Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/62B3880C7E5D11F0ACC14A80C4F9AE02.roa
File:                     62B3880C7E5D11F0ACC14A80C4F9AE02.roa (raw, json)
Hash identifier:          loa/gmNkqH5emPdqG1mfwNrpi51lh8r/Sh1SgqZBjbo=
Subject key identifier:   AD:F7:EA:18:80:6B:0A:96:E2:F2:B6:C7:7E:C2:58:65:3A:72:3E:50
Certificate issuer:       /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial:       6E
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/62B3880C7E5D11F0ACC14A80C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:29:22 +0000
ROA not before:           Thu 23 Oct 2025 10:21:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     45530
IP address blocks:        65.181.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
        Validity
            Not Before: Oct 23 10:21:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3f8e2-38e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:b7:56:ec:58:97:39:d4:9b:a2:50:2b:45:
                    15:b6:cd:31:6d:fa:08:4d:2b:9b:67:bf:20:bd:c8:
                    2e:a4:9b:89:63:d0:fa:dd:c0:52:c7:bd:1a:da:0f:
                    dc:13:78:23:ad:cd:d6:28:38:c7:36:94:29:08:a6:
                    31:c1:6b:01:75:0d:af:c4:c0:aa:6c:08:7c:f5:26:
                    cd:76:11:c9:fc:97:20:dd:bb:71:52:64:5a:98:50:
                    64:7e:5c:f8:df:d3:dd:49:a0:7b:2c:17:fa:24:ba:
                    8b:52:04:9c:82:14:92:8e:12:65:fb:30:1b:1b:16:
                    c3:ba:13:f5:47:cb:ba:cc:da:07:4c:fd:e2:37:ea:
                    b3:1c:7b:1e:a3:af:5d:9f:2e:e0:09:22:28:ad:05:
                    1f:e7:94:85:8c:00:29:55:1c:85:f6:79:87:1d:31:
                    d3:86:71:c2:dc:ab:a5:95:dd:15:d5:f3:d9:e9:a3:
                    48:65:6c:4e:4e:6f:56:1a:73:be:a4:8c:7d:54:5d:
                    e9:e9:0a:eb:9d:64:e2:34:aa:22:11:cc:dd:e7:0e:
                    45:04:4b:e9:90:ef:ef:39:04:0d:3d:27:50:f1:dd:
                    64:79:e7:2c:b3:4b:92:54:8f:b1:1b:fa:c7:6d:e9:
                    0c:3e:7e:e4:ff:5b:ee:f5:8b:1e:a0:e6:1f:eb:ea:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:EA:18:80:6B:0A:96:E2:F2:B6:C7:7E:C2:58:65:3A:72:3E:50
            X509v3 Authority Key Identifier:
                keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/62B3880C7E5D11F0ACC14A80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:2e:29:50:fa:a7:e6:eb:08:d1:36:ea:df:31:1e:61:48:
         ab:d4:c9:3d:c9:af:06:54:04:88:34:6b:e2:8c:8c:d6:11:8e:
         69:0e:01:48:28:80:5e:0d:34:89:56:f8:82:81:d0:97:0b:de:
         f0:43:71:e0:1f:d0:f2:cf:5f:dc:0d:45:2a:22:7c:ac:5d:22:
         18:6b:23:90:c7:13:14:bf:3b:40:06:7d:45:e2:a3:35:de:25:
         5b:b8:d4:e2:4b:90:a5:68:c4:50:1f:2b:f2:00:87:1e:7c:0d:
         fe:7a:bf:45:44:58:ad:77:3b:61:45:14:f6:a9:34:2e:b8:15:
         1c:0b:04:b3:4c:2e:54:7f:3a:7a:db:05:f3:6a:f3:5c:02:98:
         34:71:eb:fe:c1:a3:2c:c1:74:98:87:e4:6c:86:1e:9f:37:7d:
         30:6b:b2:5c:7d:1b:d0:c9:22:b4:9c:09:4c:8f:4f:ab:46:7a:
         4b:38:15:14:a5:75:9a:b8:71:38:bc:06:3b:6e:01:07:d8:62:
         51:71:c1:91:00:b7:8b:5c:33:9a:37:6d:5b:c8:e3:6a:e3:87:
         48:53:0d:06:a0:4c:93:d9:ea:7c:ce:3d:3c:79:f0:8d:a9:1b:
         26:9d:00:cd:0b:a9:93:6b:09:cb:fa:f8:bd:70:a5:1f:4c:1e:
         7c:19:f2:25
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2
NERERjY4MDAeFw0yNTEwMjMxMDIxMzNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmOGUyLTM4ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwzLdW7FiXOdSbolArRRW2zTFt+ghNK5tnvyC9yC6km4lj0PrdwFLHvRraD9wT
eCOtzdYoOMc2lCkIpjHBawF1Da/EwKpsCHz1Js12Ecn8lyDdu3FSZFqYUGR+XPjf
091JoHssF/okuotSBJyCFJKOEmX7MBsbFsO6E/VHy7rM2gdM/eI36rMcex6jr12f
LuAJIiitBR/nlIWMAClVHIX2eYcdMdOGccLcq6WV3RXV89npo0hlbE5Ob1Yac76k
jH1UXenpCuudZOI0qiIRzN3nDkUES+mQ7+85BA09J1Dx3WR55yyzS5JUj7Eb+sdt
6Qw+fuT/W+71ix6g5h/r6v2fAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUrffqGIBr
Cpbi8rbHfsJYZTpyPlAwHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC
QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0I3QS9DMDg1MDY5MjdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi82MkIzODgwQzdF
NUQxMUYwQUNDMTRBODBDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFBtXIwDQYJKoZIhvcNAQELBQADggEBAAfRLilQ+qfm6wjRNurfMR5h
SKvUyT3JrwZUBIg0a+KMjNYRjmkOAUgogF4NNIlW+IKB0JcL3vBDceAf0PLPX9wN
RSoifKxdIhhrI5DHExS/O0AGfUXiozXeJVu41OJLkKVoxFAfK/IAhx58Df56v0VE
WK13O2FFFPapNC64FRwLBLNMLlR/OnrbBfNq81wCmDRx6/7BoyzBdJiH5GyGHp83
fTBrslx9G9DJIrScCUyPT6tGeks4FRSldZq4cTi8BjtuAQfYYlFxwZEAt4tcM5o3
bVvI42rjh0hTDQagTJPZ6nzOPTx58I2pGyadAM0LqZNrCcv6+L1wpR9MHnwZ8iU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:43 2026 by rpki-client