Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
File:                     60377A8C695311EEB599BD23C4F9AE02.roa (raw, json)
Hash identifier:          6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=
Subject key identifier:   84:48:C2:9B:C9:CE:2E:6F:3A:4E:7A:54:8D:AA:7E:8E:6E:63:38:B2
Certificate issuer:       /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial:       023C
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:58:09 +0000
ROA not before:           Fri 29 Aug 2025 03:51:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55850
IP address blocks:        103.96.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
                          rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
        Validity
            Not Before: Aug 29 03:51:42 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59771-9712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:17:80:69:c7:78:fa:df:e1:fd:0d:38:dc:
                    54:c1:72:60:ea:17:ad:10:da:b0:b9:3d:bb:1d:55:
                    d8:b2:29:1e:7e:ac:86:1f:0c:3a:2c:20:7a:1b:4c:
                    84:4c:1a:e8:f4:7f:ec:a2:94:76:0e:8a:3f:99:9c:
                    df:60:f0:1b:27:b6:b2:0c:32:40:8f:c5:80:8d:6e:
                    9c:76:7b:d0:96:33:13:77:c1:cd:2d:a9:30:0d:04:
                    58:01:52:84:ad:e3:f8:88:b0:4b:7a:53:69:9b:97:
                    43:58:1d:b9:f8:60:25:fb:19:94:c7:9f:7f:11:69:
                    39:de:be:df:63:ba:9b:f7:6f:d7:a9:c8:60:39:07:
                    48:76:88:71:7e:a9:c5:7d:ed:1f:f5:78:a8:c4:e9:
                    90:d3:bc:73:7b:58:91:1d:bf:34:4e:68:ad:b1:08:
                    06:18:57:0f:42:41:2e:10:e7:28:59:13:31:77:52:
                    14:d4:28:08:96:f6:17:5d:05:4a:f6:c8:95:72:78:
                    4b:33:ec:5f:75:20:5d:58:32:90:96:55:20:f7:36:
                    c5:e5:62:07:07:b4:9a:cb:fc:74:ac:00:53:9b:b9:
                    16:57:91:56:3d:18:cb:e8:0e:5d:54:18:a1:5d:eb:
                    80:bd:f9:df:28:4c:2f:9b:f4:11:fd:7a:f2:7f:8e:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:C2:9B:C9:CE:2E:6F:3A:4E:7A:54:8D:AA:7E:8E:6E:63:38:B2
            X509v3 Authority Key Identifier:
                keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:72:0f:93:6b:67:d0:0e:ee:1e:cb:e6:f1:61:7f:72:52:
         5b:82:81:7e:af:f4:44:34:2a:7c:8e:83:6e:2e:20:c7:d8:0a:
         a3:78:4a:f8:44:6b:46:eb:1e:6a:c2:fa:03:33:c3:f0:58:64:
         6d:26:19:fd:29:22:1e:20:a8:f0:9d:b6:51:64:7a:f7:56:36:
         c9:33:bf:f1:71:59:30:8c:d2:0b:ac:31:c9:09:8e:b6:3d:d4:
         d0:30:a7:d9:b1:6d:d3:f0:0d:4d:e9:0d:d8:ec:3c:98:31:c5:
         c2:76:61:8b:21:fc:fe:23:54:d5:53:0f:65:5d:a5:9c:0f:c0:
         01:ce:5b:8a:c1:ed:9e:2e:f2:a9:1c:d8:aa:b3:de:f4:0b:c6:
         ca:5c:87:fb:77:cb:ca:64:62:cc:88:a1:66:c5:1a:e9:4c:17:
         17:70:b5:05:f3:bc:25:d1:4d:73:73:87:21:96:15:a0:e0:9c:
         2c:1f:5e:8f:93:5d:d9:ae:43:d5:ff:a1:1d:fd:fc:a1:41:1f:
         54:71:a9:87:48:31:ce:f6:b4:89:da:18:d3:05:87:91:04:e3:
         84:b7:57:5c:f5:95:ab:e5:3b:06:f5:30:ab:51:ba:a5:64:69:
         50:2f:83:b3:ce:b8:75:c6:ca:03:5a:a9:60:de:09:d5:66:ab:
         a1:01:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:55 2026 by rpki-client