Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa
File:                     EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (raw, json)
Hash identifier:          cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=
Subject key identifier:   5C:F6:4E:AA:62:65:1E:F8:0E:C2:F1:7C:B0:CF:88:7B:73:27:13:46
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       093A
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 20:25:26 +0000
ROA not before:           Mon 02 Mar 2026 20:25:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     2519
IP address blocks:        103.6.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Mar  2 20:25:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5f236-3271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:08:eb:5c:57:40:12:fc:b7:40:f4:c3:2f:
                    17:b4:18:d4:4b:71:12:cb:c4:52:e5:fa:db:a2:78:
                    1e:bf:24:03:24:af:11:12:57:d0:2d:8c:7e:f1:3f:
                    2f:03:3a:19:c6:cf:1a:3c:c7:da:e0:c2:0b:b3:41:
                    2f:9f:20:b5:b7:89:ed:29:23:a5:ba:c4:d8:00:00:
                    ff:f2:8a:aa:dd:7e:76:a3:e5:61:1b:0c:23:9b:b4:
                    f0:ba:4d:b2:38:71:03:8b:94:b8:7f:9f:6f:9e:5a:
                    48:ec:9c:81:d1:7b:55:5c:ed:47:97:f3:2b:de:35:
                    0e:a5:85:20:a8:53:f5:1e:d6:44:74:29:7a:9f:68:
                    27:17:17:55:2a:c9:2f:e6:f6:33:1f:34:6b:46:52:
                    5b:13:a1:e6:56:24:dc:41:72:33:08:20:b1:58:74:
                    22:62:29:3c:3a:a5:5d:e2:17:49:fc:7f:2d:de:24:
                    9e:f0:46:ac:4c:d5:d6:1c:87:7d:d4:49:74:3d:03:
                    7e:ea:43:a8:39:96:60:97:66:ab:52:a0:e5:34:b1:
                    d9:7c:62:0d:cc:b0:81:71:21:dc:67:fa:34:7b:3e:
                    e3:84:b3:56:4f:ff:82:5c:51:d6:7b:48:d2:a0:b4:
                    e4:1e:ad:ed:e7:f2:2b:c4:ed:84:33:ce:9d:29:64:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F6:4E:AA:62:65:1E:F8:0E:C2:F1:7C:B0:CF:88:7B:73:27:13:46
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:4d:44:2b:f8:0f:ad:17:e8:33:ce:44:6d:44:56:fb:e0:
         e6:76:15:59:75:8e:13:05:10:88:8b:95:8c:62:4b:b9:cc:98:
         53:aa:96:22:88:c1:f5:9f:5e:3a:27:a9:a3:45:3d:8f:dd:86:
         c9:5a:68:2b:b2:05:4e:75:8c:c6:60:d6:83:ee:38:3c:af:19:
         a1:43:ca:e6:9f:6b:6a:9c:81:fa:98:c8:40:bb:f2:17:e9:0b:
         d8:4b:a6:07:d5:24:f8:4a:b8:9f:59:a0:e3:86:b6:2a:55:ef:
         5a:cf:26:05:1a:b1:73:44:a6:b2:04:96:c2:4a:2e:00:34:ab:
         18:73:84:2a:b5:79:bd:90:69:82:76:7a:cc:ca:93:8b:b5:99:
         0a:a9:4b:cf:5b:ed:c0:07:fe:3e:fe:f5:dd:57:63:5d:9a:38:
         1c:0b:57:47:53:64:4a:81:97:21:af:08:9f:a7:cf:f4:fc:8e:
         1d:e6:2f:cf:8e:eb:bf:16:56:0c:7a:ed:01:14:60:af:68:10:
         12:99:1b:49:f8:a9:6b:66:62:45:6f:be:fa:d1:be:2a:ce:46:
         1f:e8:fa:37:87:05:aa:70:ac:cb:46:c5:9d:57:1f:df:4d:17:
         16:1e:65:97:ba:02:45:0c:2c:6c:96:f0:45:bc:fd:a2:2c:b2:
         ce:6a:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:59 2026 by rpki-client