Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/F2E707C4CB2D11E6B15E0480C4F9AE02.roa
File:                     F2E707C4CB2D11E6B15E0480C4F9AE02.roa (raw, json)
Hash identifier:          CiMRetgqfOHyT+t0oT0VnFidFPg4QE9lc+5bTN+xNPA=
Subject key identifier:   70:09:B0:A2:3A:EC:BA:C6:BB:B5:69:4E:6F:A9:2C:51:E8:8B:0E:B3
Certificate issuer:       /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
Certificate serial:       1DB1
Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/F2E707C4CB2D11E6B15E0480C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:29:26 +0000
ROA not before:           Fri 22 Aug 2025 16:24:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     63998
IP address blocks:        103.61.8.0/22 maxlen: 22
                          103.61.8.0/22 maxlen: 24
                          103.61.8.0/22 maxlen: 30
                          103.61.8.0/23 maxlen: 23
                          103.61.8.0/24 maxlen: 24
                          103.61.9.0/24 maxlen: 24
                          103.61.10.0/23 maxlen: 23
                          103.61.10.0/24 maxlen: 24
                          103.61.11.0/24 maxlen: 24
                          2403:6a80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl
                          rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7601 (0x1db1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF
        Validity
            Not Before: Aug 22 16:24:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42316-255f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:5a:26:0b:fd:01:d2:14:f8:24:e3:21:2a:
                    41:72:06:c0:b9:58:63:9c:eb:43:41:d2:ee:05:0b:
                    9c:49:4f:fe:4d:12:aa:13:b0:e0:db:d6:70:f7:e8:
                    89:4c:15:be:5c:67:b5:07:8d:4b:67:86:b7:82:e4:
                    79:1b:ae:75:0e:82:c3:de:15:17:ef:a5:02:98:3d:
                    ef:cb:3d:8a:0e:86:25:f0:fc:07:42:77:5a:e3:3c:
                    8d:8d:23:14:56:12:8d:bb:99:44:0f:b6:c6:b5:10:
                    46:04:db:d0:c2:f3:60:3d:18:6f:53:61:d1:21:78:
                    7f:4e:50:4a:dd:31:8c:e6:18:26:fc:76:49:19:f2:
                    13:82:bc:ba:2b:d4:b2:56:b2:7b:61:59:33:a5:4e:
                    2f:ba:8c:38:60:43:68:06:98:2c:91:e0:42:0e:73:
                    6e:ff:1f:b2:22:c2:f4:98:50:e6:f7:d3:e5:a1:0f:
                    e2:3e:05:17:e1:57:d8:34:c1:8a:8c:ff:46:44:b2:
                    66:1c:72:ed:64:eb:5c:6f:06:90:ad:c8:0a:b8:5e:
                    27:f2:35:f9:08:ae:af:c9:db:2b:22:bf:59:16:c0:
                    59:77:37:58:a8:14:c1:cb:b3:d8:62:40:75:0c:4c:
                    06:aa:9e:d5:61:5d:5e:4a:e9:ac:60:2e:d5:83:9f:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:B0:A2:3A:EC:BA:C6:BB:B5:69:4E:6F:A9:2C:51:E8:8B:0E:B3
            X509v3 Authority Key Identifier:
                keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/F2E707C4CB2D11E6B15E0480C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.8.0/22
                IPv6:
                  2403:6a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:b1:97:a3:c1:8a:21:32:d1:02:c5:17:97:ed:3d:15:35:b7:
         1f:01:ae:35:11:df:2f:8f:9b:bb:e9:b0:4f:e6:69:35:7c:b9:
         13:df:c1:0a:0d:77:29:a5:e6:dc:3c:d9:a2:24:68:64:e0:91:
         e1:dd:7d:93:2b:d8:98:36:f5:6f:4a:e3:12:58:68:b7:11:75:
         2b:45:47:04:55:1b:b1:35:bf:94:88:40:59:3a:4e:1f:4a:f9:
         99:0a:82:21:98:0c:cc:eb:c6:49:fb:16:39:35:99:4b:39:02:
         a9:ad:98:a5:e4:4c:26:5a:e7:89:c6:94:72:70:3a:11:a7:d0:
         77:10:1c:3f:26:2d:ab:f3:92:df:7e:93:47:91:8b:02:18:0b:
         7b:a3:17:51:78:c5:01:8f:f1:f9:0c:f6:df:fa:62:c2:28:4e:
         75:9b:11:f1:0a:7c:91:5b:e7:11:d5:b2:12:12:b7:4e:54:05:
         f2:f9:2d:8c:d5:48:bf:bf:b1:bc:86:b0:ca:fd:4e:4a:a5:23:
         e0:b6:35:fd:df:49:a6:9d:c6:c9:ae:1d:21:23:7f:d1:3b:0c:
         83:cf:42:df:40:78:91:7e:e2:a7:27:61:2f:22:b0:4a:94:76:
         79:30:22:71:e4:be:ad:a0:8d:65:24:71:51:de:40:65:a5:13:
         e6:a6:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:33 2026 by rpki-client