Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa
File:                     F898AEBC8F6411EA96126E5DC4F9AE02.roa (raw, json)
Hash identifier:          CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=
Subject key identifier:   62:17:43:E4:56:D4:E0:CB:97:3B:12:99:9C:98:09:84:89:89:15:87
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       0A19
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:48:30 +0000
ROA not before:           Fri 28 Nov 2025 19:22:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138424
IP address blocks:        103.125.60.0/24 maxlen: 24
                          2001:df7:2500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: Nov 28 19:22:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a451be-b72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:fc:e1:03:07:d5:54:80:3b:48:51:66:5c:
                    43:9e:4b:fd:e2:b7:03:d4:45:03:3a:0e:ea:c8:f6:
                    0e:20:48:fc:e6:7d:84:3f:94:9c:df:94:01:28:40:
                    9e:98:97:fd:07:ac:61:68:ba:62:e5:77:c9:2c:da:
                    0b:f1:8a:80:88:44:11:c9:67:09:24:d7:b0:f0:49:
                    d3:6b:fd:a9:7b:76:d8:9d:b0:5b:86:02:a5:73:79:
                    99:4e:ed:70:b4:7b:47:3b:ac:1c:66:bf:f1:ec:ab:
                    64:27:2a:22:24:b7:90:73:be:da:66:96:41:d6:ba:
                    68:2e:46:d9:1d:b6:f6:92:a2:3c:8c:a4:b6:ad:a1:
                    81:32:72:ce:da:fc:c9:fd:64:5a:4e:ec:78:89:43:
                    bc:99:6b:24:3a:30:b9:4a:cc:1a:b6:8e:03:4a:8c:
                    dd:3c:90:75:ae:11:e2:26:b6:75:1d:90:b9:b7:6c:
                    c9:ff:7f:57:01:55:21:c7:db:2f:17:dd:8a:64:93:
                    1c:a4:8c:96:d2:5c:2d:74:c9:8c:20:1a:93:99:6b:
                    6f:eb:fd:a9:48:e9:0d:d3:f6:9f:db:f7:49:59:64:
                    b8:6b:15:63:ae:06:63:26:b0:74:bd:c7:78:95:05:
                    8a:bd:ad:03:9c:c9:72:f3:6e:c4:8e:9a:76:7a:9e:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:43:E4:56:D4:E0:CB:97:3B:12:99:9C:98:09:84:89:89:15:87
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/F898AEBC8F6411EA96126E5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.60.0/24
                IPv6:
                  2001:df7:2500::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:fc:4b:7c:4d:5f:0f:61:5b:7e:24:26:61:86:bc:8e:43:
         09:4e:96:35:f5:be:b8:63:c3:c2:08:09:28:2c:be:d3:d2:8c:
         87:88:5b:88:47:91:ca:55:a5:2a:69:2a:da:67:bd:0d:ce:ef:
         37:c1:5c:3a:ad:9f:64:7c:12:5d:f7:98:a6:33:65:9c:ce:1a:
         00:a3:bd:58:27:2a:18:83:49:e3:66:4f:df:e8:b5:70:ec:5a:
         9c:92:32:90:4c:c6:60:bf:75:2f:34:77:f4:35:b8:e0:64:14:
         90:8b:cb:29:32:6c:11:1f:8e:c2:2c:76:c1:0f:83:92:ef:1e:
         cb:07:d1:97:f2:77:0b:09:e6:e4:f0:25:3d:90:5a:84:09:76:
         62:e2:29:c9:10:5f:d5:75:f1:af:c5:89:db:c7:af:4c:d3:3c:
         3e:94:82:5f:b2:b8:fb:eb:6f:99:39:ce:d4:11:71:cf:39:67:
         d9:7a:fa:63:06:80:eb:ca:92:d8:eb:e8:91:6a:cf:ee:69:5d:
         37:99:fb:f2:b3:50:04:fe:38:cc:f7:ba:87:ae:61:0c:1c:5e:
         7e:ab:83:01:e1:31:50:e4:74:8a:04:ac:ef:b3:4f:fd:55:fa:
         03:1e:05:b2:3e:b9:2c:0b:38:d9:4d:c4:f6:a5:72:41:5b:14:
         3b:34:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:05 2026 by rpki-client