3:42:41:f2:e5:
         38:72:b6:71:4a:d2:c6:48:b6:37:ef:8b:4c:d7:58:d2:b6:59:
         07:38:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:36 2026 by rpki-client