Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa
File:                     DB5DF87886EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier:          S1i8KORbMjRrG15OVZfqhE8QgQAFH9j0NIxnDNRY3Gw=
Subject key identifier:   FC:DC:DC:E6:82:E5:B3:07:B8:E6:1D:8F:A6:CD:10:6A:25:EA:EF:B0
Certificate issuer:       /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial:       1E15
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa
Signing time:             Sun 30 Aug 2026 16:31:16 +0000
ROA not before:           Sun 30 Aug 2026 16:31:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63998
IP address blocks:        103.61.8.0/22 maxlen: 30
                          2403:6a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
                          rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7701 (0x1e15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
        Validity
            Not Before: Aug 30 16:31:16 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945ad4-91bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:de:f3:d2:9b:28:aa:13:b1:25:1f:fa:af:
                    71:74:89:6b:d4:b7:14:69:32:30:ca:3f:86:20:97:
                    89:07:f8:fb:b0:fc:24:b9:13:7e:14:8d:fa:fa:18:
                    cc:76:52:a2:57:9f:76:2d:af:b8:aa:e9:ad:ff:bd:
                    36:cd:24:0d:0b:14:57:ff:91:7a:1c:5f:0a:89:c6:
                    79:91:b5:74:ec:8b:64:fc:09:ef:02:52:73:dd:37:
                    10:69:6e:ab:74:07:72:38:9e:e3:64:e0:32:26:71:
                    bb:4f:cc:1b:f9:cf:3f:d0:25:f4:9b:cd:e5:0a:78:
                    8e:59:c3:9b:1d:cc:2c:0a:63:5c:e8:ff:60:07:bc:
                    f5:af:27:15:da:b8:41:c6:a8:f7:bf:71:64:9e:b6:
                    f9:e9:5b:b6:76:d0:a0:f6:6e:55:14:f1:29:17:54:
                    1c:a8:d8:e4:23:d9:73:68:3e:9a:c9:86:80:e4:ff:
                    c3:43:84:ac:12:d6:9b:8d:da:48:99:71:a7:4a:9d:
                    1c:6b:86:d1:ac:86:97:6f:c4:4b:43:b9:4b:d9:66:
                    55:f9:4a:61:68:55:3f:84:c6:7b:50:97:5e:2c:8f:
                    aa:99:b7:65:d9:a7:9b:06:95:bc:9b:51:07:26:20:
                    7c:29:fc:f8:79:68:7f:80:9a:91:26:bf:d5:53:b1:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:DC:E6:82:E5:B3:07:B8:E6:1D:8F:A6:CD:10:6A:25:EA:EF:B0
            X509v3 Authority Key Identifier:
                keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/DB5DF87886EF11F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.8.0/22
                IPv6:
                  2403:6a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:25:b3:c3:15:62:2c:e0:cf:e1:fa:a6:28:aa:0a:e3:eb:
         26:56:33:b8:e3:96:4e:d2:8b:1e:a8:41:b8:9d:4d:6b:1c:9e:
         b5:e4:50:a3:54:6f:2d:cf:0a:42:f9:c6:5d:4d:b2:eb:97:27:
         04:c4:78:42:6f:0c:8c:30:83:fd:66:be:63:97:1b:f6:e7:70:
         92:2d:f9:06:60:3d:15:af:1c:dd:ed:8e:04:17:e6:92:18:c2:
         ec:8e:37:11:0c:5e:0d:2f:ff:b2:a8:ca:87:66:ce:e4:17:db:
         8c:66:69:8e:a7:5e:29:8b:98:eb:ae:d8:c4:c3:53:98:29:b0:
         8f:de:60:ef:fb:a0:b4:74:d5:66:22:c6:e6:1c:a9:98:2b:af:
         69:14:f3:7d:48:69:1d:79:2c:33:84:66:1a:ba:39:9a:0d:1f:
         fb:80:58:9a:13:0e:c0:14:e5:30:1d:70:5c:42:17:5b:b4:cb:
         62:ee:e5:f6:ed:4b:e7:f3:ec:a7:e3:ef:98:eb:9a:f9:87:f5:
         fc:56:b8:bb:33:bd:d4:12:17:9a:67:4f:2c:02:9a:eb:94:1e:
         63:ca:1a:95:76:0b:a4:85:2b:12:41:27:d5:2b:56:c6:00:c4:
         04:d1:bf:55:87:8d:e0:e9:22:f3:77:e9:ca:a3:b1:d2:25:79:
         41:4c:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:44:21 2026 by rpki-client