Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
File:                     60A8F48A25D211ECB2CCF633C4F9AE02.roa (raw, json)
Hash identifier:          1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=
Subject key identifier:   F3:B7:31:AE:79:7F:27:63:58:DA:60:BF:93:8D:52:24:31:71:44:BA
Certificate issuer:       /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial:       056B
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:42:33 +0000
ROA not before:           Tue 04 Nov 2025 23:44:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147055
IP address blocks:        103.173.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
        Validity
            Not Before: Nov  4 23:44:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43439-af2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:e8:c9:b4:f5:9a:9e:d9:9c:3c:18:9c:85:
                    f8:3e:84:b4:42:4f:d2:f5:4b:2d:93:80:65:88:10:
                    50:9c:ea:be:30:8b:3b:81:21:ac:fe:f2:94:b1:13:
                    b6:1c:1a:6a:b6:98:dd:96:e8:78:a8:33:53:bb:10:
                    75:67:89:e2:40:2d:e7:23:ee:78:ca:00:ab:1d:58:
                    0f:bf:f8:6f:db:f5:60:e5:e4:b1:7b:69:cf:39:34:
                    ad:d3:c6:a2:8f:1b:23:cf:e4:68:3c:66:96:16:db:
                    ee:bc:a5:44:88:9f:6f:be:c2:c1:1d:a6:1d:09:a8:
                    cf:c6:4e:44:bb:75:93:df:6b:79:ca:ee:9c:b2:59:
                    3f:f6:02:10:9d:99:93:48:bf:7e:d3:5f:7b:c8:29:
                    fa:70:c2:fc:77:f1:cb:cd:cd:fa:52:32:ef:f0:0a:
                    2b:57:68:35:f2:9b:30:b4:40:d3:df:e7:bb:ab:10:
                    68:8b:03:3c:bc:2c:ed:99:21:1d:ed:3e:c7:f1:8e:
                    99:94:e5:c6:0d:41:d0:37:3d:8e:41:4a:3e:22:2e:
                    ec:c1:bd:5a:77:57:66:2d:55:e7:aa:25:5b:8e:cc:
                    37:35:b8:b9:3b:06:b5:2f:5f:fd:42:c4:55:46:e5:
                    a8:59:8e:7e:1f:17:a0:0e:9d:fa:c0:20:1f:77:1d:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:31:AE:79:7F:27:63:58:DA:60:BF:93:8D:52:24:31:71:44:BA
            X509v3 Authority Key Identifier:
                keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:c8:43:65:99:e8:67:38:10:e2:90:7c:9c:1c:97:ba:b4:
         97:ca:7c:06:3f:2c:99:b1:19:89:e4:f4:6d:49:eb:bb:46:b3:
         e9:ae:2b:c6:30:f2:cc:c5:d2:e8:24:66:df:a2:7c:38:ee:98:
         28:92:3e:bd:6d:81:1d:16:b3:63:ba:6c:46:80:24:8a:00:89:
         13:45:79:9a:a8:56:68:bf:1e:8e:29:2a:3b:db:31:b6:ba:db:
         87:3d:40:7d:74:56:4f:24:74:5b:ec:0f:3d:e7:c7:bd:b8:f2:
         37:0e:fd:c3:2c:a6:ce:bc:ad:ab:50:d9:ae:58:a1:85:ab:bd:
         93:92:80:02:19:66:97:b6:d1:1e:99:0e:7f:be:cb:e4:4b:78:
         27:93:ea:e4:af:97:d4:7d:6b:e0:b4:62:11:b4:c8:00:51:7b:
         f7:39:8d:a5:c2:11:08:ea:63:2c:23:b2:3e:c6:ff:53:d4:72:
         73:ca:df:81:68:dd:bc:13:a7:53:ba:20:4d:88:c2:7d:28:13:
         89:13:b7:ca:8c:a2:6c:ed:fb:6e:2c:b2:8b:10:dc:14:e8:9c:
         80:39:6f:2a:cf:26:33:d9:e2:55:ee:7f:c0:1a:cc:8c:25:db:
         d5:ee:aa:20:50:4d:50:11:db:89:e2:08:a2:42:28:b8:0d:93:
         ca:32:1c:31
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3
M0ExNURFRUQwHhcNMjUxMTA0MjM0NDIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzQzOS1hZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/LoybT1mp7ZnDwYnIX4PoS0Qk/S9Ustk4BliBBQnOq+MIs7gSGs/vKUsRO2
HBpqtpjdluh4qDNTuxB1Z4niQC3nI+54ygCrHVgPv/hv2/Vg5eSxe2nPOTSt08ai
jxsjz+RoPGaWFtvuvKVEiJ9vvsLBHaYdCajPxk5Eu3WT32t5yu6cslk/9gIQnZmT
SL9+0197yCn6cML8d/HLzc36UjLv8AorV2g18pswtEDT3+e7qxBoiwM8vCztmSEd
7T7H8Y6ZlOXGDUHQNz2OQUo+Ii7swb1ad1dmLVXnqiVbjsw3Nbi5Owa1L1/9QsRV
RuWoWY5+HxegDp36wCAfdx1T5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPO3Ma55
fydjWNpgv5ONUiQxcUS6MB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw
NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBFNTcvRkNDMThBMTQyMDRFMTFFQ0IxM0VFMTdBQzRGOUFFMDIvNjBBOEY0OEEy
NUQyMTFFQ0IyQ0NGNjMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ626MA0GCSqGSIb3DQEBCwUAA4IBAQCdLshDZZnoZzgQ4pB8nByX
urSXynwGPyyZsRmJ5PRtSeu7RrPprivGMPLMxdLoJGbfonw47pgokj69bYEdFrNj
umxGgCSKAIkTRXmaqFZovx6OKSo72zG2utuHPUB9dFZPJHRb7A8958e9uPI3Dv3D
LKbOvK2rUNmuWKGFq72TkoACGWaXttEemQ5/vsvkS3gnk+rkr5fUfWvgtGIRtMgA
UXv3OY2lwhEI6mMsI7I+xv9T1HJzyt+BaN28E6dTuiBNiMJ9KBOJE7fKjKJs7ftu
LLKLENwU6JyAOW8qzyYz2eJV7n/AGsyMJdvV7qogUE1QEduJ4giiQii4DZPKMhwx
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:08 2026 by rpki-client