Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
File:                     60CAF672CAC211F08083F41BC4F9AE02.roa (raw, json)
Hash identifier:          j2CWh2M1Zubhu80nB8Ke1i2o0Pn0OuTxS4mQsSIpork=
Subject key identifier:   3B:12:FB:50:00:2F:96:9B:9E:25:C9:EE:40:F4:46:09:BC:8C:6B:01
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0C59
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
Signing time:             Fri 04 Sep 2026 19:38:17 +0000
ROA not before:           Fri 04 Sep 2026 19:38:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        103.101.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3161 (0xc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Sep  4 19:38:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b1e28-74cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:60:f0:ef:ee:ca:63:53:ac:f3:b9:97:68:
                    98:68:0e:26:da:d1:f8:49:80:3c:ac:8f:b4:0b:f7:
                    81:07:3a:bd:96:fb:03:03:a7:17:a0:46:97:3f:67:
                    1d:c4:dc:ac:9e:b7:c2:aa:2a:30:12:b5:3b:d9:45:
                    a0:79:34:52:f8:99:a2:76:97:7b:6e:9c:d6:b3:17:
                    45:25:32:a2:86:28:a0:10:b1:23:ca:3d:87:4d:90:
                    13:de:04:b8:fc:0f:cb:9f:82:79:31:c9:a3:59:c7:
                    b5:a1:f4:26:bb:3c:a2:44:cf:e8:cd:c8:73:9d:af:
                    61:2a:d2:db:b9:c0:ed:c0:74:5e:41:ba:dc:ba:f7:
                    4e:d8:b5:44:e3:de:b0:19:46:28:dd:e0:26:e1:cf:
                    9f:be:f9:fc:19:78:b2:0e:e6:b7:b2:ae:6b:5c:42:
                    4b:66:a0:00:d0:74:5a:7d:86:b8:8c:ec:a1:89:92:
                    08:92:e8:61:a4:2b:89:f2:60:87:50:63:fe:1f:39:
                    22:61:6d:79:db:55:59:62:5a:50:38:38:4d:b1:51:
                    7f:35:8c:59:2b:c7:2d:d2:e9:43:12:46:8d:d9:a1:
                    c4:a2:ba:a9:55:46:d6:ca:8e:d1:e3:12:6f:e7:75:
                    5a:0a:8c:46:35:06:6d:25:f5:f5:61:c5:36:77:25:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:12:FB:50:00:2F:96:9B:9E:25:C9:EE:40:F4:46:09:BC:8C:6B:01
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:49:30:48:a0:b5:68:df:35:64:6e:92:b1:08:44:6c:2c:
         c0:8a:96:d5:e3:be:65:89:13:ed:a4:e6:0b:0a:77:5f:d3:05:
         73:e1:43:b7:2a:7e:fd:a6:bb:a3:71:39:bd:4f:5c:ab:ed:8f:
         9e:f1:69:25:3b:d9:97:47:7d:8d:c4:26:65:1a:3b:9f:08:93:
         ff:60:df:cf:f7:03:04:b3:f1:7a:0c:8c:fe:35:1d:20:71:04:
         38:47:0f:cf:94:74:30:34:be:15:f6:82:e6:75:44:c8:9a:4e:
         9d:21:32:ff:89:b4:3d:57:68:56:11:32:4f:d3:8b:ef:cb:fa:
         62:63:ba:20:c1:8b:5f:42:37:2e:a8:5e:9c:5f:f3:3e:c9:e9:
         4b:bd:57:38:34:40:ee:69:8b:f1:a2:25:9d:16:62:80:bb:b9:
         1a:de:92:d2:88:de:bb:23:d4:40:a9:41:62:05:7b:4d:9a:f1:
         96:06:8d:42:6f:bc:3c:fe:80:8c:2f:66:a6:4a:00:7d:82:3b:
         f3:5f:93:cc:e5:f2:13:43:e8:5f:6f:68:ea:bf:40:12:45:d6:
         e3:43:d8:38:3c:07:1f:6f:51:d2:03:9e:7b:f7:a6:e9:66:31:
         0e:ba:2a:76:18:32:82:42:8e:77:ed:c6:18:64:16:dc:64:c4:
         03:78:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:53:40 2026 by rpki-client