Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa
File:                     62CCFF308C7211EB98A6DD43C4F9AE02.roa (raw, json)
Hash identifier:          l6AU9MxLeYtTJT1Gg9hXsmqoACZsqQ18yneyI+RgJt8=
Subject key identifier:   55:D6:F5:0B:56:4A:08:C3:ED:C1:76:A6:59:7F:E8:FC:BD:25:1C:F7
Certificate issuer:       /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial:       06EC
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa
Signing time:             Wed 18 Mar 2026 22:29:26 +0000
ROA not before:           Wed 18 Mar 2026 22:29:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138689
IP address blocks:        103.136.164.0/22 maxlen: 22
                          103.136.164.0/24 maxlen: 24
                          103.136.165.0/24 maxlen: 24
                          103.136.166.0/24 maxlen: 24
                          103.136.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
                          rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
        Validity
            Not Before: Mar 18 22:29:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bb2746-4aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:66:58:f8:c7:a6:d8:04:2d:98:49:7e:fc:
                    ce:31:56:e6:a6:93:45:c2:9f:9f:b8:fe:2f:ff:24:
                    e1:1b:1c:8e:19:b2:dd:13:1c:e5:55:67:98:2a:3a:
                    73:36:4e:8b:b0:90:be:b6:a4:3f:e4:41:21:4f:4c:
                    ab:96:35:75:19:03:d7:19:2c:f3:f5:d3:5c:3c:d8:
                    13:94:42:fb:eb:c1:7d:c9:b6:45:d8:45:68:00:c9:
                    c4:f6:14:f0:19:1f:1c:96:87:47:c7:e3:e2:af:fd:
                    c1:68:a4:c6:ba:bb:32:45:c7:8b:0d:56:3e:62:31:
                    2a:47:c4:88:14:4a:0f:fb:bd:b9:b8:ac:84:d1:23:
                    cb:54:69:a0:8b:3f:92:07:4e:3f:8c:90:b4:d5:1a:
                    0c:03:40:f3:32:e4:49:04:c5:b5:a0:b7:69:74:05:
                    bf:0f:0c:99:06:fa:c8:9e:bf:8d:12:9c:97:19:09:
                    34:bd:34:70:cf:4a:b6:01:dd:6d:76:26:e2:cf:02:
                    a5:93:de:8b:98:33:d9:1d:ba:b8:a1:62:8a:60:2e:
                    2f:77:38:ff:cd:05:49:9c:f3:ea:55:f4:66:cd:4a:
                    98:82:9a:eb:c9:c8:b3:16:3f:a4:7a:36:94:97:e4:
                    80:b3:67:e3:e9:16:e4:bc:f2:b9:ec:d8:79:ee:83:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D6:F5:0B:56:4A:08:C3:ED:C1:76:A6:59:7F:E8:FC:BD:25:1C:F7
            X509v3 Authority Key Identifier:
                keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/62CCFF308C7211EB98A6DD43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:3f:79:0f:5d:ae:0f:18:ee:89:85:de:eb:53:f5:05:44:65:
         de:6e:db:b7:09:32:2a:4c:0a:85:02:02:56:ca:61:d8:98:8d:
         65:91:db:01:39:fe:41:f9:60:b2:35:10:fb:cc:3d:35:29:c5:
         b1:fd:69:1c:16:07:de:89:12:d3:32:b1:9d:bd:39:73:98:f7:
         6e:f9:d8:61:ec:c7:cf:88:12:9e:c7:f3:ce:00:8c:3c:99:05:
         96:a5:4d:15:eb:52:db:4e:ef:80:af:e4:85:67:d5:6b:2e:55:
         72:0d:10:69:b0:32:d7:11:30:f5:40:b6:bb:4e:12:8c:3f:5b:
         82:e4:6d:52:f6:ab:84:7f:08:84:23:4d:47:8c:b2:d0:c5:b4:
         a6:52:98:ac:ee:b9:7c:f6:92:63:00:3c:9a:61:a6:fc:34:3d:
         4d:47:ca:e5:2b:59:10:89:af:18:a2:b6:78:aa:28:9b:c3:2f:
         0f:51:69:3a:6c:dd:82:61:ac:a6:b8:03:1b:0c:c9:41:a2:17:
         79:3c:9a:ce:47:cd:ae:09:ce:97:4f:f3:7d:9d:7e:eb:90:62:
         21:18:47:46:83:fd:a5:46:df:f8:c5:d8:d0:40:77:d1:05:1b:
         15:01:7f:eb:57:73:bc:63:ae:bd:21:14:97:c4:a8:6c:d8:45:
         28:01:14:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1
NDFBNENDNzcwHhcNMjYwMzE4MjIyOTI2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJiMjc0Ni00YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4JmWPjHptgELZhJfvzOMVbmppNFwp+fuP4v/yThGxyOGbLdExzlVWeYKjpz
Nk6LsJC+tqQ/5EEhT0yrljV1GQPXGSzz9dNcPNgTlEL768F9ybZF2EVoAMnE9hTw
GR8clodHx+Pir/3BaKTGursyRceLDVY+YjEqR8SIFEoP+725uKyE0SPLVGmgiz+S
B04/jJC01RoMA0DzMuRJBMW1oLdpdAW/DwyZBvrInr+NEpyXGQk0vTRwz0q2Ad1t
dibizwKlk96LmDPZHbq4oWKKYC4vdzj/zQVJnPPqVfRmzUqYgprrycizFj+kejaU
l+SAs2fj6RbkvPK57Nh57oPNVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFXW9QtW
SgjD7cF2pll/6Py9JRz3MB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD
NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ4MDMvOTc3RDczNjA4QzcwMTFFQkFFQTExMzQxQzRGOUFFMDIvNjJDQ0ZGMzA4
QzcyMTFFQjk4QTZERDQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4ikMA0GCSqGSIb3DQEBCwUAA4IBAQDaP3kPXa4PGO6Jhd7rU/UF
RGXebtu3CTIqTAqFAgJWymHYmI1lkdsBOf5B+WCyNRD7zD01KcWx/WkcFgfeiRLT
MrGdvTlzmPdu+dhh7MfPiBKex/POAIw8mQWWpU0V61LbTu+Ar+SFZ9VrLlVyDRBp
sDLXETD1QLa7ThKMP1uC5G1S9quEfwiEI01HjLLQxbSmUpis7rl89pJjADyaYab8
ND1NR8rlK1kQia8YorZ4qiibwy8PUWk6bN2CYaymuAMbDMlBohd5PJrOR82uCc6X
T/N9nX7rkGIhGEdGg/2lRt/4xdjQQHfRBRsVAX/rV3O8Y669IRSXxKhs2EUoARSZ
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:23 2026 by rpki-client