Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
File:                     F63AE024CFE111EE86A9477EC4F9AE02.roa (raw, json)
Hash identifier:          O33e2x2bsJnVnZYzmgRVq6OSe4Uls0Q88mgSA9qXJfc=
Subject key identifier:   84:93:D1:B7:95:77:36:A2:D7:6E:B2:23:34:6A:1E:60:BD:E7:32:FB
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       01E0
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:02:44 +0000
ROA not before:           Thu 07 Aug 2025 04:41:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152151
IP address blocks:        103.62.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Aug  7 04:41:42 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a438f4-8070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:7b:4e:4a:1e:1e:0f:32:95:be:78:4b:a5:
                    a0:40:31:2f:10:d6:fa:f4:cf:3f:bb:4a:21:2a:d3:
                    23:6c:01:e6:c0:d7:2e:df:71:66:e1:8f:c4:ca:92:
                    d1:4c:30:dc:40:0c:6d:1c:9c:12:b5:7c:69:64:84:
                    0a:66:e5:ea:8f:71:31:12:4e:14:5a:71:f2:2d:51:
                    51:85:6a:38:a6:c7:aa:c2:72:15:24:dd:03:99:57:
                    5d:4e:7c:70:bf:a5:d1:b2:66:6f:a2:1d:1b:43:08:
                    a8:22:ff:5d:10:63:6e:e9:f8:dc:74:d4:30:ec:da:
                    07:13:6b:c2:da:c4:1c:6e:66:e1:75:c1:a4:27:80:
                    ab:75:47:27:58:fb:b3:2b:ca:ff:26:aa:78:82:49:
                    c2:da:62:ab:9d:2c:42:d3:33:31:a8:ea:81:2b:65:
                    8d:e1:f4:37:b3:1d:fd:a8:60:cf:fd:19:97:d4:d9:
                    0e:72:bd:f6:e9:61:2e:2b:17:12:b9:b8:10:08:64:
                    a5:44:97:5e:23:5d:e2:a0:bd:73:17:16:e7:f7:27:
                    ed:91:7c:78:74:e0:b1:09:35:24:2c:8e:0a:ff:71:
                    f7:72:c9:cf:d7:8a:f1:82:13:84:ce:e2:81:5a:bc:
                    31:b4:84:71:7f:cf:02:83:1a:7d:04:89:5f:50:26:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:D1:B7:95:77:36:A2:D7:6E:B2:23:34:6A:1E:60:BD:E7:32:FB
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:2f:84:b4:13:ec:a3:9b:c0:29:cc:0b:e9:4a:e4:4e:f5:
         e8:be:db:13:1e:9a:3c:9c:5b:10:d2:f5:e5:72:47:ea:b4:44:
         eb:85:de:04:cf:44:bc:9e:43:b2:31:fa:ef:1b:6f:f3:ad:90:
         83:9b:2d:e6:2d:25:79:68:fe:39:c9:cc:9a:4a:e6:fb:29:10:
         a0:29:91:84:7f:86:25:b6:26:a4:d7:6c:a7:4e:2d:95:7f:a2:
         12:74:ae:cc:7f:42:d4:22:42:4d:09:68:48:7a:3a:12:c1:7b:
         1e:b8:18:98:6f:24:82:2b:e8:bc:4e:f7:27:20:0b:15:fb:a4:
         11:cb:28:01:8b:a4:b7:da:63:0e:13:38:ed:23:30:16:cf:2c:
         e9:8a:70:8e:5f:dc:ab:cf:fa:f6:ad:61:28:77:76:a4:4a:fc:
         65:ba:02:aa:08:52:e9:83:b0:7f:4b:64:3f:c1:a0:83:d8:34:
         a4:68:de:aa:ff:d6:c7:08:eb:66:7f:2c:bb:4f:b3:4b:d6:5e:
         f7:e0:5c:5d:6b:44:b4:e9:f1:cc:3b:8b:c4:65:79:5a:ae:aa:
         6f:28:14:5d:4c:01:34:d2:ad:79:41:92:88:dc:5b:24:59:ff:
         b0:a4:ae:dd:d0:3e:72:a2:0c:f8:d7:08:66:e8:6b:aa:47:f2:
         1d:7e:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:20 2026 by rpki-client