Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/BD9131004E2811EEBC65304DC4F9AE02.roa
File:                     BD9131004E2811EEBC65304DC4F9AE02.roa (raw, json)
Hash identifier:          A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=
Subject key identifier:   48:90:B0:20:51:CD:A5:D9:2B:68:18:F1:7F:A1:2D:4E:57:9F:D5:9A
Certificate issuer:       /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial:       01D4
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/BD9131004E2811EEBC65304DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:19:37 +0000
ROA not before:           Tue 07 Oct 2025 04:01:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63526
IP address blocks:        103.72.60.0/24 maxlen: 24
                          103.72.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
                          rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
        Validity
            Not Before: Oct  7 04:01:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a412b9-689f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:f9:76:d6:ba:42:fd:73:11:b3:28:28:29:
                    fa:6d:dc:f0:08:40:2d:42:36:1e:6f:cb:bd:f0:56:
                    0b:7f:dd:52:5e:a3:35:ea:23:34:16:a7:78:e2:da:
                    1b:dd:28:c9:be:d0:b1:c3:ad:ec:d9:23:6b:22:50:
                    df:99:94:c6:08:0b:cf:ae:f1:2c:95:37:a1:c6:7b:
                    1e:10:e8:44:a5:fc:44:68:1a:62:12:f2:cc:c1:41:
                    e8:a2:ec:a7:fc:6c:c8:6e:38:65:af:8a:25:fa:27:
                    f1:20:85:e9:d9:da:99:bd:55:e1:ae:58:dc:77:79:
                    89:65:23:51:0a:97:c6:51:0d:8f:d6:10:3c:31:20:
                    4e:04:20:ae:d3:34:a5:f5:9b:49:44:d8:53:df:eb:
                    5c:75:b7:ed:af:84:f9:59:0d:30:6e:87:88:c2:49:
                    5e:92:69:27:94:5d:77:63:26:3a:60:9f:25:6a:8c:
                    9b:64:ca:7d:e1:4c:6b:80:f7:a3:e9:58:2b:9c:e7:
                    33:41:68:dc:e8:48:f2:0c:79:f1:17:b5:28:d5:2e:
                    6e:c4:c1:6d:98:c6:44:0c:c5:bb:22:c7:51:53:99:
                    a8:c7:cc:57:2e:40:94:49:72:ba:e3:28:82:b0:0f:
                    85:fe:bd:37:37:b5:43:18:64:e7:71:61:c7:4e:7c:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:B0:20:51:CD:A5:D9:2B:68:18:F1:7F:A1:2D:4E:57:9F:D5:9A
            X509v3 Authority Key Identifier:
                keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/BD9131004E2811EEBC65304DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:be:07:b8:de:56:95:04:d9:26:36:a0:b0:ad:d6:23:ae:3b:
         be:02:0d:a4:a5:d8:60:19:5d:f5:b0:5d:ac:61:4f:0c:ae:20:
         13:93:00:de:12:bc:dd:29:04:98:7b:5f:56:02:f0:55:db:fb:
         49:14:fb:ba:33:8c:46:88:00:85:a7:d7:15:ff:a5:7a:2c:13:
         76:65:24:a6:8b:76:82:53:fe:ad:d5:37:41:ee:60:57:35:00:
         40:46:bb:42:db:9b:70:71:ec:de:7a:f7:78:0f:cc:f1:ba:28:
         1a:65:bd:9e:a8:c9:56:6e:20:03:3b:ea:6a:78:06:68:3c:22:
         04:ac:1f:7b:ba:3c:b4:e9:35:1c:12:c6:87:c2:de:2d:4d:a8:
         02:25:6c:d7:69:8b:13:28:cc:28:73:75:e1:a1:15:8a:16:bd:
         92:ca:2f:50:93:77:8a:ad:c3:87:06:40:20:33:6a:69:04:ba:
         f2:5b:9b:4b:43:7a:50:cb:74:5b:3e:7a:2b:18:3b:d9:81:c4:
         25:64:ec:c5:52:dd:30:f8:5a:8d:9f:e3:3f:1c:2c:aa:82:b2:
         b5:6c:9b:e3:db:f9:41:95:7d:be:1d:9d:47:b2:eb:4b:0a:41:
         dc:11:72:09:57:53:24:af:ff:7f:ce:4f:92:34:d0:96:65:35:
         a2:fc:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:47 2026 by rpki-client