Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa
File:                     D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (raw, json)
Hash identifier:          MByRbKBm+JUM4LT1eboClzkfZWMq5pWfRvnvdbt+Df4=
Subject key identifier:   64:A5:00:D7:60:B1:6E:3D:90:2D:CC:FC:34:17:8A:41:4D:EF:25:F1
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       018E
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:40:05 +0000
ROA not before:           Fri 31 Oct 2025 04:48:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151977
IP address blocks:        103.67.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: Oct 31 04:48:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a145-662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:8e:d9:50:59:19:c3:3f:a2:c0:7a:d4:e3:
                    e7:2b:72:a3:e8:92:08:c9:5a:61:19:1b:28:40:8b:
                    70:8b:84:ee:4f:e3:27:e3:ee:db:d4:67:9e:c6:ee:
                    3e:5d:6c:44:ee:ff:9d:51:87:7d:0b:0d:6a:7f:ca:
                    03:1d:de:c6:c4:7f:59:33:e0:2b:a8:9b:f1:7c:87:
                    44:0f:26:d4:08:96:02:d7:72:60:11:ef:f9:6c:48:
                    b2:09:60:4f:fe:58:ab:7b:7f:2c:ae:0a:e3:19:7c:
                    1f:a6:23:b6:11:47:3b:0d:ec:53:71:ae:b5:b6:48:
                    5a:b8:1b:62:9c:9a:f9:47:a2:75:cc:30:5a:60:28:
                    d4:aa:bd:0c:02:dd:dd:f6:c9:4b:04:50:27:a4:75:
                    43:42:c8:38:b5:d2:ad:d9:6f:b6:20:1a:30:67:91:
                    23:d8:25:29:18:f5:7a:f0:54:18:99:bf:58:be:4e:
                    13:b4:c1:f1:44:3f:41:e7:ab:90:eb:cb:e3:2e:88:
                    e5:93:4d:5c:7a:31:cb:f9:31:8b:eb:e9:5c:1a:08:
                    77:60:5c:c3:73:b3:b6:f8:7a:e5:0e:3a:a3:44:c4:
                    84:42:f9:00:d5:86:86:ed:43:e1:5b:f7:ed:a9:de:
                    d1:ce:e7:eb:d3:b8:7c:b0:f3:04:1f:5c:49:ad:d5:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:00:D7:60:B1:6E:3D:90:2D:CC:FC:34:17:8A:41:4D:EF:25:F1
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/D1D880A6C4FB11EEA30ECF34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:89:29:60:47:93:0b:8e:e3:ad:69:bd:3e:6b:b4:8f:ee:
         5c:16:ed:a4:4f:f6:e5:b4:2b:3c:18:bc:d7:ee:b2:8e:8e:b7:
         e0:f1:4b:7a:98:8d:2f:32:f1:55:41:47:d7:88:4d:df:98:ce:
         ed:61:73:f1:10:b1:e2:e3:34:7a:8a:3c:ce:c1:5c:8c:d8:a4:
         fd:b6:b5:9e:ef:72:b9:fd:a5:d2:29:d3:df:05:d7:4c:0e:ab:
         40:14:0a:da:f2:b8:ee:4d:c0:81:8e:ca:40:23:c8:a7:8b:99:
         85:3c:5a:3a:97:7f:4d:03:18:ea:7f:6a:e5:9a:a9:b8:a4:58:
         09:bb:85:1c:4e:41:37:6f:42:01:61:40:a9:8f:49:22:d7:8a:
         68:bb:b2:d3:cc:cb:78:67:99:f0:68:da:ec:3c:97:1e:7d:ea:
         93:d0:d6:f3:84:6c:a2:65:13:74:2f:0c:13:fe:a5:20:f1:29:
         eb:2e:e7:90:92:2d:b5:0d:aa:41:b3:bb:1a:5f:3c:de:ec:36:
         2e:2e:98:c9:17:c2:9a:0d:8f:fd:c0:39:ef:12:68:38:67:3e:
         ea:f9:c3:30:59:ae:d4:52:b9:be:2c:03:70:b9:66:ba:67:ca:
         7a:aa:60:88:5f:f2:72:23:4c:e3:46:99:f2:04:9d:2f:2b:46:
         d5:eb:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:16:11 2026 by rpki-client