Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9E6C93C6372311EEACE5BF61C4F9AE02.roa
File:                     9E6C93C6372311EEACE5BF61C4F9AE02.roa (raw, json)
Hash identifier:          iIoPhVJj7Ein/zE76pSKLmE+AYXPB7k8gN5o8EtAAc8=
Subject key identifier:   F9:42:B9:3E:E9:89:3F:9F:DE:1A:D5:00:28:46:E5:31:CC:F3:14:9E
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       01F5
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9E6C93C6372311EEACE5BF61C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:34 +0000
ROA not before:           Tue 29 Apr 2025 04:40:34 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.207.60.0/24 maxlen: 24
                          103.207.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Apr 29 04:40:34 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ec82-865d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:92:db:38:23:70:2c:7f:dc:30:3e:54:32:
                    51:11:86:bd:f3:b1:eb:02:14:4b:32:6a:ab:12:0e:
                    c7:12:3c:dd:2e:f6:e8:2b:63:c8:09:90:4a:a3:d3:
                    33:3d:18:ae:f8:8e:10:15:7f:2d:a1:a1:ac:93:15:
                    58:7f:a1:19:ab:23:7d:b3:b0:e7:af:46:cb:33:50:
                    53:56:13:e5:fb:60:c4:1f:32:78:17:ea:aa:4c:2d:
                    90:c5:72:26:77:17:a8:62:b3:d9:f9:0d:7a:c9:e8:
                    5f:90:ee:95:6e:a1:e6:d2:36:23:22:80:3b:4b:0a:
                    94:87:00:09:20:42:fb:aa:6d:07:d7:66:cb:e3:a1:
                    27:7c:0d:06:62:43:1e:15:ff:2a:6e:cf:17:ce:b2:
                    01:d5:ac:8e:ad:ed:cd:77:37:39:fb:f1:d6:47:1f:
                    e1:f0:d7:29:08:66:5e:7e:21:6c:19:db:ed:8e:68:
                    3d:c8:c0:30:2b:9f:e5:1c:23:c3:49:a4:c3:b8:66:
                    6d:1e:27:31:ed:92:b8:89:7b:9f:0e:eb:0b:4a:b9:
                    16:63:b0:3b:f5:f8:b4:95:a0:d9:09:4a:9a:0c:0a:
                    09:6b:ee:5e:9c:25:1c:90:65:dc:f1:42:08:da:fb:
                    78:c9:84:e8:f2:5d:01:69:f2:55:39:c2:1e:c9:0b:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:B9:3E:E9:89:3F:9F:DE:1A:D5:00:28:46:E5:31:CC:F3:14:9E
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9E6C93C6372311EEACE5BF61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:5c:fb:cd:5a:9b:35:20:f1:cd:72:7c:b6:5f:e5:2e:a5:a3:
         70:5f:0f:85:3c:14:b7:c0:fe:0e:86:aa:e7:1b:a1:64:0a:54:
         27:ab:cb:fc:32:04:83:7c:b7:9a:b2:9d:b1:d0:0a:05:bc:0e:
         d1:d6:fa:13:42:50:e3:b5:5d:07:39:85:dd:33:33:9e:98:25:
         7c:0c:f9:34:41:cd:c6:ee:1a:01:73:9b:19:a8:60:e6:0d:32:
         c9:74:83:c0:07:a3:8e:a5:24:b9:a5:16:3e:d7:e8:83:58:0b:
         22:be:db:7f:d7:80:39:b0:cf:4b:96:fc:9c:f0:c8:56:24:c4:
         2a:f3:f5:98:61:9f:eb:39:73:4b:14:7d:b1:17:43:e0:a4:19:
         1f:f3:ca:66:b4:67:68:2e:06:df:e9:77:56:3e:82:a4:f9:82:
         97:a9:b6:99:25:42:8d:c5:9b:53:a6:17:90:01:31:6a:82:cc:
         1f:4c:c0:d4:b2:9e:ba:8d:5f:d3:c7:00:6d:ca:73:a6:95:c6:
         12:d6:03:ce:8e:2f:db:0a:ed:04:c5:f2:63:8b:67:76:e8:0a:
         fb:0a:98:8c:41:5a:bb:42:eb:d8:63:02:d6:31:dd:78:bd:f0:
         d7:b1:fe:5b:8f:a5:88:99:ca:06:d1:7b:11:cd:5a:fe:35:b9:
         05:1e:8e:27
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy
QUJEQjQ0RTMwHhcNMjUwNDI5MDQ0MDM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWM4Mi04NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnvyS2zgjcCx/3DA+VDJREYa987HrAhRLMmqrEg7HEjzdLvboK2PICZBKo9Mz
PRiu+I4QFX8toaGskxVYf6EZqyN9s7Dnr0bLM1BTVhPl+2DEHzJ4F+qqTC2QxXIm
dxeoYrPZ+Q16yehfkO6VbqHm0jYjIoA7SwqUhwAJIEL7qm0H12bL46EnfA0GYkMe
Ff8qbs8XzrIB1ayOre3Ndzc5+/HWRx/h8NcpCGZefiFsGdvtjmg9yMAwK5/lHCPD
SaTDuGZtHicx7ZK4iXufDusLSrkWY7A79fi0laDZCUqaDAoJa+5enCUckGXc8UII
2vt4yYTo8l0BafJVOcIeyQtGKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPlCuT7p
iT+f3hrVAChG5THM8xSeMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz
NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDM3MzcvODI5NDM2M0UzMzUxMTFFRUExMUY5MTI2QzRGOUFFMDIvOUU2QzkzQzYz
NzIzMTFFRUFDRTVCRjYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ888MA0GCSqGSIb3DQEBCwUAA4IBAQCkXPvNWps1IPHNcny2X+Uu
paNwXw+FPBS3wP4OhqrnG6FkClQnq8v8MgSDfLeasp2x0AoFvA7R1voTQlDjtV0H
OYXdMzOemCV8DPk0Qc3G7hoBc5sZqGDmDTLJdIPAB6OOpSS5pRY+1+iDWAsivtt/
14A5sM9Llvyc8MhWJMQq8/WYYZ/rOXNLFH2xF0PgpBkf88pmtGdoLgbf6XdWPoKk
+YKXqbaZJUKNxZtTpheQATFqgswfTMDUsp66jV/TxwBtynOmlcYS1gPOji/bCu0E
xfJji2d26Ar7CpiMQVq7QuvYYwLWMd14vfDXsf5bj6WImcoG0XsRzVr+NbkFHo4n
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:04 2026 by rpki-client