Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
File:                     60CAF672CAC211F08083F41BC4F9AE02.roa (raw, json)
Hash identifier:          kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=
Subject key identifier:   0E:71:74:A9:7E:1C:AA:5D:D6:89:5A:CD:48:3E:D7:2D:54:16:67:7D
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0BF3
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:28:10 +0000
ROA not before:           Wed 26 Nov 2025 12:21:05 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        103.101.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Nov 26 12:21:05 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4772a-67ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:0a:7a:6a:cd:59:fb:42:8c:35:95:49:7c:
                    1b:0d:1f:63:a7:b2:d8:a0:8c:07:97:7c:e0:9a:30:
                    6a:e8:2c:d8:35:e7:2f:1f:45:2c:bc:d8:78:68:d9:
                    17:c8:f0:c2:1c:a6:16:58:a7:e7:7b:7e:c5:fc:e9:
                    ad:df:f5:78:fa:88:65:f2:4d:38:f1:58:89:6e:49:
                    97:5c:95:4c:ed:9f:e8:96:2a:53:1c:46:8d:eb:52:
                    ee:e7:65:cc:0b:b1:bb:10:14:4a:a3:a2:16:b1:70:
                    59:51:e4:a7:3c:2d:c9:d6:7f:00:7b:26:f8:f9:a9:
                    fa:55:3d:d7:ab:99:a8:c5:5b:c2:0d:be:bf:b5:cc:
                    2d:e8:0f:39:90:04:5a:b4:5e:8e:83:1a:a8:82:e6:
                    43:35:6d:c7:5f:df:00:1e:21:b1:0e:5a:78:43:70:
                    66:cf:35:70:c5:5b:56:14:e1:b8:7d:49:78:38:88:
                    a9:27:17:41:32:49:65:da:02:a6:ea:c5:a0:ac:64:
                    3e:b4:9e:0e:3c:c5:33:43:0a:39:0d:5c:b9:07:c2:
                    e8:b1:89:64:58:dc:d6:e6:80:e5:1c:b0:b1:13:81:
                    75:d6:7a:eb:8a:a4:d2:0c:96:a3:3c:8c:cf:e2:06:
                    57:32:3f:17:af:ba:8d:b6:1d:61:aa:cd:5c:a5:a7:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:74:A9:7E:1C:AA:5D:D6:89:5A:CD:48:3E:D7:2D:54:16:67:7D
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:ef:78:5f:e9:3a:06:77:70:03:27:a0:d9:65:26:54:41:
         61:0e:fa:ca:29:be:de:f9:45:f0:96:44:8f:9f:cc:f0:e6:7f:
         77:ee:c1:5f:bb:34:07:af:44:16:eb:48:6f:59:d1:12:f4:3e:
         bd:90:de:fa:5a:d5:b9:e3:c4:04:19:2c:ee:73:fb:d0:30:7f:
         08:50:56:43:9e:c1:68:08:80:94:b3:96:bf:e8:e1:84:f2:e0:
         58:3f:28:4d:b0:45:5f:ae:ec:41:a8:36:78:d0:b8:e0:0f:84:
         6a:36:07:38:4e:47:4d:b0:e3:64:2e:dc:d6:46:61:95:4a:fd:
         fb:7e:1b:b8:2f:14:b9:f3:d3:23:d7:44:49:2a:c6:9f:71:49:
         c0:f6:72:6e:28:c6:ce:6b:8e:ce:7a:9c:26:f9:18:3a:6b:03:
         6b:81:22:c3:f9:25:2f:f4:46:70:b5:cb:17:18:13:cd:b8:e6:
         a3:4d:4b:7c:d4:22:ce:c6:eb:e4:0e:c8:07:f1:f0:76:9f:b7:
         fe:67:ae:b0:3c:b1:df:4a:91:82:85:db:58:ed:6e:85:63:98:
         b6:ac:df:ba:37:9f:c9:94:d7:9d:6d:a5:f1:8e:b0:3f:5e:33:
         79:15:9b:40:11:4d:7c:d3:f4:5e:c9:f2:f4:82:0c:e5:86:e2:
         5e:06:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:09 2026 by rpki-client