Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa
File:                     603AD1D0AB1211EAB4E7101BC4F9AE02.roa (raw, json)
Hash identifier:          M3CRfzSqlNZRhVkkEGGHOD14V7utL58bvWye54E532E=
Subject key identifier:   1A:70:02:9F:A9:10:5D:77:AF:DF:C1:C0:88:2E:C5:CE:21:FB:25:62
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       1235
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:34:05 +0000
ROA not before:           Fri 06 Jun 2025 17:30:01 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136897
IP address blocks:        103.59.49.0/24 maxlen: 24
                          103.59.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4661 (0x1235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jun  6 17:30:01 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4788d-b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:7e:6c:39:65:97:18:c9:36:38:a8:fe:dd:
                    de:77:f1:ae:5f:2c:1a:0e:4f:64:24:b4:1b:0a:c3:
                    14:1c:ee:41:f3:5c:a0:58:9d:4f:13:eb:a8:6a:a3:
                    50:13:af:96:f1:80:4e:1e:9d:fc:b7:15:e1:e2:f2:
                    67:e4:77:d4:e4:ee:ef:cc:88:22:5d:e8:ff:5d:8c:
                    46:92:d2:32:42:b6:54:be:e3:64:d8:93:eb:12:9a:
                    e5:a1:de:76:4f:97:27:69:c5:06:72:98:c0:da:9b:
                    b4:75:b4:10:c1:5b:e1:c4:91:29:27:39:cc:7b:6a:
                    b0:1b:43:f6:ca:27:99:e8:71:d4:b8:07:e1:c4:55:
                    77:fa:10:6f:8f:b4:ca:1b:1a:69:4f:0c:b8:96:c8:
                    14:ad:b8:64:39:b0:32:0b:a4:88:2d:45:6a:24:5c:
                    cc:da:99:63:55:fe:22:5b:77:f0:89:2b:55:d3:51:
                    f2:3d:20:1b:f3:12:25:f1:bf:5a:41:d2:2b:df:fa:
                    1c:9d:4f:68:63:c6:e3:f9:96:45:ce:fe:9d:a8:8b:
                    19:50:84:d2:8c:8a:31:fa:93:d5:5c:80:7b:c6:c0:
                    5c:82:f8:35:1a:b2:0a:ca:7e:ce:0e:1c:d3:91:b6:
                    b1:34:76:ca:e4:5d:f5:f2:6e:5e:ff:ef:f1:7a:e4:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:02:9F:A9:10:5D:77:AF:DF:C1:C0:88:2E:C5:CE:21:FB:25:62
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.49.0/24
                  103.59.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:db:3b:b1:22:c3:8a:16:f8:24:8f:90:c5:37:a6:e2:1a:
         47:67:fa:44:2e:db:0c:bb:2c:cb:aa:75:6d:6d:68:93:d1:cd:
         48:36:0d:fa:d3:8b:c4:46:f4:99:8a:cd:b1:21:d7:3a:ee:de:
         59:da:bb:bd:1d:4f:e2:91:61:b0:0b:e2:8c:80:83:c5:ca:a8:
         a9:e7:44:34:5e:cf:3c:7b:c4:71:91:13:1d:4a:5c:6a:58:a5:
         c6:10:e0:cf:be:48:fc:ba:4d:35:4c:20:92:64:f8:75:b9:f9:
         90:16:5a:b3:78:82:86:80:fe:10:bb:16:54:d2:46:63:ad:05:
         39:14:94:e1:0c:b6:36:e0:f1:f3:24:7b:8a:07:17:53:e1:5f:
         c2:cf:1f:92:89:57:4d:38:34:a2:87:49:04:ed:de:38:d4:b9:
         c3:52:51:52:2a:d0:6b:c3:48:35:f6:d7:90:e1:76:1f:6f:45:
         ec:8a:f9:c0:c5:2d:f2:60:d3:6c:e1:0d:40:21:bb:4a:05:62:
         cd:cc:5f:d4:9c:31:5b:8f:fe:64:db:df:01:35:18:3e:cd:dd:
         e2:bb:81:c9:ad:94:b4:49:85:2d:2a:7f:d4:db:41:b8:b8:9f:
         88:84:3c:79:b5:ab:3f:e2:a6:d8:15:6c:9b:41:27:2e:50:8a:
         d5:f3:32:da
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5
MTBFQzJFMDAwHhcNMjUwNjA2MTczMDAxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Nzg4ZC1iOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3gR+bDlllxjJNjio/t3ed/GuXywaDk9kJLQbCsMUHO5B81ygWJ1PE+uoaqNQ
E6+W8YBOHp38txXh4vJn5HfU5O7vzIgiXej/XYxGktIyQrZUvuNk2JPrEprlod52
T5cnacUGcpjA2pu0dbQQwVvhxJEpJznMe2qwG0P2yieZ6HHUuAfhxFV3+hBvj7TK
GxppTwy4lsgUrbhkObAyC6SILUVqJFzM2pljVf4iW3fwiStV01HyPSAb8xIl8b9a
QdIr3/ocnU9oY8bj+ZZFzv6dqIsZUITSjIox+pPVXIB7xsBcgvg1GrIKyn7ODhzT
kbaxNHbK5F318m5e/+/xeuTBnQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBpwAp+p
EF13r9/BwIguxc4h+yViMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0
RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvNjAzQUQxRDBB
QjEyMTFFQUI0RTcxMDFCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZzsxAwQAZzszMA0GCSqGSIb3DQEBCwUAA4IBAQB+BNs7sSLDihb4
JI+QxTem4hpHZ/pELtsMuyzLqnVtbWiT0c1INg3604vERvSZis2xIdc67t5Z2ru9
HU/ikWGwC+KMgIPFyqip50Q0Xs88e8RxkRMdSlxqWKXGEODPvkj8uk01TCCSZPh1
ufmQFlqzeIKGgP4QuxZU0kZjrQU5FJThDLY24PHzJHuKBxdT4V/Czx+SiVdNODSi
h0kE7d441LnDUlFSKtBrw0g19teQ4XYfb0XsivnAxS3yYNNs4Q1AIbtKBWLNzF/U
nDFbj/5k298BNRg+zd3iu4HJrZS0SYUtKn/U20G4uJ+IhDx5tas/4qbYFWybQScu
UIrV8zLa
-----END CERTIFICATE-----
Generated at Sat Mar 7 15:42:33 2026 by rpki-client