Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
File:                     FF9C9380E84D11EFBDF0C033C4F9AE02.roa (raw, json)
Hash identifier:          L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=
Subject key identifier:   18:95:80:9F:7E:EE:3D:8B:0D:EE:BE:AA:CB:78:5E:6D:72:69:48:CA
Certificate issuer:       /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial:       D9
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:39:54 +0000
ROA not before:           Fri 13 Jun 2025 06:47:35 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132835
IP address blocks:        103.250.60.0/23 maxlen: 23
                          103.250.60.0/24 maxlen: 24
                          103.250.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
                          rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
        Validity
            Not Before: Jun 13 06:47:35 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5932a-87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:bf:3d:ba:57:c2:74:00:c2:59:fd:9b:ae:
                    f8:4c:e3:da:5e:c4:63:6c:b2:52:6d:eb:a7:5d:0a:
                    81:ef:cb:83:df:0d:ba:95:0a:11:1a:a8:21:d9:fb:
                    a0:88:4d:af:09:0a:4c:8e:bd:ab:56:d4:69:51:1f:
                    16:b6:76:dd:ff:eb:2d:a1:cb:4c:05:8f:75:8b:7c:
                    a2:ba:97:76:01:87:39:e0:77:3f:e7:39:15:5a:ec:
                    d2:f1:4b:81:50:4e:bc:19:36:99:fa:16:a5:dc:45:
                    f3:3e:79:46:0e:e5:a2:ab:67:dc:dc:89:d0:2f:50:
                    6c:31:e6:c9:b7:5b:69:94:4f:bb:4a:25:5d:b0:36:
                    c1:44:6d:95:84:25:32:86:4b:21:c9:a2:49:93:a1:
                    72:da:c2:64:26:49:e2:9a:76:eb:7c:ba:eb:93:72:
                    f8:9e:f2:f2:a9:a6:9e:f2:21:5c:4a:08:ea:9a:d8:
                    1e:92:37:00:84:5a:16:ee:a5:8a:14:82:a4:e8:a8:
                    07:ef:9f:f5:f9:44:24:af:55:de:ce:d6:ae:06:71:
                    7d:59:31:ed:0d:fe:79:94:d0:46:23:18:98:a8:ca:
                    67:04:47:ec:4a:f2:64:a2:03:a9:66:e4:ce:52:eb:
                    67:95:f3:3c:1e:fc:9b:13:3d:e4:08:9f:e3:9c:3f:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:80:9F:7E:EE:3D:8B:0D:EE:BE:AA:CB:78:5E:6D:72:69:48:CA
            X509v3 Authority Key Identifier:
                keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:cf:c6:f0:27:80:8b:30:13:4f:f4:d4:59:8c:b6:ca:bc:
         3d:5f:cf:11:76:b2:40:13:72:4d:4d:d7:96:7b:cc:ca:09:14:
         1e:0f:a6:18:7b:2c:2e:96:46:ba:71:40:6d:fc:61:24:05:45:
         54:b7:16:64:d7:ca:d5:a4:d2:2f:5c:44:ae:51:0f:85:e6:bc:
         68:13:2e:eb:91:44:bc:06:fa:fa:71:57:fd:dc:47:59:39:9f:
         5d:d3:e6:21:77:3d:95:82:51:a1:e0:11:72:52:b6:16:d5:da:
         3c:88:a1:61:b1:34:46:a8:e7:b3:6f:ea:af:a5:21:25:fe:74:
         83:df:1c:aa:6f:46:9d:71:91:0c:22:03:70:39:e7:09:d8:91:
         71:7f:6c:9b:a7:13:48:9b:a6:41:94:38:03:24:19:bd:6c:6a:
         38:83:9d:7f:90:8f:1a:cc:3b:10:cc:e1:a3:42:1d:1f:67:25:
         de:e3:02:27:cc:a4:59:4f:ee:45:53:50:66:5d:1a:9f:65:7f:
         12:67:20:a6:13:08:00:64:72:75:ae:26:c4:94:62:20:00:9f:
         79:82:e4:93:7e:be:5e:4f:ce:2e:b1:a5:7f:df:86:e9:3b:a7:
         ca:6c:3e:dd:57:62:76:d4:a5:82:0d:da:05:8d:e5:9b:50:e4:
         7d:6a:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:40 2026 by rpki-client