Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/60C94672909911F189B737F66C11F970.roa
File:                     60C94672909911F189B737F66C11F970.roa (raw, json)
Hash identifier:          MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=
Subject key identifier:   66:F8:1B:97:96:5B:DF:12:09:97:FE:99:58:26:30:42:72:58:F4:D1
Certificate issuer:       /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Certificate serial:       57
Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/60C94672909911F189B737F66C11F970.roa
Signing time:             Wed 05 Aug 2026 06:46:25 +0000
ROA not before:           Wed 05 Aug 2026 06:46:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.27.246.0/24 maxlen: 24
                          103.27.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
                          rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
        Validity
            Not Before: Aug  5 06:46:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72dc41-f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:bd:2e:ac:5c:a2:73:08:6e:f7:b9:51:02:
                    42:3e:63:36:0b:34:b8:c5:66:c4:80:61:3b:47:80:
                    e5:95:6a:68:d6:80:7d:d1:25:d3:da:fc:f3:51:57:
                    f7:0c:1a:34:8e:20:46:99:a3:ce:2c:2b:9b:44:d0:
                    3b:db:60:59:88:4b:c2:01:95:86:4c:46:6b:34:35:
                    e9:34:bb:ac:63:f9:55:92:05:ae:db:ea:1e:de:ba:
                    83:eb:cd:5c:d0:76:be:65:67:f4:97:0f:01:b7:d2:
                    5d:bb:aa:ef:54:57:a9:0e:ba:bd:ab:f7:b4:c5:8d:
                    b0:59:46:d6:d7:db:99:0f:66:01:91:c2:ec:da:6e:
                    61:37:bd:b9:fd:21:8f:d0:8f:b7:2b:ac:4f:57:5f:
                    09:dc:f6:a3:4d:13:cf:bc:6b:f4:b2:55:9a:6d:db:
                    19:f4:1f:49:f4:84:72:d6:c0:26:f7:2c:4f:14:82:
                    7d:cc:d5:c5:10:ff:76:8d:3a:53:8e:69:00:04:c8:
                    d3:cd:d7:40:e2:d8:b0:1a:00:d5:80:94:77:3a:04:
                    45:ab:42:4c:8f:9c:13:18:8e:03:6a:43:16:67:0c:
                    26:1e:ed:90:6f:7b:43:07:96:28:22:77:1e:80:65:
                    b6:67:64:78:b0:85:ce:17:de:7a:60:c0:50:27:2e:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F8:1B:97:96:5B:DF:12:09:97:FE:99:58:26:30:42:72:58:F4:D1
            X509v3 Authority Key Identifier:
                keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/60C94672909911F189B737F66C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:e3:21:f3:e8:de:57:1a:78:5f:60:bb:0e:5b:5e:0e:48:
         80:e1:e4:a3:5f:cb:b8:11:42:c4:39:0b:f7:c4:ee:83:bf:b3:
         8e:41:57:29:98:77:04:0a:52:10:58:f3:f2:b9:d7:0c:29:30:
         e0:08:d0:9d:57:d6:6c:de:70:e8:44:d4:ab:03:17:13:5d:3c:
         11:e9:f5:05:16:ec:49:4a:88:02:e0:76:45:39:a1:a7:c8:4a:
         30:35:b7:66:17:37:9d:8c:95:21:fe:32:b9:f0:2c:f0:19:71:
         af:69:0e:bb:8c:d6:48:db:52:76:99:8f:0d:cb:0f:7f:c1:d7:
         5e:ca:1c:0c:fc:f4:8f:c8:2d:31:81:ca:94:f6:12:0e:2b:ac:
         d6:61:39:93:c6:42:35:75:9d:08:c5:8e:47:a9:c6:29:41:0f:
         17:6e:c7:65:76:8e:5c:63:1b:46:69:95:17:ad:f6:31:bc:fd:
         ac:47:8d:a8:35:52:1f:52:d3:dc:c2:38:a4:c9:68:58:9a:c8:
         28:2f:85:b1:b0:56:53:18:e3:95:d8:92:27:29:59:74:2d:74:
         34:38:23:b7:2b:63:cb:58:dd:6e:85:61:18:03:84:43:92:1d:
         a3:5a:3c:75:f1:95:02:df:52:39:91:85:24:a4:ca:f5:4a:7a:
         fe:d3:be:3b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz
MTlDRjQ2RTAeFw0yNjA4MDUwNjQ2MjVaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNzJkYzQxLWY0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZ6r0urFyicwhu97lRAkI+YzYLNLjFZsSAYTtHgOWVamjWgH3RJdPa/PNRV/cM
GjSOIEaZo84sK5tE0DvbYFmIS8IBlYZMRms0Nek0u6xj+VWSBa7b6h7euoPrzVzQ
dr5lZ/SXDwG30l27qu9UV6kOur2r97TFjbBZRtbX25kPZgGRwuzabmE3vbn9IY/Q
j7crrE9XXwnc9qNNE8+8a/SyVZpt2xn0H0n0hHLWwCb3LE8Ugn3M1cUQ/3aNOlOO
aQAEyNPN10Di2LAaANWAlHc6BEWrQkyPnBMYjgNqQxZnDCYe7ZBve0MHligidx6A
ZbZnZHiwhc4X3npgwFAnLhnTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZvgbl5Zb
3xIJl/6ZWCYwQnJY9NEwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC
MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjY0Mi83Q0Y4QTA4MjFEQjExMUYxQkMxQzZENTIzRTNEOEM2Ny82MEM5NDY3Mjkw
OTkxMUYxODlCNzM3RjY2QzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnG/YwDQYJKoZIhvcNAQELBQADggEBAJ5d4yHz6N5XGnhfYLsOW14O
SIDh5KNfy7gRQsQ5C/fE7oO/s45BVymYdwQKUhBY8/K51wwpMOAI0J1X1mzecOhE
1KsDFxNdPBHp9QUW7ElKiALgdkU5oafISjA1t2YXN52MlSH+MrnwLPAZca9pDruM
1kjbUnaZjw3LD3/B117KHAz89I/ILTGBypT2Eg4rrNZhOZPGQjV1nQjFjkepxilB
Dxdux2V2jlxjG0ZplRet9jG8/axHjag1Uh9S09zCOKTJaFiayCgvhbGwVlMY45XY
kicpWXQtdDQ4I7crY8tY3W6FYRgDhEOSHaNaPHXxlQLfUjmRhSSkyvVKev7Tvjs=
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:24:11 2026 by rpki-client