Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa
File:                     997C96220CC211ED8C32645BC4F9AE02.roa (raw, json)
Hash identifier:          m0VczHunCUj3NnxAFWU5QA67YBiWaVQ6jnViwqflf+8=
Subject key identifier:   B5:36:AF:BB:F5:D2:DA:04:20:9A:DA:8D:89:81:A5:D7:82:34:30:E1
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       086F
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:13 +0000
ROA not before:           Fri 14 Nov 2025 20:10:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     59316
IP address blocks:        116.206.60.0/23 maxlen: 23
                          116.206.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Nov 14 20:10:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48399-d344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:11:0e:77:a3:e3:55:b1:4d:a5:eb:68:81:
                    f0:e8:72:ef:df:b8:c2:1b:2f:d9:d5:e8:62:52:c4:
                    6d:de:49:1d:a6:6f:53:6c:8d:60:cc:6f:f7:79:d6:
                    de:7e:7c:e2:99:91:6d:c2:0a:c2:bf:92:3e:77:3a:
                    b3:52:84:b6:c4:3d:f0:83:8e:0b:4f:0c:dd:3e:7d:
                    43:d8:0f:44:07:82:3c:69:38:67:be:a6:a8:23:51:
                    ca:07:ea:4a:0b:f0:fa:a9:65:46:d3:13:3a:f8:12:
                    ce:27:3d:82:70:8d:46:67:c2:20:88:7e:75:d9:49:
                    35:0c:f3:96:96:64:07:68:92:c3:79:00:50:95:44:
                    cd:cd:4a:96:93:68:d7:0a:70:1d:57:90:f7:9c:94:
                    2e:f8:2e:e5:76:be:36:dc:82:06:b2:56:45:60:06:
                    ba:41:a1:af:50:2e:a5:b4:da:05:6c:e9:59:a0:c5:
                    98:df:89:83:31:10:65:4e:06:e3:32:ec:95:65:eb:
                    f1:5b:9b:76:2d:55:3f:00:fa:90:99:ca:9d:70:1e:
                    3b:ee:e3:49:b3:db:e0:39:a3:62:a3:4b:38:7f:f8:
                    07:e3:84:6c:e5:c6:cb:a0:58:83:01:ed:78:20:06:
                    d5:67:3d:a0:3b:f0:81:38:f1:24:34:69:53:5b:d7:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:36:AF:BB:F5:D2:DA:04:20:9A:DA:8D:89:81:A5:D7:82:34:30:E1
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:23:b1:aa:86:dd:b0:c7:ad:f7:3e:26:78:fc:f3:e8:a3:6e:
         46:ca:0e:dc:9a:cf:31:e9:66:ad:70:d3:67:6a:b4:0a:ef:76:
         f2:02:a0:52:7d:d8:c3:1d:f4:57:04:c4:2b:9a:51:0a:37:a8:
         5d:23:63:eb:cc:a7:73:d9:be:d1:8a:c6:9a:e5:90:c4:d1:47:
         48:47:f5:95:00:9e:c1:a1:d2:ce:4f:fe:8f:d3:15:ba:16:c7:
         99:ed:ba:b0:22:db:dc:08:1d:cd:e1:1f:e6:ae:09:24:2d:62:
         9e:15:a2:33:0d:58:20:53:f8:59:d8:87:64:de:fb:cb:e5:ca:
         aa:cd:9b:60:16:5d:99:39:da:02:ab:81:88:61:28:6a:7e:ad:
         12:59:e2:13:dd:fe:bb:aa:a3:90:a7:39:0d:99:68:ed:88:bc:
         48:a0:d0:e4:9d:06:b3:f0:de:49:c2:fd:25:1c:19:3a:94:32:
         0d:67:06:15:5e:a8:10:de:e3:48:9a:49:c7:d4:d0:4d:48:19:
         9c:c3:e6:7e:58:7e:97:e0:c5:45:05:b5:cd:d2:bb:66:36:4a:
         b9:fc:c9:ac:81:10:dc:14:ef:ef:56:81:13:52:36:79:b4:3d:
         50:8e:c0:b4:27:5e:9b:72:09:2c:83:2d:46:a3:bf:00:c8:e3:
         9a:e9:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:50 2026 by rpki-client