Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
File:                     63F05DE02F1D11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          HJOH5asGunYQEvk82sJm0A6hweU+aem6Q3oRV9ckVQA=
Subject key identifier:   07:9E:FF:53:21:95:66:C5:59:0A:C9:AC:64:B0:DC:FE:C6:2E:F9:70
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       03C5
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:43 +0000
ROA not before:           Thu 29 Jan 2026 00:21:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18390
IP address blocks:        27.96.192.0/19 maxlen: 24
                          115.69.0.0/18 maxlen: 24
                          202.172.96.0/19 maxlen: 24
                          203.23.236.0/22 maxlen: 24
                          203.29.65.0/24 maxlen: 24
                          203.29.124.0/23 maxlen: 24
                          203.31.202.0/23 maxlen: 24
                          203.56.244.0/22 maxlen: 24
                          203.57.48.0/23 maxlen: 24
                          210.1.192.0/19 maxlen: 24
                          2407:e400::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Jan 29 00:21:07 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46503-d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:1a:97:60:e3:af:a1:d9:42:1c:af:b3:a1:
                    60:1b:62:4c:6f:13:75:b3:fa:23:8b:9d:93:f3:4b:
                    c3:ed:a8:e8:15:b5:cf:e6:61:92:e0:62:53:8c:8a:
                    5c:dd:78:ae:14:5d:d7:5c:e1:fe:a5:48:6c:44:51:
                    5a:ea:d6:88:72:b3:c0:23:65:69:77:73:07:e6:3e:
                    ca:90:87:6a:86:27:65:2b:79:a9:47:9b:49:a4:66:
                    21:cb:d8:1b:58:4a:7b:35:3f:4f:dd:1d:f4:06:49:
                    da:22:e9:e3:3f:f7:bb:a8:a9:4d:d1:f3:a6:34:cf:
                    48:5b:ba:8a:5f:31:a1:93:e6:b4:01:0e:ac:73:2d:
                    9e:b4:84:8b:36:63:a5:45:1a:95:ac:09:2f:95:bc:
                    de:2b:cf:e1:71:5b:2e:ee:67:61:01:8e:7e:4f:c7:
                    e3:57:b0:8a:9a:ad:b5:ae:c4:a8:00:63:ad:9d:cb:
                    2f:c2:b4:5a:a9:6e:10:c8:89:3e:38:2d:7e:7f:89:
                    7b:42:e6:c9:c8:c1:78:bb:8e:6e:40:0b:03:71:3a:
                    03:ba:4e:c6:3a:51:4e:9a:4b:08:da:d1:34:92:0a:
                    37:ea:b6:98:4c:89:72:9b:7f:87:ef:2c:2a:97:ef:
                    68:6b:a9:e9:1d:2e:15:6f:b2:b0:7e:f3:ea:77:6c:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:FF:53:21:95:66:C5:59:0A:C9:AC:64:B0:DC:FE:C6:2E:F9:70
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.192.0/19
                  115.69.0.0/18
                  202.172.96.0/19
                  203.23.236.0/22
                  203.29.65.0/24
                  203.29.124.0/23
                  203.31.202.0/23
                  203.56.244.0/22
                  203.57.48.0/23
                  210.1.192.0/19
                IPv6:
                  2407:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:49:bc:66:4c:03:58:13:81:e3:90:a5:be:85:ea:23:b5:
         e2:18:ca:66:7e:f0:9e:3a:c2:ca:23:a4:56:12:1b:41:e9:d0:
         5f:c6:e7:af:f8:07:ad:eb:b5:9d:07:c5:8a:d5:c0:32:54:28:
         41:0f:8a:fa:b4:db:7c:27:e3:09:42:bd:f3:7e:82:fa:26:4d:
         b8:45:60:4d:cd:7c:df:a9:f7:60:69:9d:64:4d:f1:d2:70:ba:
         51:59:07:31:e0:bf:9b:61:1a:4b:d5:3d:88:00:61:0f:04:38:
         34:6d:bb:7a:33:e4:ba:57:5d:c6:67:6c:14:28:f6:00:1c:c9:
         73:52:66:0b:11:18:b7:c9:3d:77:03:03:11:c5:60:98:cf:03:
         b6:c4:4f:6f:4a:77:a0:bc:24:ef:76:c7:26:ed:8e:36:0d:8a:
         89:a1:10:a1:99:f0:9d:14:bf:64:8e:52:51:96:80:28:74:bb:
         e2:2a:a1:a3:37:07:a4:d3:21:d2:ca:d9:f7:b4:c6:52:dc:dd:
         44:22:02:4a:01:f4:21:cf:68:20:7a:5d:f1:a7:fc:f7:01:3a:
         96:7d:0a:45:b6:36:7b:3c:c3:07:f1:c1:0b:2c:bd:0a:53:37:
         96:5c:ea:98:ce:b3:56:d3:bd:c9:ea:3d:39:e6:35:98:c1:71:
         40:e1:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:44 2026 by rpki-client