Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa
File:                     B2F952F624D411F1AA718F4CAB833773.roa (raw, json)
Hash identifier:          2wk92MzDpjsXuOZ8ntASKDQ4sTbjcbY5Km2g9d/wyUY=
Subject key identifier:   50:CC:84:0E:BD:93:5E:E2:5B:56:7B:41:BE:D3:68:A3:82:E5:B5:AE
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       01C5
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa
Signing time:             Sun 03 May 2026 04:36:55 +0000
ROA not before:           Sun 03 May 2026 04:36:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54702
IP address blocks:        103.111.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: May  3 04:36:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6d0e7-3408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:14:5e:cd:8b:e7:e9:60:71:97:c4:ea:1c:
                    73:0d:2b:bc:79:6d:e6:e9:37:e9:16:2c:5a:50:94:
                    fa:1b:f9:75:74:63:15:18:c1:70:3d:eb:ec:7a:1e:
                    3b:c5:55:e5:84:93:fa:df:5a:94:b6:ee:3c:d2:f9:
                    a7:6d:c8:5d:90:d7:96:91:47:eb:70:96:9a:a2:c9:
                    b2:96:c7:2d:d6:cb:e6:ac:07:16:d5:dc:df:5b:ba:
                    88:5f:3f:ab:5d:97:d0:36:a8:70:23:4f:a9:5e:63:
                    4d:be:e2:51:1b:e7:95:03:60:d9:fb:33:ba:8c:ba:
                    ba:f4:24:16:83:11:45:5d:10:4e:26:a3:76:11:b3:
                    00:89:9c:cf:c1:6e:56:33:4e:c6:be:83:67:32:84:
                    1d:12:09:0b:9a:da:04:19:cd:4f:8b:26:ea:25:ab:
                    39:f7:2f:38:22:a4:7c:84:7c:30:bd:61:8f:b2:7d:
                    a0:d1:51:d7:36:1f:04:2c:da:ef:5e:71:9b:f7:49:
                    a2:a8:ae:dc:cb:6c:8e:b5:88:8e:10:9d:29:50:c1:
                    ad:ca:88:01:31:73:57:57:7f:53:6d:72:9a:e0:05:
                    f5:48:5e:96:c1:cb:49:08:a3:10:43:df:15:52:d1:
                    dd:f5:5b:a7:ff:c4:67:2c:a6:51:cc:ad:5f:87:1b:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:84:0E:BD:93:5E:E2:5B:56:7B:41:BE:D3:68:A3:82:E5:B5:AE
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/B2F952F624D411F1AA718F4CAB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:a2:16:0e:65:d5:b5:87:31:0d:36:95:64:8d:62:5b:94:
         2a:c3:59:85:de:47:d1:30:12:76:a7:f6:c7:5d:21:a3:5c:4e:
         94:0e:be:57:26:02:a5:c6:bb:8d:db:be:48:eb:c2:44:d4:e6:
         43:0f:12:60:b4:58:5c:86:2d:95:7e:95:31:71:82:c1:57:41:
         8c:55:d0:cb:f7:91:89:e8:71:6d:12:0b:dc:2e:84:5b:2f:c5:
         1a:2d:fb:34:e6:68:0f:70:7e:54:0e:d1:b1:33:24:96:96:70:
         aa:39:16:a9:dd:82:82:8c:0f:8a:22:21:48:f6:bc:32:ee:18:
         8d:48:48:ec:bd:a2:7e:9f:89:d5:a0:cb:a4:af:ee:9b:8d:a9:
         8c:a9:f8:41:25:35:b0:19:a3:75:b1:97:74:4e:d1:41:ca:cf:
         77:44:8d:37:76:75:9e:7d:0a:88:10:85:f4:59:85:a0:95:9c:
         69:e8:b9:c7:57:26:1d:75:d2:8d:a0:83:52:9d:77:f7:7f:2d:
         6c:fe:b2:47:19:d6:a1:7d:6a:0d:75:87:60:47:a0:49:be:fc:
         4f:d0:3b:e4:27:e4:1e:cf:c2:f1:e9:3d:b7:09:68:04:ab:8d:
         5b:24:ff:94:c1:21:81:85:21:07:14:04:ea:27:68:b5:0b:40:
         6b:dd:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:15:32 2026 by rpki-client