Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa
File:                     DB21824E24D411F1AAE44A56AB833773.roa (raw, json)
Hash identifier:          sd7eWbgQLT8mF/ebnKb4PSaZd/04vpDcBO1zje9d/YI=
Subject key identifier:   AE:4A:FB:38:EF:D3:B2:41:8E:72:6A:B0:9F:86:6C:5E:55:6E:F5:DB
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       01A7
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa
Signing time:             Sat 21 Mar 2026 03:20:06 +0000
ROA not before:           Sat 21 Mar 2026 03:20:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64200
IP address blocks:        103.111.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Mar 21 03:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69be0e66-2ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:89:6e:9e:d8:d8:5f:a2:c7:00:0e:85:37:
                    4f:f2:f8:45:e0:a5:d4:29:71:2b:4c:8a:b3:1b:b8:
                    01:ea:ea:28:a2:7c:23:35:23:b9:81:39:83:99:05:
                    a9:86:33:31:72:4c:23:94:1f:b6:7c:64:63:59:cd:
                    07:c4:b9:cc:60:b3:13:38:d1:ad:94:65:5c:f1:2c:
                    b1:d7:7b:27:d9:b4:2d:d9:b9:2e:66:8d:f8:d1:62:
                    20:db:09:b8:c7:29:04:15:a4:49:6f:8e:fd:ce:46:
                    7d:88:ea:96:4f:88:7c:5e:1f:16:7d:13:62:fe:19:
                    3f:42:0b:a7:3c:8c:8e:09:d9:64:a1:b1:5f:04:b2:
                    bc:3f:9c:68:29:d2:2c:98:53:71:08:42:58:97:ef:
                    d6:f9:45:c5:af:a3:e7:71:f6:73:41:3a:34:a3:a1:
                    94:0b:73:1b:16:2d:fa:92:95:1d:d9:70:c5:e9:59:
                    01:a7:cb:4d:87:72:ff:a5:b3:cd:b5:60:5c:ee:3a:
                    91:27:5f:b5:7e:c7:51:ad:ee:6e:7a:3f:22:e2:24:
                    36:bd:b5:fb:32:ed:91:aa:3b:70:ae:aa:ee:62:8e:
                    c1:1a:48:88:24:92:f6:86:f9:16:bb:6e:fb:02:64:
                    35:42:0a:36:d7:fa:9b:11:22:89:f7:a1:d0:a4:fa:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:FB:38:EF:D3:B2:41:8E:72:6A:B0:9F:86:6C:5E:55:6E:F5:DB
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:bd:51:81:d6:ad:dc:65:3f:8a:11:1c:8a:02:bd:17:03:4c:
         57:93:fc:63:da:1a:81:8b:b0:f0:21:c0:a1:bc:40:73:8b:6d:
         bb:69:08:aa:fd:1b:8c:b6:63:74:65:b4:5b:4a:a3:17:74:39:
         09:ab:7d:e3:ad:c9:8a:7c:f9:b5:48:6f:c9:ed:40:b9:b1:aa:
         4e:74:8f:b4:a0:77:14:6b:5d:f0:36:9c:d3:71:d4:07:d2:bd:
         a1:f5:b0:60:97:a5:ef:66:10:13:17:f3:02:bb:83:f8:47:f2:
         3e:7e:42:c3:3a:8b:9f:33:2c:b7:c3:0a:c1:c4:4d:18:8a:ec:
         d0:8f:bc:39:84:ef:a5:85:4c:5c:a1:73:58:1c:91:17:c7:4b:
         08:f0:91:6e:4e:3e:c2:ed:dd:ce:c9:12:0b:4d:0d:85:60:52:
         51:0f:40:e6:1f:4f:cc:59:7d:4e:2e:41:5c:f4:be:72:2a:ad:
         5e:c8:45:29:f3:df:13:43:3d:0f:2c:c6:d1:27:ce:6a:88:e3:
         b4:b3:bc:da:c1:9b:76:d5:1d:1d:7f:76:dd:ee:2b:47:78:ac:
         21:4c:fa:62:46:c9:1f:98:95:b9:40:6e:d9:df:3b:ab:4b:ba:
         9b:e6:d8:14:bb:05:05:fe:c3:ac:df:f6:ef:b0:20:10:40:c1:
         c6:37:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:17:18 2026 by rpki-client