Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa
File:                     60932800BD1511F18D3189834911F970.roa (raw, json)
Hash identifier:          2xizNwLacLpLXkKi7DcjXrf8/LtXgbokhT/ESBr2+Ys=
Subject key identifier:   7A:C4:CA:A7:F2:2D:7A:B2:12:CB:6D:FB:BA:96:16:69:3D:F2:FC:BB
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0898
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa
Signing time:             Wed 30 Sep 2026 21:41:27 +0000
ROA not before:           Wed 30 Sep 2026 21:41:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        103.12.196.0/24 maxlen: 24
                          103.12.197.0/24 maxlen: 24
                          103.12.198.0/24 maxlen: 24
                          103.12.199.0/24 maxlen: 24
                          103.73.100.0/24 maxlen: 24
                          103.73.101.0/24 maxlen: 24
                          103.73.102.0/24 maxlen: 24
                          103.73.103.0/24 maxlen: 24
                          103.125.176.0/24 maxlen: 24
                          103.125.177.0/24 maxlen: 24
                          103.125.178.0/24 maxlen: 24
                          103.125.179.0/24 maxlen: 24
                          103.150.208.0/24 maxlen: 24
                          103.150.209.0/24 maxlen: 24
                          103.151.236.0/24 maxlen: 24
                          103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Sep 30 21:41:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abd8207-491c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:ad:d3:cf:77:09:ef:3e:f7:a0:74:27:85:
                    c9:95:9c:62:98:7a:cc:6d:23:8b:b0:2d:63:80:f4:
                    c1:24:98:0f:44:97:05:50:88:0e:20:43:34:d9:24:
                    fa:2f:e1:8f:79:16:2d:ba:17:9f:cd:14:23:5d:11:
                    6a:ad:66:8f:83:77:7f:66:d7:89:4a:56:f6:e7:cb:
                    0f:03:56:08:c5:4b:53:35:1b:36:cc:a4:a1:76:55:
                    ff:a4:2f:66:81:0c:22:ab:71:7d:ab:90:54:80:3f:
                    2f:9e:a3:cc:a3:34:7b:94:22:2b:6a:de:06:8f:60:
                    34:b0:67:c4:83:a4:f9:1a:9e:a5:38:56:24:c6:dd:
                    40:08:b2:ec:47:18:23:87:13:93:e4:f0:a0:ef:16:
                    55:bf:33:bb:90:0c:94:7f:a0:9c:33:13:85:4d:f2:
                    37:ec:e7:bf:b0:1a:2d:e5:91:93:90:02:cd:18:34:
                    79:bf:c8:a2:0b:6d:7f:b6:f5:1b:18:b5:76:85:bf:
                    8e:63:49:4f:a9:9d:a6:de:66:66:1d:1f:12:c0:5c:
                    6d:25:a3:bc:3f:40:33:12:2b:14:d4:ce:9c:74:f5:
                    86:09:99:ff:39:21:93:0c:62:e4:d3:8b:22:c5:1d:
                    0b:89:01:b1:21:48:e0:1e:78:68:3b:87:af:d0:9b:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:CA:A7:F2:2D:7A:B2:12:CB:6D:FB:BA:96:16:69:3D:F2:FC:BB
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.196.0/22
                  103.73.100.0/22
                  103.125.176.0/22
                  103.150.208.0/23
                  103.151.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:b7:85:00:7e:cd:38:9b:41:5d:e8:5c:32:3c:49:3b:cc:
         2d:9d:4b:12:06:10:fd:ef:62:36:9e:46:e9:d0:7c:e3:4c:4b:
         f5:e5:ad:de:bf:d9:c7:e3:a2:a5:4d:0a:32:14:af:24:3a:3b:
         ad:39:21:c3:3d:90:a9:97:53:64:10:45:b8:52:12:12:e6:0e:
         8a:d1:8e:7d:ca:26:6a:a7:c3:72:05:85:96:00:d4:40:c9:92:
         9b:12:5b:f6:94:27:9f:a6:dc:d8:79:f7:9b:c4:19:77:c9:67:
         aa:07:6a:68:78:2c:d0:0b:3a:17:45:23:84:58:9f:e9:aa:8e:
         cc:ed:12:2a:e2:db:46:97:2b:f9:a5:70:1f:34:74:89:e7:10:
         7a:4c:4c:0a:1b:4c:bb:fa:ea:e9:d7:de:61:95:de:75:a0:62:
         ab:24:77:15:d6:ab:1c:e0:77:60:a3:05:26:ff:dc:ec:a0:e0:
         ee:02:8f:79:54:54:27:e2:bb:ec:0a:b4:31:37:77:53:9a:b9:
         cd:66:76:1d:71:44:2f:11:23:82:fa:d6:8b:17:8a:85:8e:a9:
         24:e1:a5:63:df:d5:76:9e:11:7a:9c:83:5c:0e:4a:87:d9:2a:
         4f:0c:69:c1:4b:f0:94:d4:e4:1a:f9:b9:71:7a:d7:c5:22:13:
         f8:a4:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:22:42 2026 by rpki-client