Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/0682A6A03DC411EBBFE0EA13C4F9AE02.roa
File:                     0682A6A03DC411EBBFE0EA13C4F9AE02.roa (raw, json)
Hash identifier:          efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=
Subject key identifier:   DC:D4:6C:92:77:E3:C2:73:2B:99:E9:02:AD:B7:E0:3B:4D:8E:DA:D4
Certificate issuer:       /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial:       1713
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/0682A6A03DC411EBBFE0EA13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:16:30 +0000
ROA not before:           Sat 14 Jun 2025 17:07:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55508
IP address blocks:        203.110.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
                          rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5907 (0x1713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
        Validity
            Not Before: Jun 14 17:07:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a403ee-85db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:91:50:07:72:b2:46:f2:ca:4a:2b:39:c8:
                    31:fb:4e:e7:ad:7d:dd:f0:d8:ab:c2:03:82:20:17:
                    1e:b2:3c:03:79:60:55:9e:de:bc:ee:64:ce:f8:aa:
                    db:d9:e9:51:00:26:dc:07:94:3c:d0:a3:0b:45:9b:
                    9d:7c:05:4b:82:91:db:dc:e5:53:34:da:6b:5c:84:
                    ce:dd:93:29:23:a0:2f:8c:12:b3:21:e2:78:aa:a3:
                    09:6c:4f:39:6f:af:b3:87:31:0a:05:de:35:d5:b4:
                    0c:26:3b:79:6d:62:ac:71:b5:ba:36:d8:a9:08:77:
                    0e:2a:83:b1:b7:5f:a3:d9:ab:03:74:3d:7c:d2:29:
                    ab:e9:18:0a:56:f3:38:c1:37:d2:cf:9c:0d:fb:c7:
                    97:d1:1a:a4:21:ce:fe:bd:8b:df:ba:36:79:e6:3a:
                    b1:e4:c6:ee:31:55:a2:6e:10:53:8d:d0:69:4f:04:
                    1f:6b:20:c0:1d:4e:f7:86:40:e0:0d:ca:a9:cf:a0:
                    de:f4:c3:7f:be:f1:53:ee:1d:c7:46:c7:f0:2b:da:
                    47:63:22:bd:01:ca:6c:23:f6:14:19:d2:a1:93:71:
                    47:bc:93:16:7b:56:53:f8:d0:0c:80:a5:28:27:95:
                    a6:bf:ce:bf:ab:27:ae:f4:dc:46:6d:06:bb:80:ce:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:6C:92:77:E3:C2:73:2B:99:E9:02:AD:B7:E0:3B:4D:8E:DA:D4
            X509v3 Authority Key Identifier:
                keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/0682A6A03DC411EBBFE0EA13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:02:92:05:f9:16:a0:6d:10:c1:3c:f5:f0:8a:2d:75:8b:39:
         d3:5b:1a:7d:69:08:be:67:e7:1b:a1:c7:05:a7:eb:f2:84:2e:
         d4:c9:b3:7c:1f:c6:83:4f:c1:c4:3e:62:e8:cf:e1:52:76:64:
         b8:dd:7d:85:e1:b3:a9:47:99:c4:9f:55:3e:43:fa:da:24:61:
         b8:b4:d0:9f:9d:15:23:ad:ca:ae:fa:5a:af:bf:92:40:ef:d9:
         04:93:a4:51:c8:4e:d2:7c:e0:db:6c:61:01:a6:2d:7e:02:71:
         47:4c:42:ef:d5:d3:b0:44:85:9b:4d:72:2c:88:0b:4d:d5:f4:
         6e:ce:6d:b8:34:94:26:f2:44:65:ae:e0:10:1d:22:8a:8f:00:
         e8:26:9c:73:e2:c6:37:1a:f8:e1:dd:89:6d:e7:fb:d9:3b:0a:
         50:f1:2a:9e:21:9b:fa:fe:23:4b:62:fa:24:34:66:a0:45:02:
         70:09:d0:23:6d:7e:ca:23:bf:bc:44:5c:6f:8a:75:3f:46:54:
         1d:70:07:6e:0d:a5:01:45:cd:04:91:45:05:f4:4f:56:89:46:
         fa:70:96:4e:af:7d:1f:7c:15:cd:8f:18:19:8f:e8:e8:43:21:
         48:fc:59:5d:64:57:8d:07:f5:ad:9a:58:68:50:b3:b5:0f:36:
         aa:1e:ba:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0EwRjMxMTAvBgNVBAUTKDg0RDI5MDRDNDhCRkY1NUQ5QUFFMDg4N0I4MkMzMzBG
MUI5QjI5QUMwHhcNMjUwNjE0MTcwNzM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDNlZS04NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjtmRUAdyskbyykorOcgx+07nrX3d8NirwgOCIBcesjwDeWBVnt687mTO+Krb
2elRACbcB5Q80KMLRZudfAVLgpHb3OVTNNprXITO3ZMpI6AvjBKzIeJ4qqMJbE85
b6+zhzEKBd411bQMJjt5bWKscbW6NtipCHcOKoOxt1+j2asDdD180imr6RgKVvM4
wTfSz5wN+8eX0RqkIc7+vYvfujZ55jqx5MbuMVWibhBTjdBpTwQfayDAHU73hkDg
Dcqpz6De9MN/vvFT7h3HRsfwK9pHYyK9AcpsI/YUGdKhk3FHvJMWe1ZT+NAMgKUo
J5Wmv86/qyeu9NxGbQa7gM7JZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNzUbJJ3
48JzK5npAq234DtNjtrUMB8GA1UdIwQYMBaAFITSkExIv/Vdmq4Ih7gsMw8bmyms
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBGMy80MTcxQjcwNDA0
QTgxMUU4QjIzQTlBMThDNEY5QUUwMi9oTktRVEVpXzlWMmFyZ2lIdUN3ekR4dWJL
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOS1FURWlfOVYyYXJnaUh1Q3d6RHh1Ykthdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0EwRjMvNDE3MUI3MDQwNEE4MTFFOEIyM0E5QTE4QzRGOUFFMDIvMDY4MkE2QTAz
REM0MTFFQkJGRTBFQTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEy25AMA0GCSqGSIb3DQEBCwUAA4IBAQBiApIF+RagbRDBPPXwii11
iznTWxp9aQi+Z+cboccFp+vyhC7UybN8H8aDT8HEPmLoz+FSdmS43X2F4bOpR5nE
n1U+Q/raJGG4tNCfnRUjrcqu+lqvv5JA79kEk6RRyE7SfODbbGEBpi1+AnFHTELv
1dOwRIWbTXIsiAtN1fRuzm24NJQm8kRlruAQHSKKjwDoJpxz4sY3Gvjh3Ylt5/vZ
OwpQ8SqeIZv6/iNLYvokNGagRQJwCdAjbX7KI7+8RFxvinU/RlQdcAduDaUBRc0E
kUUF9E9WiUb6cJZOr30ffBXNjxgZj+joQyFI/FldZFeNB/WtmlhoULO1DzaqHrp5
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:22:08 2026 by rpki-client