Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa
File:                     E90DFC9CF00111EFB541185CC4F9AE02.roa (raw, json)
Hash identifier:          nosnNeB7bjHY4Gtf73OVNfR5S0TLhhOu6xIYpb8mBh4=
Subject key identifier:   78:2C:5D:AC:FA:2E:9D:6A:74:28:AA:F2:30:D9:4A:9C:CA:05:DD:DA
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       0628
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:58:58 +0000
ROA not before:           Fri 16 May 2025 23:33:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.166.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: May 16 23:33:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58992-61f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:2f:fc:5d:e8:42:4c:12:78:c0:6c:17:d0:
                    92:84:af:4f:27:ec:47:07:04:f0:4a:25:c9:f9:01:
                    ab:87:2d:26:22:11:d3:fa:1c:71:3a:07:71:84:8a:
                    c8:16:23:1e:13:eb:db:08:a4:c1:31:5c:c6:85:e5:
                    50:58:59:3f:92:71:dc:a0:70:f7:14:8e:d6:c1:a1:
                    7e:e2:43:42:cd:38:1c:b5:56:3e:23:62:db:03:1a:
                    80:8b:1f:cc:b1:9d:c0:be:b2:7d:af:f3:5d:eb:5a:
                    fd:1a:a0:e9:10:03:78:0c:a9:be:e0:24:e2:81:be:
                    85:d0:15:57:29:0b:4a:f1:c5:4e:f3:73:81:f7:28:
                    c9:e9:c3:11:9c:c8:0d:4c:b4:35:b8:26:9c:5d:ba:
                    b4:0c:fb:2e:01:93:1a:2f:85:74:70:a8:c2:98:73:
                    c5:5d:23:c4:85:cf:47:58:0a:3b:9e:5c:1b:8a:a3:
                    ad:2e:10:56:da:2f:3e:95:e0:1b:92:c1:ba:6a:b1:
                    4c:c1:14:32:3f:78:59:01:ca:01:47:f6:8b:03:cf:
                    3a:b9:b8:ef:c4:e9:a1:ed:77:dc:8e:4a:83:d0:e6:
                    26:ab:c3:f2:ee:b4:47:84:89:11:ee:98:a3:dd:71:
                    8f:3c:4c:01:d3:6b:1b:76:ae:0f:8c:7a:c9:ae:a9:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2C:5D:AC:FA:2E:9D:6A:74:28:AA:F2:30:D9:4A:9C:CA:05:DD:DA
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:95:45:67:30:36:66:21:42:2c:be:78:2d:f8:f1:8c:3d:
         3c:81:f1:09:18:b5:08:03:be:be:fa:e4:9f:51:1a:89:5b:ae:
         b0:bb:0c:ff:dc:8c:3d:51:f0:7e:a9:2d:6c:9e:30:39:54:bb:
         c9:ef:fc:58:44:e9:6c:e7:c3:15:cf:2c:ac:cb:f6:b7:1b:1b:
         2f:06:dc:49:7d:79:33:a7:ba:ae:02:73:10:98:81:3e:57:c4:
         c9:b6:92:78:a8:76:42:b1:84:bf:d7:74:f3:33:bd:e4:18:09:
         d3:24:b4:7f:4b:75:92:52:32:bc:f1:9b:12:6e:e4:6e:4f:91:
         23:5f:0c:7d:7b:5b:83:90:84:c5:83:1f:50:36:68:b5:96:ce:
         37:fc:3a:23:1c:4a:ac:6b:9f:0b:c5:52:8d:56:82:08:8d:5d:
         03:da:59:09:fa:7b:11:c0:29:eb:34:f4:0b:24:34:c7:97:2f:
         0a:f6:5b:f9:33:48:83:c2:40:91:cf:c2:64:3d:5f:d8:b9:be:
         46:6a:6a:4f:15:6a:7b:50:52:ee:bb:11:4c:09:be:44:17:5c:
         95:43:be:c0:62:7a:6b:4e:0b:ab:2b:40:f5:1b:ee:29:ed:a3:
         ec:4d:29:9c:43:86:76:1b:91:1a:30:1e:33:f5:01:4b:fd:9e:
         5f:85:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:24 2026 by rpki-client