Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa
File:                     B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (raw, json)
Hash identifier:          EHjrgV+zCp3M+YUIjW+WaA9S8cDjg/AOkY5k5d/f3LU=
Subject key identifier:   B3:2E:38:94:83:90:80:3E:86:B8:C9:BD:1D:63:EA:35:9D:68:F4:4C
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0F28
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:38 +0000
ROA not before:           Tue 02 Sep 2025 18:38:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     60024
IP address blocks:        103.142.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3880 (0xf28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:38:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a487ae-2394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:6b:43:1f:d2:33:0e:da:97:1d:86:93:e3:
                    59:d9:d9:f0:25:af:e9:d8:93:8e:8e:ab:78:6e:06:
                    9c:f3:fb:b4:11:b7:16:4e:57:8b:7b:48:39:3c:57:
                    11:7a:b0:e3:fe:62:ec:94:6a:93:98:25:8b:f4:53:
                    5f:e3:24:f0:0f:cf:a0:98:9e:96:ce:f0:50:d8:87:
                    44:42:f7:b0:46:fb:c3:4a:76:95:40:a3:16:2f:b4:
                    96:fd:22:11:f5:aa:d9:02:e5:17:ea:f6:b4:6c:bc:
                    69:3d:20:1a:5e:8f:39:c0:b1:10:f6:f7:39:0f:9a:
                    8c:30:a3:07:32:fa:c3:72:08:a4:37:36:5d:fc:39:
                    b0:c7:22:05:0c:e2:c6:a6:9c:20:c0:39:5f:99:b1:
                    36:da:fe:69:a8:4f:62:1b:35:08:65:7e:cd:bb:13:
                    68:3b:d1:cd:02:ca:1c:73:a6:36:96:8d:aa:2a:1c:
                    39:6b:6f:c4:d0:77:b9:33:9f:14:8b:e9:0c:e5:4c:
                    8c:13:59:db:7b:42:34:d9:f0:91:6c:38:90:fc:99:
                    b1:b2:3e:47:ce:0f:ce:19:c3:f3:27:f1:3e:0e:30:
                    3a:f3:50:8b:50:eb:24:33:80:b4:5c:63:7d:a1:95:
                    4c:79:48:58:01:82:9e:c2:07:d2:b0:5b:c0:47:e4:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:38:94:83:90:80:3E:86:B8:C9:BD:1D:63:EA:35:9D:68:F4:4C
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:0a:ca:16:93:24:5e:8b:55:18:2b:e5:9b:39:e6:6a:00:
         39:9d:68:f0:65:ef:16:b8:bd:a0:bc:72:52:0f:85:5a:74:e0:
         fd:96:b5:0c:6e:49:67:e3:dc:a9:e8:7e:82:96:6c:8b:f8:90:
         99:1f:ef:a5:2f:81:89:d3:cf:2a:6c:f0:13:ee:8c:6a:59:9c:
         22:69:51:48:82:ab:7d:1b:70:1f:17:fb:4e:24:0d:d2:f0:96:
         b3:a9:7d:1a:f6:bf:6f:ed:51:3a:b9:52:70:85:32:1c:a4:26:
         5a:ef:02:63:eb:36:b1:7e:2a:8b:ae:8b:c5:85:b9:de:1c:22:
         14:62:8a:2a:50:7f:91:2e:52:74:53:60:31:35:0e:43:46:b3:
         92:15:6e:65:13:e2:9f:a9:a0:12:3c:09:17:91:06:0f:42:93:
         cb:2d:44:3c:e6:6f:69:86:68:66:0b:74:9b:ba:be:af:cf:bd:
         42:82:69:78:0f:64:91:48:d6:90:f0:0d:03:d3:92:5a:1a:d6:
         cb:ce:18:39:87:e2:d0:d5:dc:9a:93:68:1c:b5:cd:3f:9d:d2:
         46:11:cd:64:f5:c9:89:5c:ce:91:6b:44:49:87:57:73:8e:29:
         75:37:59:5d:2f:0a:c8:36:84:12:78:2e:4a:bd:db:fa:07:e2:
         f5:bd:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:57:53 2026 by rpki-client