Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/47F9786C171B11ECB022FD54C4F9AE02.roa
File:                     47F9786C171B11ECB022FD54C4F9AE02.roa (raw, json)
Hash identifier:          grjTjwUmIQWnJUgfXc//a/uLJu9sPuMlpiThsp7xszE=
Subject key identifier:   93:ED:C6:74:60:E2:F9:BF:C9:A2:99:E9:53:37:33:09:36:14:E6:BF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       173C
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/47F9786C171B11ECB022FD54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:16:20 +0000
ROA not before:           Sun 04 May 2025 16:54:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56264
IP address blocks:        106.0.60.0/24 maxlen: 24
                          106.0.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5948 (0x173c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: May  4 16:54:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a403e4-d3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:52:97:98:bb:f4:e5:d7:ca:dc:08:bf:f1:
                    b8:a7:c8:ae:73:ea:f7:d4:53:c5:fc:09:13:cf:77:
                    8c:4f:97:62:d4:00:f9:f4:21:cf:18:7c:d2:97:09:
                    d6:b6:d4:7f:4b:88:02:5f:62:ef:64:ef:48:9a:ff:
                    a1:76:d0:6d:81:19:72:b8:5d:d8:c0:9d:b3:41:62:
                    e3:fc:5f:64:94:0d:5f:9c:6f:6e:50:90:de:42:08:
                    e9:a2:32:82:67:9c:42:cc:1a:e2:3d:9c:8d:77:34:
                    9c:96:8a:2a:3e:21:a7:15:77:f0:b1:9c:0c:25:2d:
                    92:e3:ff:e8:20:37:b7:79:e0:ad:0f:dd:e3:14:9c:
                    00:90:13:c3:61:fd:a3:f3:76:4f:2b:90:de:5d:3e:
                    39:4b:15:bb:b9:36:ce:c0:fd:7f:ef:fc:57:9c:14:
                    b8:09:ad:56:fc:3a:d6:af:1f:a5:b3:15:fb:2a:b5:
                    bf:d4:ae:66:19:8b:9b:2b:a8:b7:58:f3:0f:c3:c8:
                    aa:a4:b9:2e:b1:7d:b8:62:c7:6e:ef:cb:52:5e:ca:
                    93:05:c4:88:e3:37:2c:c6:1e:34:2d:cf:59:d1:fa:
                    ab:39:69:80:a6:91:10:98:f8:f1:69:c3:7f:b0:cc:
                    a3:82:09:e8:f0:41:d7:b4:8f:66:5b:3c:50:bf:99:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:C6:74:60:E2:F9:BF:C9:A2:99:E9:53:37:33:09:36:14:E6:BF
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/47F9786C171B11ECB022FD54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:25:67:f8:9e:4c:8c:4c:60:7d:af:51:67:3b:e5:73:fc:62:
         66:d5:28:30:2a:0a:ab:86:8e:25:de:95:d7:c4:38:31:c5:ef:
         14:1c:99:88:9b:2b:3e:67:04:23:54:f5:83:07:49:7a:e1:05:
         55:f6:52:19:f4:bc:b2:f4:bd:b4:d9:2b:aa:ec:87:70:1d:00:
         fe:61:ec:93:d5:8d:ee:52:d9:76:d5:e6:64:d8:a3:43:44:84:
         76:f5:96:7b:d6:8e:86:11:16:90:66:38:d2:de:64:36:eb:cc:
         44:75:e7:e9:ee:e0:0c:c6:a0:b1:3a:51:66:4b:8a:3c:66:6e:
         d6:7d:c4:ba:57:13:cb:ae:2f:67:2d:56:26:62:f0:0d:4b:a8:
         26:02:ed:f9:49:20:70:64:c0:89:5c:53:da:ab:eb:60:3b:14:
         75:bc:09:de:25:b0:98:56:8c:a5:19:f8:86:21:9a:20:ab:ad:
         0c:e3:f9:9e:b2:c8:0e:bf:f4:8e:81:11:63:c6:5d:86:b1:f7:
         92:06:b2:3c:da:22:ae:4e:41:ca:19:6d:bd:7d:94:57:a3:f3:
         86:7d:09:45:30:14:c3:41:0b:b1:89:6e:46:8d:b4:c7:65:b8:
         8c:bb:ac:e2:8e:45:4b:7e:97:69:4a:08:dd:c8:47:8f:58:61:
         ee:b6:f3:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0
RjU1NTU4REYwHhcNMjUwNTA0MTY1NDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDNlNC1kM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBZSl5i79OXXytwIv/G4p8iuc+r31FPF/AkTz3eMT5di1AD59CHPGHzSlwnW
ttR/S4gCX2LvZO9Imv+hdtBtgRlyuF3YwJ2zQWLj/F9klA1fnG9uUJDeQgjpojKC
Z5xCzBriPZyNdzSclooqPiGnFXfwsZwMJS2S4//oIDe3eeCtD93jFJwAkBPDYf2j
83ZPK5DeXT45SxW7uTbOwP1/7/xXnBS4Ca1W/DrWrx+lsxX7KrW/1K5mGYubK6i3
WPMPw8iqpLkusX24Ysdu78tSXsqTBcSI4zcsxh40Lc9Z0fqrOWmAppEQmPjxacN/
sMyjggno8EHXtI9mWzxQv5l0zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJPtxnRg
4vm/yaKZ6VM3Mwk2FOa/MB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw
NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUYxNjMvMDI5QUY5ODYwMDc2MTFFOEIzNTk5RDE3QzRGOUFFMDIvNDdGOTc4NkMx
NzFCMTFFQ0IwMjJGRDU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBagA8MA0GCSqGSIb3DQEBCwUAA4IBAQBgJWf4nkyMTGB9r1FnO+Vz
/GJm1SgwKgqrho4l3pXXxDgxxe8UHJmImys+ZwQjVPWDB0l64QVV9lIZ9Lyy9L20
2Suq7IdwHQD+YeyT1Y3uUtl21eZk2KNDRIR29ZZ71o6GERaQZjjS3mQ268xEdefp
7uAMxqCxOlFmS4o8Zm7WfcS6VxPLri9nLVYmYvANS6gmAu35SSBwZMCJXFPaq+tg
OxR1vAneJbCYVoylGfiGIZogq60M4/messgOv/SOgRFjxl2GsfeSBrI82iKuTkHK
GW29fZRXo/OGfQlFMBTDQQuxiW5GjbTHZbiMu6zijkVLfpdpSgjdyEePWGHutvMB
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:42 2026 by rpki-client