Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa
File:                     96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (raw, json)
Hash identifier:          IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=
Subject key identifier:   7C:4E:92:73:6E:E2:0B:52:7C:1B:74:79:5B:C6:7D:06:F7:42:86:73
Certificate issuer:       /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial:       03EB
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:24:15 +0000
ROA not before:           Sun 05 Oct 2025 00:57:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.195.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
                          rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
        Validity
            Not Before: Oct  5 00:57:16 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44c0f-8758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:4b:c3:57:9a:a4:24:9e:31:83:c7:28:51:
                    ef:40:b9:c6:af:ab:3b:a0:05:33:cc:af:53:4e:c4:
                    ba:e6:d7:83:11:85:3b:6d:cb:ba:be:2e:bc:65:e3:
                    f8:a6:ba:46:59:3b:89:a4:10:3b:25:09:90:e9:07:
                    ab:42:bd:dc:49:f6:92:46:fc:e7:8d:cc:06:c4:5b:
                    64:d8:eb:b7:d5:45:c3:8b:a4:3c:cf:64:b2:99:de:
                    3c:b1:19:9c:1d:90:98:9e:db:af:21:cf:13:15:02:
                    26:cd:eb:fc:81:24:12:05:bb:d3:f3:45:48:32:bf:
                    9a:0a:e1:bb:77:e5:78:5b:7a:f0:a6:c2:fb:79:f4:
                    29:83:00:29:c5:fa:10:ba:ca:3c:04:16:5a:b2:43:
                    fe:1d:55:20:ec:4f:56:55:7e:cf:10:25:db:9d:b1:
                    42:9d:b0:02:b0:d2:86:36:7a:16:5d:cd:ee:62:34:
                    3b:a0:f6:4d:9e:95:11:f7:a6:32:9a:e8:43:06:b3:
                    c5:df:61:72:f6:f4:79:ae:06:c7:c8:8d:c5:f7:1c:
                    ea:3d:6e:6b:5a:67:5b:ef:b3:24:ac:72:e7:54:65:
                    b7:b3:d7:f4:20:3a:8a:da:20:9b:a0:ee:c6:51:09:
                    99:2c:d2:8c:4e:c6:40:cd:ae:81:f3:47:ba:6f:10:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:92:73:6E:E2:0B:52:7C:1B:74:79:5B:C6:7D:06:F7:42:86:73
            X509v3 Authority Key Identifier:
                keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:be:d8:e4:00:d7:02:6d:78:56:54:02:44:94:2a:56:eb:b9:
         ec:ff:9e:83:17:f1:7e:e1:66:52:c0:13:d0:d4:59:b9:45:60:
         8a:3d:21:7c:a4:68:98:ed:21:8f:c3:be:e8:ec:e4:b7:38:31:
         a8:4f:01:50:b0:f9:ca:9b:3d:d6:a3:be:61:59:8e:ab:88:13:
         4e:a3:4d:3f:ca:ce:27:af:2f:a3:92:a5:bf:a9:59:f2:bf:db:
         73:94:ec:4a:81:17:22:ac:28:e8:69:44:29:98:ec:b8:05:d0:
         db:e4:c5:9a:d0:1c:6f:e7:ab:df:a5:a5:8f:8a:a1:7d:b2:94:
         55:84:9c:d6:83:ae:60:9a:f6:9c:7f:e4:14:6c:fa:57:ca:bc:
         28:ac:d8:ad:04:a2:09:ba:4a:36:37:8d:7a:86:0e:0d:d7:f5:
         c7:7e:ec:e4:4d:9f:cb:d0:f7:0e:7e:fc:77:19:d9:be:5c:e0:
         e7:29:d4:27:31:ca:9a:5f:da:ce:a4:0e:e2:6d:b6:e8:eb:20:
         00:7e:66:6d:82:4a:3d:f9:8f:17:b1:f7:55:c1:fe:c1:16:c2:
         76:81:9b:6f:cb:ff:c8:70:dc:50:2a:6c:5f:19:c9:aa:50:d2:
         ac:5f:de:d7:d6:fd:00:5e:75:5d:34:15:9c:25:eb:4d:bc:b9:
         80:d0:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:54 2026 by rpki-client