Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa
File:                     B2F952F624D411F1AA718F4CAB833773.roa (raw, json)
Hash identifier:          uzrNk/ttRA0V5QFMV/D2N3f4BnOOXaAYpx7DnAlMrV0=
Subject key identifier:   A1:C0:B7:C5:F3:A3:6C:30:DA:00:C4:87:12:9D:F0:F6:55:C2:6E:58
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       01A5
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa
Signing time:             Sat 21 Mar 2026 03:18:59 +0000
ROA not before:           Sat 21 Mar 2026 03:18:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     54702
IP address blocks:        103.111.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Mar 21 03:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69be0e22-e075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:ec:ba:bb:e1:eb:c4:cb:34:19:75:a7:77:
                    1c:3f:28:c3:35:01:6d:47:31:5e:cb:af:19:ba:40:
                    28:9e:50:c2:61:70:3d:21:8e:ae:d4:68:be:84:fe:
                    88:b3:6f:46:c6:3f:f5:a4:fd:b7:02:eb:e2:10:20:
                    53:7b:b8:ee:fb:58:9c:76:37:82:da:00:a4:bd:24:
                    17:3f:b9:f9:69:d4:41:0a:93:b0:75:66:36:fb:a4:
                    0f:4d:21:3c:e0:3d:4f:72:de:7a:19:56:f5:fe:36:
                    45:9f:64:93:f3:5f:02:86:30:c1:a5:ab:09:44:79:
                    93:64:29:7c:a0:23:94:e2:ee:04:0a:8f:ca:1c:1b:
                    6a:eb:2c:98:ed:66:8c:8d:b6:57:c0:4c:24:01:45:
                    aa:4e:06:c9:47:9a:c7:fd:7a:9c:bb:0a:e3:f5:06:
                    87:aa:e2:1a:a8:f4:e0:38:91:51:d7:77:6f:c2:40:
                    21:62:18:88:e8:9c:d9:8c:e1:c7:1e:12:6a:e8:9f:
                    e8:54:a6:38:e3:51:f7:73:76:d9:04:1f:2d:52:a8:
                    69:db:76:ff:ec:50:3d:7e:c2:a8:0b:2f:8a:7b:e9:
                    0f:5f:b4:72:fe:62:00:46:01:0f:e5:7b:72:2e:9f:
                    76:e3:a3:fb:37:6d:88:21:95:bb:98:65:de:c1:a7:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C0:B7:C5:F3:A3:6C:30:DA:00:C4:87:12:9D:F0:F6:55:C2:6E:58
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:04:e9:f1:6b:81:9b:5e:1d:18:a9:3a:71:51:ae:11:91:
         a8:9f:5f:63:ef:15:20:fb:b4:30:35:2b:a0:bf:7e:53:fd:30:
         92:52:05:08:8c:98:89:72:26:2d:27:bb:dd:a6:bb:63:1c:08:
         ad:6a:0c:c9:f6:0b:86:31:f2:88:7c:67:b2:9f:36:0d:f9:b4:
         0b:0d:73:ca:67:a3:cb:33:05:da:cd:1c:ef:14:64:3d:2f:71:
         a0:0c:23:4b:8a:16:0a:21:81:84:b3:0a:cf:f8:7f:6e:db:d5:
         36:7a:20:03:f2:50:de:95:db:56:0a:6e:79:59:2c:8c:7e:c0:
         87:76:6a:54:da:5e:a0:4d:c3:d7:01:4b:b4:38:22:3a:a8:52:
         6e:cd:b6:39:39:4f:e8:31:91:8b:2a:5e:2f:15:07:95:7c:57:
         13:c2:4b:0b:ae:8c:f3:6a:af:31:5f:ff:f6:b7:61:53:c2:1d:
         70:44:b9:7d:25:27:09:89:fa:64:08:3f:8c:c3:13:34:1f:21:
         f3:c4:df:71:a4:bb:aa:e8:15:08:78:b0:ed:5d:04:55:b9:fd:
         51:af:39:b4:16:be:8d:fa:1a:a3:f0:dd:01:66:79:79:d2:13:
         28:04:29:8e:a8:6f:25:1e:f2:2f:f7:50:1f:58:93:16:c3:ca:
         b7:e4:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:17:21 2026 by rpki-client