Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa
File:                     06239BF2677111F0BB789073C4F9AE02.roa (raw, json)
Hash identifier:          T3OYTu/32SVxCdgICapazIRsBCFcGsOXoETc6LRjL4U=
Subject key identifier:   A0:51:E5:22:40:9A:03:C5:16:59:E5:E3:8F:A4:8E:2D:E5:08:7D:28
Certificate issuer:       /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial:       D6
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 06:57:32 +0000
ROA not before:           Sat 29 Aug 2026 06:57:32 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     18234
IP address blocks:        202.56.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
                          rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Validity
            Not Before: Aug 29 06:57:32 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9282dc-0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:89:d0:05:ec:36:1b:55:00:47:53:29:ee:
                    87:0c:3a:28:f7:06:49:f8:26:d1:16:46:cb:a8:81:
                    bb:47:01:be:0e:4b:da:97:79:e7:07:37:d3:ba:93:
                    84:71:17:4b:55:05:ac:28:84:53:72:30:05:58:bb:
                    85:bb:b6:80:ab:ce:c5:81:2d:12:89:ed:69:63:32:
                    fd:bf:1f:a9:75:9b:5e:e3:75:8f:f5:3f:43:98:aa:
                    b7:de:65:45:12:a6:8f:56:eb:c5:fa:ef:20:de:53:
                    3a:56:bd:0c:ee:64:d7:22:4a:b2:c8:5e:91:2b:f5:
                    8f:73:1d:e5:2c:3d:38:20:e1:de:4f:64:88:4e:bc:
                    37:1e:4d:c2:76:93:6e:24:d7:09:a3:65:94:be:7d:
                    5d:8e:ba:b7:b3:44:13:f6:3d:b9:51:5f:07:8d:cb:
                    db:dd:0c:bc:d2:32:7e:d8:93:93:26:e6:83:cd:83:
                    bd:dc:88:56:c8:66:06:e7:94:18:b4:0e:b8:a1:5a:
                    5b:8b:e6:df:80:29:46:61:bd:07:a9:02:f9:3e:23:
                    57:e2:1b:2f:f0:15:f1:d9:13:39:40:3f:23:03:ae:
                    57:3b:62:12:55:0c:05:ed:9a:de:f7:70:ce:4d:d0:
                    a2:72:c6:2c:ef:3c:39:da:72:bf:ac:12:03:69:cb:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:51:E5:22:40:9A:03:C5:16:59:E5:E3:8F:A4:8E:2D:E5:08:7D:28
            X509v3 Authority Key Identifier:
                keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/06239BF2677111F0BB789073C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.56.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:ef:ef:f1:61:fb:4c:c0:8f:7a:d3:bb:f2:5e:44:61:44:
         91:a7:0c:18:18:71:41:01:a6:49:07:dc:96:7e:b3:e4:cb:31:
         97:1e:48:dd:44:7c:99:35:c0:d5:68:55:0b:50:29:5b:8a:ea:
         0b:e1:89:81:e4:cd:14:36:70:39:76:33:21:d1:5e:7d:c5:7e:
         3e:91:d5:3f:86:dd:15:6c:00:51:31:aa:ce:aa:39:fb:11:35:
         59:f9:6b:03:81:3a:9c:7b:ba:bd:c1:38:00:01:be:ff:b8:39:
         40:bd:c7:6c:fe:45:0a:fa:84:6f:3b:b8:3a:58:18:87:d6:ee:
         be:34:c6:27:56:ae:1d:44:9d:37:e0:d0:37:c8:6d:06:94:1f:
         a9:20:8e:83:6a:a1:f6:d2:ee:41:fe:ea:28:82:be:f4:cd:5b:
         a7:af:2b:41:bf:19:30:74:2f:16:c9:9e:0a:de:b0:fd:e2:b7:
         53:87:59:f7:c3:8c:fb:65:40:f5:07:0a:55:df:2b:c3:2e:38:
         f7:23:10:4c:80:95:af:98:6c:97:c0:b8:ab:d8:49:8e:60:67:
         60:c6:0d:d6:47:08:12:25:62:93:7e:69:08:21:f6:f0:e9:ad:
         84:98:c2:52:02:b0:9f:f0:53:82:8a:2a:12:e2:79:e3:13:f3:
         af:35:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:46:21 2026 by rpki-client