Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa
File:                     8EFF79AA9C9B11F09188945AC4F9AE02.roa (raw, json)
Hash identifier:          vGe+KixEjqlg5WCoS+gdNG4Wuiu3wBG8EHGv4Rq3UEg=
Subject key identifier:   53:45:0F:86:F7:E3:93:EA:AF:CA:E3:3C:58:A1:35:5F:2A:C5:BA:37
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       079F
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa
Signing time:             Thu 08 Oct 2026 22:42:48 +0000
ROA not before:           Thu 08 Oct 2026 22:42:48 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     401984
IP address blocks:        103.99.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 21:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Oct  8 22:42:48 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac81c67-e815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:14:65:a9:14:14:0c:56:97:b6:ea:db:70:
                    06:59:cb:68:c3:26:cc:72:d7:ba:e8:03:df:f6:f9:
                    87:48:bc:c7:96:39:9e:60:d9:55:ae:a9:2b:9c:80:
                    06:5e:c8:85:f1:d3:4d:84:08:d6:dd:e7:8f:24:9a:
                    48:d9:2e:94:a3:d0:72:56:f9:b2:44:e7:30:c7:2c:
                    b1:e1:56:44:90:a9:08:78:33:e3:7a:15:cc:e0:4e:
                    ad:34:47:32:e2:e7:62:85:7f:13:84:fc:a8:96:a0:
                    46:83:60:67:66:4e:b9:3e:e4:5c:5b:81:41:94:50:
                    84:31:d6:14:22:83:9b:ea:e4:72:16:66:31:64:42:
                    fb:26:25:55:82:e7:9f:e7:54:ab:3b:1a:df:8d:41:
                    97:58:b9:8b:03:7b:2f:c4:17:5f:8b:a6:32:07:96:
                    4c:b7:6b:61:0a:7e:49:04:9c:81:63:79:55:16:a9:
                    b7:58:4e:8b:1f:39:98:12:a5:e7:2f:7f:be:1e:bc:
                    ac:f1:a0:e1:18:f3:65:b4:01:11:39:0c:db:5a:2f:
                    1d:4f:91:e8:b6:05:a6:23:c8:41:5b:a0:61:b3:e9:
                    13:02:2c:3b:67:1d:a5:b7:03:ec:18:ca:9b:17:9b:
                    1f:c5:58:da:a5:04:47:56:2f:2f:71:ac:35:c5:f1:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:0F:86:F7:E3:93:EA:AF:CA:E3:3C:58:A1:35:5F:2A:C5:BA:37
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:fb:59:3f:5c:47:3f:2b:c0:1b:7e:f0:b0:83:14:45:c8:
         92:e0:00:07:5b:8d:b0:6e:79:bc:83:be:c4:03:29:07:bf:13:
         e3:f7:17:63:f7:29:4f:1b:5c:54:02:52:36:c0:36:72:f2:e9:
         37:eb:41:78:95:8b:d8:27:36:ab:19:b2:d0:7f:f2:01:02:d9:
         59:e4:d4:b0:aa:97:02:15:88:8d:95:8d:f5:c2:ef:a7:93:f3:
         85:16:da:48:90:71:dc:c4:e9:5b:4b:ca:12:1a:75:dd:3e:87:
         87:6e:5d:1e:63:d7:5d:07:08:9b:9b:2d:68:21:74:0f:cc:33:
         94:fd:a8:f4:53:fd:39:9f:a3:ef:37:e6:06:6d:6d:bc:d4:d8:
         df:ef:c4:32:b2:c6:2a:20:7a:8d:f4:89:05:35:d5:e0:8d:55:
         08:ef:0f:71:49:e0:0c:a1:72:7b:a9:cd:61:10:1d:64:5c:30:
         93:5e:7c:5b:33:2f:1b:33:18:0d:00:b0:49:0e:8e:ed:ad:33:
         2a:97:43:88:05:cb:ff:52:dd:bd:2a:22:4b:89:a0:29:ba:ce:
         cd:c9:46:cd:aa:05:ef:69:d4:69:11:42:1f:97:ff:07:01:22:
         de:cc:bf:45:8d:8b:31:d7:c8:02:8a:0e:61:41:9f:18:95:81:
         6f:dc:88:4a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB
RjA5Rjg0MTEwHhcNMjYxMDA4MjI0MjQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4MWM2Ny1lODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjzUUZakUFAxWl7bq23AGWctowybMcte66APf9vmHSLzHljmeYNlVrqkrnIAG
XsiF8dNNhAjW3eePJJpI2S6Uo9ByVvmyROcwxyyx4VZEkKkIeDPjehXM4E6tNEcy
4udihX8ThPyolqBGg2BnZk65PuRcW4FBlFCEMdYUIoOb6uRyFmYxZEL7JiVVguef
51SrOxrfjUGXWLmLA3svxBdfi6YyB5ZMt2thCn5JBJyBY3lVFqm3WE6LHzmYEqXn
L3++Hrys8aDhGPNltAEROQzbWi8dT5HotgWmI8hBW6Bhs+kTAiw7Zx2ltwPsGMqb
F5sfxVjapQRHVi8vcaw1xfGmrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFNFD4b3
45Pqr8rjPFihNV8qxbo3MB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw
NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvOEVGRjc5QUE5
QzlCMTFGMDkxODg5NDVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ2M8MA0GCSqGSIb3DQEBCwUAA4IBAQCmiftZP1xHPyvAG37wsIMU
RciS4AAHW42wbnm8g77EAykHvxPj9xdj9ylPG1xUAlI2wDZy8uk360F4lYvYJzar
GbLQf/IBAtlZ5NSwqpcCFYiNlY31wu+nk/OFFtpIkHHcxOlbS8oSGnXdPoeHbl0e
Y9ddBwibmy1oIXQPzDOU/aj0U/05n6PvN+YGbW281Njf78QyssYqIHqN9IkFNdXg
jVUI7w9xSeAMoXJ7qc1hEB1kXDCTXnxbMy8bMxgNALBJDo7trTMql0OIBcv/Ut29
KiJLiaApus7NyUbNqgXvadRpEUIfl/8HASLezL9FjYsx18gCig5hQZ8YlYFv3IhK
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:22 2026 by rpki-client