Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa
File:                     603AD1D0AB1211EAB4E7101BC4F9AE02.roa (raw, json)
Hash identifier:          cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=
Subject key identifier:   12:0A:CD:A6:5C:A4:11:75:3B:89:B9:DD:7D:34:5D:09:32:A7:D3:61
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       126C
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa
Signing time:             Thu 28 May 2026 17:21:10 +0000
ROA not before:           Thu 28 May 2026 17:21:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136897
IP address blocks:        103.59.49.0/24 maxlen: 24
                          103.59.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4716 (0x126c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: May 28 17:21:10 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a187985-0eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:ad:16:a2:86:1d:f8:9f:7d:31:39:7e:79:
                    46:cb:8a:64:82:0c:f6:b1:a2:f5:2b:86:32:79:4a:
                    03:6c:dc:04:f8:ac:de:7c:c9:de:84:77:b0:f5:c3:
                    b5:c0:3a:80:b7:9e:54:e4:79:41:9a:dd:11:da:f0:
                    5f:3c:d2:4a:7a:95:09:7f:1b:6e:25:18:51:42:3d:
                    04:27:ef:b7:29:f9:51:53:a3:23:17:cd:b0:bd:b4:
                    98:46:e3:0d:60:2d:0d:67:af:ca:02:a7:0c:a5:15:
                    3c:c7:b9:84:2e:25:56:d3:58:a8:87:a6:ff:3c:5e:
                    ac:56:48:6f:b1:41:23:13:0c:2d:6f:f8:9d:6d:27:
                    33:84:4e:2b:19:fa:c3:e0:f7:bf:7b:4f:03:cb:29:
                    6c:f0:7a:a2:c2:89:7b:79:df:d8:41:58:5a:06:a1:
                    a8:bb:14:83:2e:a7:c8:51:57:2b:38:de:0c:67:4d:
                    be:df:14:54:56:40:7c:78:b2:f1:27:01:58:54:9d:
                    0a:35:73:28:78:68:93:5b:9c:9f:91:a7:9a:1e:42:
                    8d:5f:d3:0d:52:30:7a:d5:73:8c:64:cd:42:6a:56:
                    d5:2c:90:b4:39:15:d3:21:95:56:21:e8:b4:c5:c1:
                    c6:58:d3:f8:c2:c2:34:94:32:1d:d1:3a:2e:70:e6:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0A:CD:A6:5C:A4:11:75:3B:89:B9:DD:7D:34:5D:09:32:A7:D3:61
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/603AD1D0AB1211EAB4E7101BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.49.0/24
                  103.59.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:99:03:7b:f5:3b:cf:29:ba:55:78:97:0c:40:53:28:40:39:
         b0:fd:8c:f4:9a:65:bf:66:75:26:9b:81:2d:73:90:88:5c:99:
         81:cc:9e:2b:d4:70:0c:42:4c:43:6d:10:ba:2b:83:1a:13:4c:
         22:07:08:22:b4:7c:10:a6:8e:1d:3b:55:f2:c1:2c:37:34:4f:
         b9:71:65:0d:bf:0f:21:38:fb:cf:fd:65:c8:78:65:04:38:75:
         7e:ea:4c:d5:2e:35:b3:d7:31:9e:33:7b:c0:59:a2:22:0c:35:
         64:71:3b:26:43:a5:e9:3b:85:6f:7c:6a:09:98:d4:4a:8c:7c:
         59:bf:e8:dd:c8:e5:9b:99:85:d0:c7:a6:ef:04:6f:bb:73:67:
         08:a0:c2:bc:4f:42:d1:76:32:82:c4:db:14:d4:66:a5:2d:de:
         6a:98:0d:73:ff:cf:07:ca:b0:bd:c5:14:c8:24:4c:85:9b:52:
         96:6b:a8:ae:9f:06:49:52:33:a3:5e:46:35:25:56:f4:f2:ab:
         ad:cb:40:9a:c3:49:8f:fc:83:dd:06:3d:73:e3:23:52:01:27:
         f5:e2:ea:9e:93:ab:c3:56:a6:2c:7f:a8:7f:e8:78:e6:31:fe:
         b0:91:e5:0a:bd:fe:1d:90:4c:b5:2a:b9:80:ae:eb:54:cc:3e:
         a2:c3:28:af
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5
MTBFQzJFMDAwHhcNMjYwNTI4MTcyMTEwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4Nzk4NS0wZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAws6tFqKGHfiffTE5fnlGy4pkggz2saL1K4YyeUoDbNwE+KzefMnehHew9cO1
wDqAt55U5HlBmt0R2vBfPNJKepUJfxtuJRhRQj0EJ++3KflRU6MjF82wvbSYRuMN
YC0NZ6/KAqcMpRU8x7mELiVW01ioh6b/PF6sVkhvsUEjEwwtb/idbSczhE4rGfrD
4Pe/e08Dyyls8Hqiwol7ed/YQVhaBqGouxSDLqfIUVcrON4MZ02+3xRUVkB8eLLx
JwFYVJ0KNXMoeGiTW5yfkaeaHkKNX9MNUjB61XOMZM1CalbVLJC0ORXTIZVWIei0
xcHGWNP4wsI0lDId0ToucOZEbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBIKzaZc
pBF1O4m53X00XQkyp9NhMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0
RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvNjAzQUQxRDBB
QjEyMTFFQUI0RTcxMDFCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZzsxAwQAZzszMA0GCSqGSIb3DQEBCwUAA4IBAQA4mQN79TvPKbpV
eJcMQFMoQDmw/Yz0mmW/ZnUmm4Etc5CIXJmBzJ4r1HAMQkxDbRC6K4MaE0wiBwgi
tHwQpo4dO1XywSw3NE+5cWUNvw8hOPvP/WXIeGUEOHV+6kzVLjWz1zGeM3vAWaIi
DDVkcTsmQ6XpO4VvfGoJmNRKjHxZv+jdyOWbmYXQx6bvBG+7c2cIoMK8T0LRdjKC
xNsU1GalLd5qmA1z/88HyrC9xRTIJEyFm1KWa6iunwZJUjOjXkY1JVb08quty0Ca
w0mP/IPdBj1z4yNSASf14uqek6vDVqYsf6h/6HjmMf6wkeUKvf4dkEy1KrmArutU
zD6iwyiv
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:45:03 2026 by rpki-client