Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa
File:                     ED388A1840BB11E9A6718844C4F9AE02.roa (raw, json)
Hash identifier:          7EPo/flJodzTo6ZQPpsGfoF7ns5UVMsBGxpdCAuapx8=
Subject key identifier:   AE:25:CF:6F:F9:33:50:EF:5B:F2:55:A9:48:B3:92:45:C9:76:72:68
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       1355
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa
Signing time:             Tue 26 May 2026 17:25:45 +0000
ROA not before:           Tue 26 May 2026 17:25:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134451
IP address blocks:        103.60.9.0/24 maxlen: 24
                          2406:f400:120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4949 (0x1355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: May 26 17:25:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a15d799-eb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:82:69:6b:8d:63:60:d6:1d:1f:89:fc:9f:
                    2b:82:7c:1a:0a:04:22:d1:12:54:51:24:a2:13:bb:
                    47:f6:e5:3f:5a:4b:d4:48:f4:12:54:fe:75:20:b0:
                    91:a1:f3:20:50:54:51:4c:6e:a3:c9:a0:59:82:2d:
                    03:0d:d9:94:e8:d0:49:0b:fd:b9:bb:a8:8a:65:c7:
                    53:5e:d3:b4:fc:a4:46:5e:ca:17:dd:be:42:da:81:
                    b2:57:ae:a5:3f:cf:9e:ee:8e:d0:cc:30:c6:1b:51:
                    88:d0:ce:60:7b:4d:f5:7c:fb:c4:58:05:07:df:72:
                    ae:7e:47:08:8b:62:78:67:ac:a8:0e:2f:ce:81:7f:
                    50:62:a2:1d:e0:80:d3:64:dc:c2:92:65:b7:2f:72:
                    00:4d:3b:4a:a9:9c:dc:17:76:3c:1a:d3:85:e3:32:
                    52:8f:6e:4a:f1:08:45:f4:9c:26:15:1f:14:b7:fc:
                    62:64:02:13:7d:33:a0:e8:ed:d7:6d:82:b0:03:48:
                    b1:10:c3:ea:e7:5a:58:b7:f7:49:fd:92:a9:4e:04:
                    92:ef:75:c9:af:49:9a:56:25:ef:da:a5:97:74:c2:
                    53:7f:bb:a2:c8:ce:4d:00:35:03:05:a2:5b:ad:33:
                    8d:61:bf:5f:ee:c0:25:19:bb:d5:9b:10:b8:5d:d5:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:25:CF:6F:F9:33:50:EF:5B:F2:55:A9:48:B3:92:45:C9:76:72:68
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.9.0/24
                IPv6:
                  2406:f400:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:d1:99:00:33:3d:98:a1:0f:3a:c2:2e:8f:27:2b:72:2c:
         7f:ff:8d:c6:51:84:c1:83:16:13:e8:d1:c1:e7:29:b3:d0:a1:
         73:de:12:08:4e:32:80:c3:49:34:37:61:44:fd:3c:86:40:3e:
         69:95:4f:93:e7:1d:e1:c8:f1:05:20:d5:30:52:60:90:c9:26:
         ca:75:d0:72:39:fb:42:48:db:5e:07:25:03:d6:c5:8e:cc:2a:
         f3:28:95:78:07:8b:46:59:d6:2f:27:57:a1:1f:19:ee:48:2e:
         7c:ea:8b:0e:ad:ce:7c:49:ab:be:71:51:0b:ea:64:dc:3b:5a:
         df:73:55:c5:bf:26:b3:7c:77:ce:52:fe:5b:eb:14:81:01:d8:
         d1:fb:3c:c9:40:b4:12:32:41:be:66:1f:6f:e3:42:26:60:d3:
         3a:71:91:8d:33:25:c4:ad:2a:c3:fb:a4:d8:26:94:33:44:15:
         4e:62:7f:3b:bf:62:b5:e9:51:49:8c:10:0c:0e:4e:b8:49:59:
         15:97:58:22:9b:9c:ce:9d:e9:50:29:ea:72:ca:53:56:03:d5:
         5d:3a:3f:a4:b8:e8:5d:ca:ed:17:23:56:ff:03:56:12:80:08:
         a2:37:20:e0:12:b6:a4:0f:db:c4:87:4a:30:92:6f:dc:9a:e7:
         89:42:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:43 2026 by rpki-client