Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa
File:                     06239BF2677111F0BB789073C4F9AE02.roa (raw, json)
Hash identifier:          ZQ/BdX/5Q3geNUAzu42OIAmZumGNrffiueKHNoVmkq0=
Subject key identifier:   D6:03:34:65:01:70:1A:70:31:3B:E9:BF:E4:2A:7E:D5:4B:DC:A9:BA
Certificate issuer:       /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial:       77
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:01 +0000
ROA not before:           Fri 29 Aug 2025 08:59:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     18234
IP address blocks:        202.56.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
                          rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Validity
            Not Before: Aug 29 08:59:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3f50d-2627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:86:c9:a6:9e:60:a5:be:83:fe:05:1b:fe:
                    bf:69:74:0d:30:ab:b6:70:8e:c6:2c:86:c5:eb:a3:
                    59:39:a1:d3:ac:1b:76:7b:54:c0:f3:88:a6:73:96:
                    c4:82:0b:d0:48:73:c4:cd:7b:9d:66:02:db:4f:6d:
                    7b:7f:2e:98:28:14:cb:5c:bc:c3:b4:1f:f0:a8:bf:
                    75:a8:f1:29:ac:65:09:4f:dd:48:00:4d:7d:35:74:
                    71:dd:5b:ae:11:83:71:f9:1b:17:f3:9b:79:99:00:
                    44:b9:75:7d:5c:16:2c:b6:22:9d:54:ab:5f:97:e2:
                    30:3c:f1:12:f6:1a:ef:cd:12:65:a9:ec:cf:a2:9d:
                    77:49:d9:ca:d1:01:44:1a:45:62:04:41:71:a6:0a:
                    4f:09:7a:3a:d5:88:ab:0a:3a:fa:f5:f1:8d:08:ff:
                    40:39:19:91:0d:dc:b7:b3:ad:31:c1:c2:27:34:47:
                    52:d6:2c:6b:96:ac:a8:2c:2c:0a:3a:da:45:fd:e1:
                    33:d0:bc:24:76:81:48:a9:68:c9:45:59:9d:b9:e8:
                    9b:a9:8c:65:5d:7c:2e:1d:29:42:70:ff:b0:e8:e2:
                    59:79:47:e2:a4:87:8d:e3:dd:2a:65:85:41:e4:1b:
                    20:fa:24:51:bc:ec:53:e7:d7:ff:5f:f1:8b:91:01:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:34:65:01:70:1A:70:31:3B:E9:BF:E4:2A:7E:D5:4B:DC:A9:BA
            X509v3 Authority Key Identifier:
                keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.56.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:ae:3f:e3:27:d1:c1:36:a6:22:3e:95:1e:e8:c8:fd:e3:e0:
         95:c5:bd:bb:d7:ab:7e:33:51:a9:3e:80:b2:b1:55:1d:dc:24:
         2f:38:86:b6:4e:7a:16:8f:d6:1e:8f:dc:31:de:41:1d:2f:2d:
         2d:1d:ca:bb:62:35:a5:72:a2:dc:1b:f8:df:64:f8:92:4a:b6:
         f4:30:47:37:17:8b:3b:25:cc:19:f0:ef:66:12:2a:68:c2:56:
         eb:30:9f:9d:5c:83:e7:83:c2:4b:cc:0c:43:a8:ba:6f:c0:7f:
         c3:1e:1b:43:2a:d2:4b:4b:49:c0:1c:93:ca:6d:33:b0:cc:95:
         88:14:fe:62:38:57:81:7b:26:46:19:21:72:ab:95:7d:5f:d4:
         a9:8e:85:bf:b5:3e:c6:a1:4e:f9:0d:03:81:be:39:8d:fb:ed:
         ca:ea:c2:95:30:42:80:c5:39:45:40:c9:92:75:08:a5:e8:da:
         62:3b:79:12:5f:19:1b:82:5c:4d:80:c4:68:4d:1e:a5:98:32:
         d6:03:a7:72:eb:c2:27:6f:91:34:b9:18:4e:57:de:2c:a7:2b:
         80:0e:a7:47:31:e4:40:2f:9e:d9:56:60:63:de:f5:31:6f:34:
         95:25:b6:95:0a:df:31:cb:b3:f6:82:64:66:fa:30:43:1d:7b:
         60:af:0b:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:57 2026 by rpki-client