Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
File:                     6A9F1EFECC1211EEAA175022C4F9AE02.roa (raw, json)
Hash identifier:          FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=
Subject key identifier:   60:2C:CA:EA:62:D8:F6:48:30:FE:7F:78:B3:3C:C6:0A:EC:7A:32:13
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       01BF
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:22:27 +0000
ROA not before:           Wed 03 Sep 2025 04:22:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58061
IP address blocks:        103.99.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Sep  3 04:22:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7c283-e264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:55:be:f8:12:42:4c:99:52:ac:24:80:77:
                    c4:34:21:e6:98:b4:63:5c:f9:3e:c8:98:10:db:95:
                    81:2e:38:24:67:c4:99:98:53:21:5c:e7:c0:5a:be:
                    79:27:c3:79:cd:6a:e3:ad:ee:b0:8f:70:5c:5b:1e:
                    54:a7:79:4f:39:30:aa:31:6b:20:7d:d9:79:fb:40:
                    cc:d9:33:8e:a1:ca:53:89:57:65:d5:51:ba:d0:32:
                    f8:d6:6c:74:c2:0f:3a:12:91:21:c7:1a:90:48:90:
                    c9:08:0e:c4:f9:9f:d6:86:f4:c9:7a:a9:c2:ba:f7:
                    6a:49:87:d9:42:db:67:f5:38:87:a2:39:ea:68:2e:
                    93:e1:bb:bf:71:11:45:e8:96:9c:cf:35:1e:6f:d8:
                    f2:55:d2:2c:93:20:19:73:48:e3:fb:70:9e:c6:6a:
                    27:aa:4a:c5:46:b8:65:fa:81:9d:25:8a:f1:b2:fd:
                    b2:c2:4d:62:f2:d2:49:05:8a:61:b6:f6:5b:7e:6a:
                    9d:4e:f3:b5:03:c5:5f:d3:48:67:c7:fd:d8:e5:b3:
                    80:21:8f:d3:5e:75:da:4d:fc:1e:fe:74:f1:82:1a:
                    9a:9a:be:a6:c2:89:31:d0:81:67:2e:c7:56:09:2d:
                    bc:94:91:2d:17:2d:ba:61:d4:b7:9f:24:99:54:df:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:CA:EA:62:D8:F6:48:30:FE:7F:78:B3:3C:C6:0A:EC:7A:32:13
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:da:58:a7:37:f2:cf:2b:a8:d8:05:29:70:a2:c4:8a:17:cc:
         d1:a7:27:c6:52:c1:db:aa:fc:9d:42:cb:6f:3d:90:d4:98:3f:
         8a:79:32:da:a0:42:de:38:b2:87:e4:3a:dc:01:60:be:61:5f:
         8e:56:d3:62:90:3c:b6:d7:a7:8a:eb:52:b8:93:dc:ae:b8:9a:
         84:a0:b1:37:b1:90:d1:db:85:6c:ac:e8:5b:73:f9:fe:d1:5c:
         16:2f:f5:58:f7:99:43:9c:00:ce:69:f3:43:a8:a7:f4:98:e0:
         43:a5:c8:b0:08:37:b3:87:d1:ef:60:60:fa:27:ab:aa:cf:bd:
         f4:14:66:9b:93:0d:ce:34:fb:0f:e1:a5:3e:62:0e:a1:69:38:
         92:65:cb:b4:eb:bb:b1:30:a4:28:48:96:a0:06:2e:f2:28:96:
         c1:88:70:5d:8b:1b:35:88:e4:32:ae:c2:51:6d:48:72:8c:e9:
         bc:4f:3b:9d:6f:61:fb:f6:2f:b0:3a:3b:7c:c3:70:8c:0a:1e:
         65:76:38:99:e8:6e:c1:3a:6e:3c:92:61:61:35:83:ce:88:d9:
         55:6e:1f:b1:ff:0c:52:52:5d:ac:ec:97:ea:f5:c3:45:cd:ee:
         9e:81:3f:58:8f:12:02:af:d3:8e:9f:64:2b:e9:53:ce:e6:63:
         40:38:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:43:49 2025 by rpki-client