Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/62A413B2D23811EFA34C3663C4F9AE02.roa
File:                     62A413B2D23811EFA34C3663C4F9AE02.roa (raw, json)
Hash identifier:          nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=
Subject key identifier:   31:1A:6F:8A:33:A1:C9:1F:67:A9:D2:71:8E:05:3B:90:78:DF:D4:28
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       01F6
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/62A413B2D23811EFA34C3663C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:17:36 +0000
ROA not before:           Tue 29 Jul 2025 04:41:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152672
IP address blocks:        103.158.74.0/23 maxlen: 24
                          2401:1da0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jul 29 04:41:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4123f-14af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:0b:59:9d:1b:4a:0b:55:2d:99:8c:3f:d3:
                    6e:96:3c:b0:93:6b:53:a5:10:5c:b7:86:0c:96:75:
                    c5:a3:a7:55:bd:a4:cf:f6:ac:00:5f:05:b4:83:e0:
                    ab:ee:1c:e1:3d:55:da:e1:ee:be:56:78:4a:24:1b:
                    3e:ce:42:8c:44:7c:cb:16:ef:32:8f:ba:90:c1:ce:
                    5d:d3:ce:78:6c:df:0c:c0:a0:be:57:cd:71:eb:e4:
                    a7:d6:8a:6f:25:66:59:75:08:87:66:88:f2:54:07:
                    0d:b1:b6:20:c3:07:46:71:64:9a:3d:d0:ac:0f:02:
                    67:4f:80:2f:22:7f:d2:b7:3d:36:05:8f:35:79:5e:
                    a5:03:df:d1:12:69:0f:e6:40:d9:a2:2b:1a:64:b9:
                    90:98:23:17:1a:86:e8:99:fc:4e:39:6c:5f:4d:cf:
                    19:47:22:d8:a5:e4:04:d1:58:f5:06:6e:19:6a:e5:
                    40:28:09:5c:5c:ac:46:c2:16:00:94:22:ae:15:ab:
                    c6:d0:8e:c1:0e:c2:a8:9e:b2:40:c7:56:05:9f:d5:
                    34:6d:63:8c:05:19:34:a4:f8:49:c1:a2:d7:ac:36:
                    84:90:77:6a:77:e9:49:06:e6:47:c2:09:2d:99:01:
                    c3:e6:e0:29:4f:ee:7d:55:7a:30:85:4f:c3:b8:a3:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:6F:8A:33:A1:C9:1F:67:A9:D2:71:8E:05:3B:90:78:DF:D4:28
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/62A413B2D23811EFA34C3663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.74.0/23
                IPv6:
                  2401:1da0::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:fc:73:b4:7e:68:87:f8:2e:a9:e8:f8:6a:b3:d2:fe:d0:
         d7:97:93:9e:58:6a:b8:39:e1:99:9e:29:1e:bb:fb:3f:65:87:
         bf:b4:dc:bd:69:59:49:72:d3:61:50:7a:44:38:74:01:00:46:
         04:2f:25:04:73:72:57:e1:73:80:64:6a:a9:a6:68:73:b8:12:
         23:15:28:2a:b2:a5:56:90:31:60:ef:7c:28:62:a9:a4:e7:d7:
         9b:31:a5:35:38:c2:6b:f8:0e:fc:ec:9d:c0:f6:cf:fe:f9:19:
         c6:50:5b:6d:48:37:ed:77:da:60:9e:94:da:3b:f6:c5:95:a4:
         02:0f:97:87:e1:d4:26:4b:af:36:42:b5:c3:04:e8:83:1c:af:
         5f:a5:33:0a:1f:f8:02:7b:b7:cb:2f:3b:5b:fa:ac:e7:89:97:
         6a:f9:1f:0f:9d:f5:a8:47:9f:c4:a4:bb:9e:be:cb:9a:74:3b:
         9d:b5:d2:b9:68:20:70:80:d9:9c:c9:cf:ad:e1:97:87:4c:b1:
         2d:3e:cd:41:e4:7b:fb:21:51:00:05:d8:28:e9:81:b3:b6:20:
         8a:26:8f:5e:26:e0:4a:52:99:3b:9f:f6:3a:ae:d2:bc:49:3e:
         5d:8d:ae:13:37:35:fc:70:16:56:c1:04:3e:82:7d:34:2b:f3:
         30:8c:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:00:48 2026 by rpki-client