Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
File:                     7464EB1E876411EE8971C221C4F9AE02.roa (raw, json)
Hash identifier:          7k0QeXkrH6qIhheYSk93AdV70R9jyr1kHjhZ3Yi6/es=
Subject key identifier:   29:47:D1:2C:4E:A7:6C:75:45:AF:A0:AF:3B:6A:81:C7:B3:69:FB:BC
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       0700
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:32:33 +0000
ROA not before:           Thu 28 Aug 2025 22:44:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58580
IP address blocks:        103.62.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Aug 28 22:44:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a431e1-7163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:fd:f3:71:c0:c1:6a:41:44:57:71:93:24:
                    72:0b:4f:0c:8d:00:fe:bb:04:d5:16:dd:0d:e8:0f:
                    3e:d7:e8:b5:f0:c8:1b:d5:61:ae:fe:f8:13:06:bd:
                    4a:5a:a8:a6:9f:b4:6b:95:57:88:64:e8:83:42:b2:
                    e9:49:b7:23:38:e3:88:db:be:e2:ac:53:92:e6:43:
                    3d:3a:52:fa:95:d6:be:fc:86:83:27:1c:b6:c3:5b:
                    d0:d1:a2:fe:2b:80:14:5c:7b:8c:1b:c8:0c:50:03:
                    77:9b:7f:e8:46:85:7b:bf:db:0c:6b:b4:38:51:bf:
                    b7:76:4c:d2:e5:79:df:fa:db:31:c6:e9:e0:f1:33:
                    13:3f:45:e7:f9:ef:0f:0e:34:15:19:cb:fd:9e:16:
                    0f:09:2b:ac:9c:2d:e7:71:2c:13:23:e4:5b:0a:be:
                    62:ed:99:2e:c7:d8:ef:8e:27:9a:3a:1c:3c:b8:2b:
                    71:e4:30:10:cd:dc:ca:45:35:8d:3f:30:c9:ab:4a:
                    8b:49:97:75:82:e7:95:d0:5d:1c:85:90:9d:07:5e:
                    52:5c:75:71:e4:85:30:24:27:74:a2:29:46:90:44:
                    a2:24:3f:26:47:73:87:b5:32:a5:95:f8:09:7f:0c:
                    06:cf:78:2d:44:1c:6b:36:f7:49:de:f6:7d:39:3a:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:D1:2C:4E:A7:6C:75:45:AF:A0:AF:3B:6A:81:C7:B3:69:FB:BC
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:87:b9:69:d3:f4:5e:d7:8e:0b:24:30:fc:b1:b6:8f:fa:
         ba:3b:7b:41:fa:76:4f:a8:70:29:34:6a:2b:12:5e:8a:b2:d5:
         fd:38:2b:62:37:e7:92:52:d7:94:ae:11:cf:a5:dd:f4:5d:ea:
         56:c2:82:c9:9e:a2:d8:ca:97:99:93:20:6e:92:ea:84:62:4d:
         51:d3:18:f9:22:a8:77:bb:0c:cf:15:34:7a:5a:f1:08:98:09:
         9c:77:83:80:50:60:6d:fa:6e:c2:cb:34:a2:b0:15:ad:33:7d:
         58:a1:6e:cf:73:a8:2c:d2:aa:88:5e:86:43:bd:20:4b:2b:89:
         a6:1c:14:19:b9:4c:e5:8b:e0:d0:07:9c:fd:45:ae:6a:ed:9b:
         0d:f6:66:d0:3d:09:dc:07:01:d3:18:27:c3:e3:a4:13:6d:85:
         26:d5:31:88:78:57:f5:32:e1:21:d0:90:eb:75:98:28:3d:2d:
         be:48:fc:04:17:61:c9:89:5a:73:1d:d4:9f:6e:b2:eb:28:c7:
         e8:dc:34:72:98:54:44:50:eb:88:a1:62:e0:9e:fe:0d:11:13:
         7c:b6:7a:62:af:db:26:ca:f9:8c:c1:c2:71:48:54:89:67:27:
         d5:1a:52:37:1d:40:e6:07:0c:37:1e:cf:37:cb:bc:eb:13:fe:
         92:08:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:12 2026 by rpki-client