Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/F7DB315EBEC811F0A266E40FC4F9AE02.roa
File:                     F7DB315EBEC811F0A266E40FC4F9AE02.roa (raw, json)
Hash identifier:          w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=
Subject key identifier:   49:16:91:B2:5A:80:4C:FF:C8:CC:5A:AA:4C:9D:4D:4C:3A:5E:09:3F
Certificate issuer:       /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial:       3B
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/F7DB315EBEC811F0A266E40FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:04:20 +0000
ROA not before:           Tue 11 Nov 2025 06:38:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154237
IP address blocks:        121.0.60.0/23 maxlen: 23
                          121.0.60.0/24 maxlen: 24
                          121.0.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
                          rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
        Validity
            Not Before: Nov 11 06:38:01 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d6e4-bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:dd:2d:25:b6:fc:f1:72:81:2f:eb:30:22:
                    b0:d6:ce:f9:04:02:3e:5d:16:f2:6e:d8:20:af:02:
                    04:6a:37:71:25:77:e1:96:85:4b:ed:16:c4:2c:d6:
                    f7:cf:4c:72:16:00:38:8d:34:b7:f0:f5:20:b4:40:
                    f4:48:6b:37:ed:1c:c7:8d:fa:32:00:35:64:47:12:
                    c5:64:6b:da:2c:60:1a:79:b7:dc:5f:46:e0:c0:71:
                    8e:82:82:67:11:b0:f0:32:7c:0b:a7:a3:fa:1d:74:
                    f3:5d:3b:d6:f0:14:b0:75:11:69:75:b0:63:27:dc:
                    9f:3a:1b:d5:df:ef:b5:62:3b:58:fa:1c:82:01:f9:
                    10:e8:8a:cd:c9:04:87:4b:83:5d:d5:ba:2f:97:68:
                    c4:59:87:19:f8:a9:00:c4:d5:33:07:b3:2b:a0:b2:
                    06:8a:fa:f4:05:94:64:2c:72:21:f3:6b:b1:e7:04:
                    cb:52:5e:37:12:09:f2:66:bd:e3:a2:ac:1b:9e:5f:
                    6c:16:4b:23:64:54:eb:b3:2d:2a:5f:00:4b:6c:89:
                    7a:c6:f8:66:7c:97:41:e4:46:17:3a:fd:9a:86:10:
                    ba:df:f0:bf:e2:e0:19:8c:83:0f:29:a3:89:7e:69:
                    cf:a5:10:5d:d1:4a:71:98:0e:29:8d:c6:67:58:4b:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:16:91:B2:5A:80:4C:FF:C8:CC:5A:AA:4C:9D:4D:4C:3A:5E:09:3F
            X509v3 Authority Key Identifier:
                keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/F7DB315EBEC811F0A266E40FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:ab:6d:2d:cf:a9:05:1b:06:6c:09:f3:d8:33:3a:7e:49:
         02:ec:af:9c:b6:9a:98:20:4b:a7:8d:44:61:53:36:92:37:61:
         87:26:29:f3:0a:62:9c:8e:1c:ea:b9:84:cd:12:84:e6:2f:2a:
         26:ec:b7:0a:8d:0e:c9:0a:67:b3:64:3f:78:43:9b:bf:7d:70:
         d5:64:5d:a8:16:e7:71:e3:15:50:56:11:fd:98:86:2f:5b:aa:
         b5:a0:2a:03:59:9a:72:7c:0f:ea:51:cb:0a:3e:80:56:ff:b2:
         18:48:37:63:62:84:9b:94:b1:7b:6d:59:48:e3:b6:70:a3:7d:
         d9:a2:3b:00:50:33:b4:06:3e:f4:d7:22:dd:3a:4a:cd:ad:88:
         94:f5:ec:54:a0:0f:ba:5f:31:51:90:a4:0c:41:72:f2:25:bf:
         98:5e:28:1b:08:30:dc:92:4c:d0:64:94:10:ee:dd:58:cc:26:
         6e:50:5d:54:55:73:71:4a:6a:c1:00:56:25:d1:26:34:a6:d4:
         82:9c:27:ef:8f:92:d3:f0:61:1b:6c:45:26:48:c4:64:9d:79:
         09:f1:29:e6:ef:6d:be:55:33:bf:7a:86:32:bc:f5:77:43:72:
         37:26:ab:fc:e2:2c:8a:93:e9:95:bc:18:aa:24:bd:2e:bc:85:
         4b:72:97:15
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz
NEFEOEU2MzAeFw0yNTExMTEwNjM4MDFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNmU0LWJmNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC790tJbb88XKBL+swIrDWzvkEAj5dFvJu2CCvAgRqN3Eld+GWhUvtFsQs1vfP
THIWADiNNLfw9SC0QPRIazftHMeN+jIANWRHEsVka9osYBp5t9xfRuDAcY6CgmcR
sPAyfAuno/oddPNdO9bwFLB1EWl1sGMn3J86G9Xf77ViO1j6HIIB+RDois3JBIdL
g13Vui+XaMRZhxn4qQDE1TMHsyugsgaK+vQFlGQsciHza7HnBMtSXjcSCfJmveOi
rBueX2wWSyNkVOuzLSpfAEtsiXrG+GZ8l0HkRhc6/ZqGELrf8L/i4BmMgw8po4l+
ac+lEF3RSnGYDimNxmdYS0hJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUSRaRslqA
TP/IzFqqTJ1NTDpeCT8wHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD
ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTAxRS8xNDQ3QzBEOEJFQzgxMUYwODI3MzY2MEJDNEY5QUUwMi9GN0RCMzE1RUJF
QzgxMUYwQTI2NkU0MEZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAF5ADwwDQYJKoZIhvcNAQELBQADggEBAC7Iq20tz6kFGwZsCfPYMzp+
SQLsr5y2mpggS6eNRGFTNpI3YYcmKfMKYpyOHOq5hM0ShOYvKibstwqNDskKZ7Nk
P3hDm799cNVkXagW53HjFVBWEf2Yhi9bqrWgKgNZmnJ8D+pRywo+gFb/shhIN2Ni
hJuUsXttWUjjtnCjfdmiOwBQM7QGPvTXIt06Ss2tiJT17FSgD7pfMVGQpAxBcvIl
v5heKBsIMNySTNBklBDu3VjMJm5QXVRVc3FKasEAViXRJjSm1IKcJ++PktPwYRts
RSZIxGSdeQnxKebvbb5VM796hjK89XdDcjcmq/ziLIqT6ZW8GKokvS68hUtylxU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:44 2026 by rpki-client