Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
File:                     8497885E04F911E9AF13ED31C4F9AE02.roa (raw, json)
Hash identifier:          2qtY5lfg53Rk8hRdrCMMLg539ABuDCFqGZzS8SsVJYE=
Subject key identifier:   95:4C:28:25:58:D7:65:CA:33:2F:37:03:64:B3:75:29:60:F5:2D:E5
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       1238
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:34:08 +0000
ROA not before:           Fri 06 Jun 2025 17:30:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63682
IP address blocks:        103.59.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4664 (0x1238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jun  6 17:30:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47890-bc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:47:af:ee:92:f0:e0:2f:4a:fa:2e:2a:a5:
                    0f:c0:2b:52:e1:7a:9e:2b:7d:96:a7:e5:81:f7:80:
                    c2:22:74:d5:b8:6f:8b:96:08:2f:7e:50:0c:7a:eb:
                    f0:f8:55:75:ba:2a:6e:6a:d5:a6:0a:8b:df:c0:10:
                    f1:a1:60:36:76:da:47:f2:9b:6e:73:b7:21:02:eb:
                    da:47:74:0a:7b:1e:ba:76:8d:a7:ee:25:9e:23:d2:
                    1b:9c:10:43:23:a8:54:a2:c5:7c:bc:ab:83:55:1e:
                    0f:95:ef:d0:11:86:9d:d9:c7:18:68:d5:31:c1:94:
                    84:d4:00:b2:62:ea:90:34:b8:97:fc:a5:89:a7:ad:
                    61:3d:fd:44:5a:68:9f:72:0e:99:4b:b7:a0:b5:68:
                    f7:10:7c:b3:98:af:4c:6c:ce:42:21:43:f1:f3:a3:
                    d5:4d:52:9f:fb:bd:09:4f:55:f1:29:13:da:80:25:
                    b8:c5:06:8b:88:41:b7:f5:c4:71:3a:c7:9b:94:f0:
                    5e:72:0c:d6:50:c5:a4:3b:70:a0:8e:bd:bc:06:3b:
                    dc:f3:fe:1b:35:89:d6:e2:33:79:e9:bc:3b:bf:01:
                    ed:cd:ab:4b:b9:74:e0:92:c8:69:0b:05:38:aa:f7:
                    c3:0d:75:e9:74:67:8f:5b:5a:ec:cd:c9:e3:33:d9:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:28:25:58:D7:65:CA:33:2F:37:03:64:B3:75:29:60:F5:2D:E5
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/8497885E04F911E9AF13ED31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:05:49:3f:8b:db:2d:80:42:4b:c1:28:5b:66:a1:37:00:1d:
         3e:2d:99:00:5d:fc:06:d1:5b:6e:d2:a8:49:b9:d0:f0:51:78:
         03:37:b0:f1:4e:56:4c:1a:47:3e:75:9a:c4:89:03:0b:2f:2c:
         bf:d4:4d:d1:02:c6:dd:9b:78:e6:19:d9:28:0e:63:ca:fb:bc:
         ce:d5:88:96:53:1c:76:f3:3b:c9:20:ed:f9:8c:8c:6f:35:6e:
         c7:6e:26:b2:91:17:54:38:c6:3e:55:1d:d8:49:d2:4c:a7:63:
         61:1b:7b:8c:28:5b:78:33:8f:50:c4:20:10:d4:70:24:3e:ec:
         ec:2a:19:8e:1c:58:3d:9a:3e:34:a1:4a:c5:33:14:54:2e:82:
         b0:5b:38:f9:a4:32:7a:2f:23:3c:bc:58:41:a9:0d:67:b3:ea:
         6a:5c:cc:a6:1a:30:58:3d:2d:26:76:a9:c3:0d:5f:f9:37:ae:
         5a:02:28:41:34:03:b1:9e:4a:3c:f0:c1:b2:5b:c3:5d:98:04:
         18:c6:b1:d3:15:ab:de:4d:a2:26:15:96:88:98:a1:a1:79:42:
         30:13:94:09:79:28:b8:96:55:ef:b5:17:6c:ce:3a:42:d2:d7:
         ac:47:11:8f:bd:2d:8a:fc:c1:fa:5b:80:57:da:55:60:3f:d7:
         d8:9f:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:34 2026 by rpki-client