Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
File:                     C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (raw, json)
Hash identifier:          qtrScKJeemzjIsu0EPYK7qa46I/IyYNJeryX2VPnVrg=
Subject key identifier:   1F:04:8F:C5:31:33:B5:2E:FF:D3:93:AB:64:F7:D9:1C:F8:5B:36:06
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       07C0
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:41:39 +0000
ROA not before:           Sat 28 Jun 2025 21:59:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     36819
IP address blocks:        103.154.198.0/24 maxlen: 24
                          103.162.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E, serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: Jun 28 21:59:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a409d3-bc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:4b:46:55:7a:5f:4e:e8:9c:25:9d:c9:6a:
                    81:25:ed:bf:f3:a2:48:f6:1b:44:42:f7:12:cc:bd:
                    cc:9d:65:5e:ab:05:7b:90:cb:31:35:4d:53:d3:ca:
                    79:73:29:da:48:30:f7:38:69:a4:5d:94:09:55:8d:
                    2e:15:68:eb:7a:21:f9:57:5b:64:66:c8:79:64:71:
                    7b:5e:ed:e3:5d:2c:76:19:c0:be:1a:e0:9d:27:65:
                    7a:d7:da:35:aa:91:5e:3b:51:52:2d:02:e1:58:a7:
                    43:51:67:e8:f6:dc:23:8c:64:55:af:24:dd:86:1a:
                    24:d3:9d:fb:9b:14:af:a5:a4:e5:e1:18:bd:aa:f5:
                    48:e3:0e:b7:e3:ca:06:01:6f:cb:47:b0:9d:0d:d4:
                    59:b7:e7:2e:5d:fa:2e:3d:5c:ad:d5:87:16:e8:e3:
                    ae:c7:ff:9e:c5:f8:59:71:c4:2a:c1:e3:d2:87:a5:
                    11:67:b9:ce:95:fe:53:64:01:df:87:23:4a:29:1d:
                    39:c3:44:ee:5a:9a:ee:e9:0b:ff:6b:99:ac:07:45:
                    88:3d:70:99:27:a5:c3:05:5f:de:84:fa:fe:89:bf:
                    dc:65:eb:4d:10:a6:4a:d9:8b:6e:98:60:c0:33:2f:
                    a4:53:38:01:9b:9f:e3:b4:85:cd:96:e4:84:2b:7c:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:8F:C5:31:33:B5:2E:FF:D3:93:AB:64:F7:D9:1C:F8:5B:36:06
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.198.0/24
                  103.162.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:3b:a6:db:30:56:9e:48:5d:da:06:c5:ea:1a:86:ee:00:cc:
         3a:de:39:5e:82:6e:47:cf:2c:90:9d:e9:21:bd:5e:65:39:56:
         0c:98:aa:93:f7:a7:7f:3c:0f:9d:64:c5:15:1d:78:cd:17:13:
         92:e6:f2:b4:9b:a9:44:dc:7d:9e:58:42:35:0d:3d:ec:0f:9a:
         22:e1:1a:c7:6f:3c:c9:10:5a:99:68:fd:52:77:52:3e:62:7d:
         9e:ca:59:be:10:3f:d3:f5:67:87:ec:67:8c:cd:1d:0c:f6:80:
         97:ee:91:91:32:7b:26:56:2c:a8:42:7e:1e:7b:2c:64:4a:f7:
         76:52:7e:90:97:2c:85:1b:d1:d3:75:b3:af:1b:56:f6:05:20:
         a9:c4:02:bd:18:24:ed:a4:96:40:35:72:cd:f2:84:ed:4f:c4:
         fe:27:12:23:5e:e0:57:e4:22:1d:f0:62:a2:42:b8:1b:93:96:
         4b:97:c2:ed:8c:c0:a1:91:9e:55:76:05:28:b2:84:e2:7f:92:
         b2:29:a0:9a:1f:1f:56:36:aa:66:6c:8c:a2:58:7e:b1:81:25:
         d3:35:2f:c3:48:9c:38:f7:6a:23:ab:eb:fc:62:0e:1b:f2:cd:
         19:60:38:00:5e:93:ea:66:93:90:8e:b8:7d:1b:2c:fd:be:0d:
         cb:6a:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:34 2026 by rpki-client