Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
File:                     60377A8C695311EEB599BD23C4F9AE02.roa (raw, json)
Hash identifier:          tVBR6nv+Wa6lZyjGAKO8lfOoX0W/tb6WbJqBAEHgIOo=
Subject key identifier:   24:B5:AB:BC:87:45:1A:D6:64:EE:2C:E8:67:AA:6A:56:8A:3C:99:CE
Certificate issuer:       /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial:       02AA
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 02:51:20 +0000
ROA not before:           Thu 03 Sep 2026 02:51:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55850
IP address blocks:        103.96.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
                          rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
        Validity
            Not Before: Sep  3 02:51:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98e0a8-9a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:0b:bd:70:f8:84:f3:89:50:62:34:e2:5f:
                    10:9f:5a:4d:92:f4:c9:77:5e:a6:d0:25:ed:40:9c:
                    42:bc:06:1e:6b:df:9f:c9:1d:a0:55:cc:63:12:76:
                    fc:00:f2:22:67:c3:f9:95:01:01:c7:cd:cf:b6:41:
                    f4:54:34:61:22:e5:e3:43:4c:79:f4:0d:8d:66:05:
                    af:6c:b7:ec:8d:2c:33:36:12:8f:6a:13:25:7a:81:
                    5b:fa:7c:81:93:bb:e4:1e:56:4a:53:2a:da:85:b6:
                    7b:ab:43:f0:b4:48:fb:39:74:f9:c9:36:3f:29:ac:
                    e5:23:01:b2:8f:cd:62:f5:dd:21:7b:e5:5a:bd:ca:
                    da:47:09:f3:86:aa:1b:95:cf:e8:03:67:21:f0:fd:
                    04:ac:2c:aa:02:ea:ba:8f:fc:79:cc:ce:d2:72:a3:
                    dd:50:06:aa:bd:5c:ef:a2:7d:45:e8:f6:16:1a:43:
                    91:6f:84:d7:83:65:d2:d8:85:87:7d:95:69:f3:3e:
                    f0:b1:49:f2:2c:59:38:26:c3:19:65:8c:2c:ca:53:
                    68:32:e5:57:26:3b:b9:88:52:1f:24:09:8f:d5:f5:
                    27:19:a9:17:f0:97:79:40:27:ec:fa:67:54:49:4a:
                    37:6d:dd:4d:9e:8d:a8:b4:69:15:85:79:c6:00:92:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:AB:BC:87:45:1A:D6:64:EE:2C:E8:67:AA:6A:56:8A:3C:99:CE
            X509v3 Authority Key Identifier:
                keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:26:4c:90:75:77:54:be:c4:a9:e3:bf:f1:2f:e6:bd:c6:
         1d:80:03:b4:0a:f9:38:0f:69:36:43:69:5e:1a:d1:66:c7:13:
         ec:b2:69:4b:21:06:e0:c6:23:c4:71:f5:55:16:a3:e3:ba:f6:
         e8:c3:8d:9f:1b:29:59:3d:45:a7:67:66:a6:97:da:8e:5f:a0:
         b8:86:cd:b8:b2:ba:3e:54:de:6a:96:ba:bc:f0:2f:24:e8:27:
         e7:f8:2c:3a:57:e8:35:4c:95:71:66:0d:74:b6:0a:20:d3:df:
         c6:e1:b3:c9:1c:84:8b:ea:f4:55:a5:b3:eb:b8:5f:97:a5:5e:
         98:e9:e5:2a:c8:aa:c9:4d:8b:c1:ec:54:98:1d:27:47:98:7b:
         a4:5f:cf:ce:de:19:e4:18:22:a6:90:f4:75:7c:a4:c7:41:17:
         67:2a:ad:77:e1:0f:18:0d:29:3e:3d:6d:59:c3:1e:b9:07:ee:
         88:f3:f6:80:5e:35:9e:21:a0:95:f2:33:90:f6:8c:84:ec:e3:
         6b:61:2d:d0:a4:df:47:32:8f:7d:98:76:3c:5a:ee:47:1c:21:
         88:4b:c0:42:57:2d:eb:03:04:b6:48:f5:b9:03:a7:80:eb:2c:
         1a:f6:03:5b:17:bf:73:b6:d9:0a:3f:52:7a:1b:d9:00:77:78:
         2c:03:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:14:30 2026 by rpki-client