Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
File:                     D12CC256A5F011F1A34023553E11F970.roa (raw, json)
Hash identifier:          boRpJpkf+wjD4GkH2S9rzK0ASgM5uqN71zGe7rLOmgw=
Subject key identifier:   88:29:04:C4:DE:A8:F4:B7:7D:06:B7:9A:8F:53:3F:5C:CB:25:9A:03
Certificate issuer:       /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial:       271D
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
Signing time:             Tue 01 Sep 2026 10:35:15 +0000
ROA not before:           Tue 01 Sep 2026 10:35:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55501
IP address blocks:        203.124.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
                          rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10013 (0x271d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
        Validity
            Not Before: Sep  1 10:35:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a96aa62-8d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:76:20:35:26:05:ce:8c:e4:c5:19:2c:19:
                    3f:b7:8d:2f:ce:95:cc:d1:51:16:ef:37:3b:07:21:
                    cf:b4:a1:fd:b1:72:ce:d7:78:1b:c4:64:18:9c:54:
                    89:a6:65:c2:41:39:32:74:a4:94:57:19:13:83:d1:
                    e1:b4:0a:be:df:99:1f:69:3c:81:be:c2:17:9b:c7:
                    b7:f9:b6:fc:bf:5b:ba:29:3a:44:2d:7d:fa:8a:93:
                    2f:ed:49:73:0f:1c:f0:b5:40:90:f8:91:a3:59:dd:
                    82:19:4d:65:b5:dc:80:7e:dd:6e:7c:44:fc:23:22:
                    08:b7:92:9d:89:e4:96:55:12:40:82:f0:e9:70:5f:
                    3e:b8:f4:ab:cf:91:e2:b7:23:4f:32:b9:db:bb:07:
                    29:95:65:52:db:f1:ae:d2:a4:16:b2:c6:d0:03:c5:
                    17:2d:93:83:03:6a:17:1a:b9:e1:dd:c9:c6:9e:2f:
                    aa:b1:b2:d0:67:54:a2:d1:23:84:83:83:5c:47:8c:
                    c0:d0:16:e1:5e:74:50:68:c6:f5:7f:ad:1a:8c:6c:
                    34:ae:c4:47:54:4e:c0:c2:ce:ad:ec:87:0e:b4:4c:
                    ca:a0:57:3d:80:3f:36:a9:e2:9e:e1:35:8a:e4:66:
                    93:a1:19:39:32:45:31:6d:00:32:83:b4:67:8a:74:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:04:C4:DE:A8:F4:B7:7D:06:B7:9A:8F:53:3F:5C:CB:25:9A:03
            X509v3 Authority Key Identifier:
                keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:c8:35:54:d6:69:3a:84:de:23:e0:4d:9d:65:f7:7c:a5:
         81:01:35:52:09:5a:f2:f8:83:0c:b4:f7:62:7c:5d:98:d6:82:
         db:ee:b0:32:57:05:fe:67:15:94:75:ef:cb:da:44:5c:3d:86:
         39:70:a3:e9:78:5c:29:7a:e3:3f:a2:7a:94:3e:16:54:c3:c3:
         b2:86:45:21:95:8d:fd:bb:12:a4:91:4d:20:3f:69:68:82:62:
         bb:ed:f5:f2:70:7b:b1:7c:f9:fd:4d:30:ed:39:51:a8:a9:fd:
         20:43:03:3d:4f:8a:26:b2:b5:d8:aa:d8:52:06:c8:31:44:27:
         d5:2d:2e:5a:d0:33:ac:28:75:31:e8:a8:3d:e9:37:b6:a0:07:
         94:34:b1:a1:a3:fa:e6:f9:be:d3:fc:e9:14:e7:c2:a6:ae:e7:
         65:97:86:c0:cc:ff:33:5c:99:79:50:61:36:2d:20:b1:6e:5f:
         11:da:cc:f3:5c:c7:01:af:fc:c6:7c:8d:2e:3e:2b:1d:3f:3e:
         5e:5e:b5:c3:08:8f:e2:07:ee:e2:d9:34:24:14:c0:e6:71:ee:
         11:18:7c:5a:91:cc:97:83:37:ad:92:76:cf:a3:56:f4:2b:2b:
         c4:99:7b:99:aa:6b:94:c0:52:c6:f2:d8:fe:9c:be:08:cc:d0:
         4b:0e:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:23:01 2026 by rpki-client