Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa
File:                     6722D08898C711ED81343D33C4F9AE02.roa (raw, json)
Hash identifier:          d/K2kBr8KtXE/HLaEOgUfuFdhAxsaOPQXuuLatAvwbE=
Subject key identifier:   0B:B2:9E:0F:6E:47:EF:F7:CF:1E:D2:44:8F:9B:46:5D:09:60:BD:F8
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       0258
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:19 +0000
ROA not before:           Wed 17 Dec 2025 02:21:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58678
IP address blocks:        103.61.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Dec 17 02:21:55 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a455eb-fbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:e4:5f:2b:f2:33:02:d1:70:0d:40:75:4d:
                    90:aa:e5:02:e6:97:fa:42:3f:fd:6c:b7:c7:e6:92:
                    89:8c:5a:be:df:ae:84:e4:8f:99:a5:c2:97:ab:bf:
                    ce:7f:8c:3e:59:80:b6:f3:86:71:4a:17:a4:d3:78:
                    e0:85:6a:26:b9:35:7c:24:f1:97:7f:aa:30:9b:94:
                    a0:d2:57:e9:f7:9f:30:c1:49:f2:b9:f2:94:71:86:
                    37:b1:b3:9d:20:ce:f1:89:78:9f:2e:86:d9:81:c4:
                    dc:7e:cc:6d:2a:ec:3b:a1:34:6b:de:d4:75:9b:fe:
                    cb:77:e6:c1:e6:81:3c:7d:9f:54:44:17:e0:5f:cd:
                    e4:d0:63:77:55:ac:1d:1e:e0:e8:14:95:11:fd:9c:
                    5a:e1:1a:d8:03:11:88:67:20:ce:ec:09:27:d2:65:
                    11:e5:24:c3:54:19:06:e1:d5:5b:56:55:cb:96:65:
                    5e:13:c6:4f:c8:ec:d2:a3:b7:eb:c0:a3:8a:0f:90:
                    ec:8d:8a:a9:9c:a9:8e:69:63:dd:54:03:1b:3e:92:
                    5e:21:15:2b:c0:ad:9b:f2:86:46:74:8b:c8:31:6c:
                    cd:66:08:65:10:88:bc:cc:c2:5c:c1:7b:60:87:50:
                    a8:61:d5:04:5d:b7:5c:2e:42:d3:c9:8d:7b:9a:05:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B2:9E:0F:6E:47:EF:F7:CF:1E:D2:44:8F:9B:46:5D:09:60:BD:F8
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/6722D08898C711ED81343D33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:cd:13:9c:19:aa:f1:16:4c:f0:61:5a:d2:03:ef:ab:75:
         7f:4c:52:c9:5e:8b:15:b2:58:56:dd:be:aa:47:20:dc:e7:d4:
         da:2c:07:f1:3c:6f:60:05:fe:cd:36:84:a1:41:fa:7e:ec:fb:
         4b:3c:da:36:59:b8:a9:5e:dd:b8:f1:84:ac:99:cc:d6:39:63:
         8a:4c:d8:24:1d:35:2a:f0:6c:67:c8:90:ac:91:97:bf:52:f3:
         e1:66:9c:44:29:60:cd:28:71:05:99:ca:53:e0:a1:81:22:74:
         99:c5:43:72:41:f7:94:a3:d0:48:73:b0:eb:d8:43:4e:40:f5:
         20:9f:f4:f8:8a:29:36:d7:d4:d7:b6:97:e0:17:fa:9c:9e:8e:
         5d:c4:31:70:f3:b4:4d:e0:c3:fd:2a:89:a0:ee:1b:33:99:60:
         cf:e8:59:0b:83:de:16:3f:24:51:c0:d3:68:e8:a2:76:ae:08:
         86:82:c0:1c:61:ea:7d:c2:d6:d5:ed:cf:66:c7:71:e2:9b:a3:
         66:4d:37:f2:43:32:26:b5:59:f6:a0:79:89:58:b9:b6:4e:9a:
         80:02:a6:61:4f:f6:21:f7:40:0c:ef:41:6a:21:4a:2a:1b:52:
         fe:a4:a7:cd:5b:c9:78:80:13:d7:a0:04:db:e3:5b:2f:91:00:
         d7:04:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:25 2026 by rpki-client