Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/60B707FA1AEA11EE92BEA24CC4F9AE02.roa
File:                     60B707FA1AEA11EE92BEA24CC4F9AE02.roa (raw, json)
Hash identifier:          bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=
Subject key identifier:   1E:2E:BA:49:A0:4C:49:9D:15:3F:08:F3:AE:6D:BF:92:A8:38:DA:C3
Certificate issuer:       /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial:       020B
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/60B707FA1AEA11EE92BEA24CC4F9AE02.roa
Signing time:             Thu 19 Mar 2026 02:37:49 +0000
ROA not before:           Thu 19 Mar 2026 02:37:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132342
IP address blocks:        103.13.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
        Validity
            Not Before: Mar 19 02:37:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69bb617d-8471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:fa:db:ac:6c:81:a4:ff:46:a1:05:4c:53:
                    0a:67:49:d1:60:84:b1:10:6c:a1:53:9c:c7:60:6e:
                    2d:ff:14:88:83:01:5d:b3:a2:71:34:78:ce:62:ed:
                    8b:b6:ea:e1:a2:14:b6:34:0a:e3:fa:3e:55:ac:9b:
                    20:74:2e:c3:e6:b4:75:88:1c:7d:d7:03:f0:3e:77:
                    45:3a:45:64:3b:36:bb:c4:7a:c5:de:ad:07:6b:57:
                    a2:60:df:9e:c5:c5:f3:31:1c:6e:df:6b:42:53:bd:
                    1a:eb:35:cf:63:c6:be:b0:70:59:8f:8c:ad:c9:92:
                    99:b1:88:d5:23:6f:01:c6:90:17:85:8e:ad:45:f5:
                    d6:17:b6:a5:70:aa:f7:98:69:89:05:fd:18:ee:3e:
                    91:b6:b7:62:5e:bc:b3:44:30:3f:ba:6e:46:ca:56:
                    6b:d3:19:32:87:2b:13:85:9b:ba:50:91:0a:1b:a5:
                    b4:51:ce:a0:43:16:09:b4:81:d3:7e:d2:31:9c:c8:
                    d1:6f:be:55:79:0f:77:46:81:3f:c9:ed:2c:c9:3e:
                    82:ed:f4:d7:99:e2:e2:ef:12:dd:25:a9:f0:19:56:
                    1e:80:ff:08:c3:91:40:83:96:15:88:d9:13:8e:e1:
                    f7:ff:63:cd:1f:13:dc:4e:90:18:94:35:2d:c6:80:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:BA:49:A0:4C:49:9D:15:3F:08:F3:AE:6D:BF:92:A8:38:DA:C3
            X509v3 Authority Key Identifier:
                keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/60B707FA1AEA11EE92BEA24CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:b8:f8:f1:d2:59:a9:42:4f:ce:4f:13:cc:65:6f:be:0e:
         02:a3:51:67:38:cb:73:43:00:59:2c:72:53:17:4f:04:1a:74:
         18:bd:36:5e:d8:43:1f:24:db:06:fe:fa:29:9a:f2:a1:a4:68:
         e2:bd:b9:85:80:01:82:db:5e:54:09:86:53:c2:60:fd:3b:c3:
         9a:ce:7a:47:cb:27:aa:20:57:4a:a7:46:fe:59:ec:1e:53:fd:
         fe:dc:c7:90:88:08:32:6d:62:38:30:e9:64:a2:02:c8:44:8c:
         87:c8:b3:3a:2a:ae:f4:43:14:e8:46:6c:ab:10:87:ae:61:e3:
         7f:06:2b:09:6a:46:e9:c6:a2:f6:7c:3b:05:18:d4:d3:8f:d8:
         1b:a8:95:6d:96:e8:af:b2:3c:a5:7b:89:10:58:22:b8:22:29:
         00:95:19:8f:08:7b:5c:e9:26:90:6a:85:fc:f2:a8:13:fc:90:
         72:7c:fc:aa:20:20:d8:7e:ee:52:a2:8c:7e:01:c1:c7:dd:31:
         d3:f3:b4:d0:6c:77:3d:3b:7e:0c:a7:f5:89:52:13:11:ed:53:
         a0:df:dd:f1:82:91:28:89:41:7b:9c:23:fa:73:28:ef:bf:83:
         ff:74:c3:f9:59:e6:71:12:7b:1e:7f:dd:28:fe:cb:c4:00:73:
         98:39:17:1c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD
QzUyNjUyNEYwHhcNMjYwMzE5MDIzNzQ5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJiNjE3ZC04NDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTv626xsgaT/RqEFTFMKZ0nRYISxEGyhU5zHYG4t/xSIgwFds6JxNHjOYu2L
turhohS2NArj+j5VrJsgdC7D5rR1iBx91wPwPndFOkVkOza7xHrF3q0Ha1eiYN+e
xcXzMRxu32tCU70a6zXPY8a+sHBZj4ytyZKZsYjVI28BxpAXhY6tRfXWF7alcKr3
mGmJBf0Y7j6RtrdiXryzRDA/um5GylZr0xkyhysThZu6UJEKG6W0Uc6gQxYJtIHT
ftIxnMjRb75VeQ93RoE/ye0syT6C7fTXmeLi7xLdJanwGVYegP8Iw5FAg5YViNkT
juH3/2PNHxPcTpAYlDUtxoAerwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB4uukmg
TEmdFT8I865tv5KoONrDMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB
RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQ5NTcvNTcxQjIyMTAxQUU3MTFFRThERDRCOTQ5QzRGOUFFMDIvNjBCNzA3RkEx
QUVBMTFFRTkyQkVBMjRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZw2wMA0GCSqGSIb3DQEBCwUAA4IBAQCqZbj48dJZqUJPzk8TzGVv
vg4Co1FnOMtzQwBZLHJTF08EGnQYvTZe2EMfJNsG/vopmvKhpGjivbmFgAGC215U
CYZTwmD9O8OaznpHyyeqIFdKp0b+WeweU/3+3MeQiAgybWI4MOlkogLIRIyHyLM6
Kq70QxToRmyrEIeuYeN/BisJakbpxqL2fDsFGNTTj9gbqJVtluivsjyle4kQWCK4
IikAlRmPCHtc6SaQaoX88qgT/JByfPyqICDYfu5Soox+AcHH3THT87TQbHc9O34M
p/WJUhMR7VOg393xgpEoiUF7nCP6cyjvv4P/dMP5WeZxEnsef90o/svEAHOYORcc
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:19 2026 by rpki-client