Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
File:                     8FE569EC776B11F0B156EB5AC4F9AE02.roa (raw, json)
Hash identifier:          mAetrzmxM2ZT4+crCKozE+BAJ9ciI8UzV9keXEOThDU=
Subject key identifier:   30:79:43:5A:35:C7:A0:17:72:08:71:35:EB:7A:C8:5B:9E:14:AC:A3
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       062A
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:59:00 +0000
ROA not before:           Wed 13 Aug 2025 06:49:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.166.60.0/23 maxlen: 23
                          103.166.60.0/24 maxlen: 24
                          103.166.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: Aug 13 06:49:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58994-f264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:6c:dd:73:bb:e8:58:f0:5b:24:a4:be:d3:
                    b3:7e:d1:55:fa:e7:18:99:5e:f5:4b:67:02:78:00:
                    51:dd:0d:fc:31:92:0b:ed:b0:93:26:18:ed:e6:22:
                    1b:6c:7b:05:32:84:61:a6:86:c8:db:b7:e5:43:16:
                    0f:5c:1d:0c:06:10:ab:99:dc:22:4f:15:79:67:45:
                    d4:73:94:d8:d4:0c:52:71:7f:6e:06:0f:3f:cc:90:
                    e7:06:0e:7a:72:1c:23:31:ed:68:c7:ea:66:92:49:
                    c4:d8:9b:22:b4:da:16:a8:de:9a:b2:4d:18:f7:bb:
                    7e:0e:03:98:1a:46:3c:6d:68:3a:8c:64:7c:f6:7a:
                    b1:37:b3:39:98:20:1d:6b:05:16:e2:1d:16:9a:58:
                    d9:7d:8b:10:ee:34:b9:0b:cd:94:aa:fc:04:48:75:
                    d6:1a:29:1c:fc:f3:6d:93:16:42:0f:0c:95:0d:66:
                    24:65:c6:ad:28:c8:fa:33:99:0e:f8:69:63:a1:71:
                    cb:3a:30:dd:33:66:8f:01:fd:a7:f1:80:29:02:0c:
                    79:53:94:7b:57:de:b1:7e:7a:00:f9:4a:a7:eb:74:
                    78:53:a6:72:f9:82:ce:fc:72:84:e4:d1:42:9f:3d:
                    93:4f:c0:38:df:77:f2:01:4d:aa:23:2e:56:37:cb:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:43:5A:35:C7:A0:17:72:08:71:35:EB:7A:C8:5B:9E:14:AC:A3
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:a8:bb:af:b7:21:1e:a5:7e:cd:90:39:df:f6:d0:c2:42:
         8f:95:bd:90:f3:3d:e9:08:79:48:d3:3f:60:fb:f7:a8:03:24:
         5b:d9:d2:fd:6b:e9:0e:d3:80:4e:3e:7b:9e:f1:0c:8e:46:ec:
         2b:69:3f:a2:cb:2a:c1:ff:23:03:96:b9:a2:9a:a6:de:14:c3:
         4e:ba:2f:14:2b:6a:4b:92:8c:d6:50:8e:89:44:cd:53:41:58:
         bb:05:d8:e0:ea:53:d3:40:d9:e7:d8:c0:46:db:25:23:af:5c:
         c6:d9:5b:27:f1:05:f6:4c:68:bb:8a:b7:0b:ed:dd:ad:03:57:
         5b:c2:b9:1a:38:af:27:9e:48:c9:9c:96:fb:e4:cf:4e:8a:60:
         0e:84:19:1b:f5:d7:9c:69:2c:84:fc:d5:dd:0b:2f:62:ab:71:
         be:5c:cb:9a:b9:77:b2:72:b2:de:8a:7e:fe:b2:49:e1:9f:92:
         76:84:1e:ef:2c:c9:b0:ba:55:4a:e9:fb:4d:c5:02:f5:89:68:
         2c:1d:70:ef:87:0a:f6:88:56:66:a7:80:3c:03:ff:05:fd:93:
         64:8e:33:ba:05:9a:d5:a3:ff:a0:18:56:be:36:be:62:79:63:
         ed:6e:0d:1b:e8:b6:54:57:38:33:cc:8a:c4:bb:e3:c1:6e:bc:
         d1:02:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:15 2026 by rpki-client