Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
File:                     C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (raw, json)
Hash identifier:          hEb9r0SyMUCejFpJwE7h//JZFP1oVGVdhMrn3LmWZgE=
Subject key identifier:   69:49:78:FE:35:43:4C:17:5E:86:F0:FB:13:E5:F8:80:B8:A6:10:9C
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       0802
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 22:27:00 +0000
ROA not before:           Tue 30 Jun 2026 22:27:00 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     36819
IP address blocks:        103.154.198.0/24 maxlen: 24
                          103.162.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E, serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: Jun 30 22:27:00 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4442b4-b598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:2e:68:86:24:df:42:70:74:a0:9a:ae:69:
                    3b:72:32:8f:21:de:f4:42:bf:16:46:60:2c:85:4d:
                    11:0a:0f:8a:a0:e2:02:5b:bc:16:31:96:fc:56:45:
                    c3:a0:b2:be:31:89:0a:14:60:ba:fd:3d:9e:1b:c4:
                    cb:26:b3:ab:4b:8b:2a:5b:c2:68:6c:64:44:5a:5e:
                    14:4d:6a:17:79:fd:05:29:ad:8b:cb:20:34:10:2f:
                    8a:b3:94:52:ee:96:7c:d1:6b:41:3e:91:95:e6:9d:
                    0f:54:06:1c:f8:85:36:b3:7e:93:25:d2:00:b6:78:
                    f9:ac:d8:73:3a:18:16:df:57:98:df:f2:ea:a5:e1:
                    15:c7:8a:27:d4:ef:ef:96:de:29:c3:2a:86:88:69:
                    65:69:1e:e8:2f:c9:d2:83:4c:c4:e0:0b:eb:59:d0:
                    22:8b:ce:22:87:9f:c1:b9:b3:f7:e9:e6:8b:02:73:
                    75:b3:7b:6f:db:75:f0:54:94:74:95:80:0c:ad:9e:
                    75:c6:b6:ed:7e:44:ba:7a:a7:35:8f:95:32:b3:41:
                    45:1a:c0:6b:a3:aa:ac:8e:3d:7d:7f:cc:b5:95:d7:
                    b9:73:a8:46:b4:f9:a7:30:4a:e4:85:3b:71:27:2c:
                    5a:6f:c3:47:a8:e4:d5:c0:14:3d:8c:94:f7:d4:4c:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:78:FE:35:43:4C:17:5E:86:F0:FB:13:E5:F8:80:B8:A6:10:9C
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/C562A08C34FC11EB9AA0EE7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.198.0/24
                  103.162.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ca:b4:49:f0:08:c2:17:61:bf:44:0c:46:77:74:5c:75:2b:
         6c:99:d5:43:77:73:93:59:df:50:d2:8c:af:3f:61:67:03:e9:
         be:e5:1a:c7:43:4c:01:bc:c7:b1:0a:de:f3:df:f8:bf:6a:47:
         95:d0:65:dd:26:35:27:d6:4b:8e:a7:76:35:f5:c0:f6:a6:4e:
         e2:75:b2:90:79:a5:63:d8:70:1e:81:74:e2:35:d1:12:5e:52:
         b9:85:fc:c6:76:84:e0:44:ad:29:59:be:ea:b3:da:9f:48:0b:
         eb:ab:1b:70:19:b0:e3:79:a0:bf:68:90:00:09:5c:d2:46:b2:
         6b:16:bd:32:37:23:3b:29:b2:d2:ae:d1:19:67:0e:4e:77:2b:
         3e:16:be:92:f0:01:da:06:ae:97:d4:82:f1:7c:77:29:12:27:
         81:62:02:00:cc:92:b3:a9:b1:f1:a5:82:62:15:d8:60:07:ea:
         f7:70:8d:2d:17:17:00:67:23:67:81:4c:ac:33:a3:31:2f:b5:
         a4:94:05:03:bf:4a:8f:8d:7d:57:3e:ac:46:f3:c4:ea:a4:0b:
         e2:bb:40:aa:d4:8f:34:d5:ee:3d:65:a6:c4:e0:98:f9:4e:bc:
         ac:d9:67:0f:12:de:e3:0a:2b:26:14:e4:11:ff:59:67:f3:c5:
         97:8b:27:8a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4MUUxMTAvBgNVBAUTKDZEQzBDNzAyOEFFQjNCM0IyNjYzMUY2OTI1NzA1MDBC
NjBFRDI3MTkwHhcNMjYwNjMwMjIyNzAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0NDJiNC1iNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqAuaIYk30JwdKCarmk7cjKPId70Qr8WRmAshU0RCg+KoOICW7wWMZb8VkXD
oLK+MYkKFGC6/T2eG8TLJrOrS4sqW8JobGREWl4UTWoXef0FKa2LyyA0EC+Ks5RS
7pZ80WtBPpGV5p0PVAYc+IU2s36TJdIAtnj5rNhzOhgW31eY3/LqpeEVx4on1O/v
lt4pwyqGiGllaR7oL8nSg0zE4AvrWdAii84ih5/BubP36eaLAnN1s3tv23XwVJR0
lYAMrZ51xrbtfkS6eqc1j5Uys0FFGsBro6qsjj19f8y1lde5c6hGtPmnMErkhTtx
Jyxab8NHqOTVwBQ9jJT31EzI5QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGlJeP41
Q0wXXobw+xPl+IC4phCcMB8GA1UdIwQYMBaAFG3AxwKK6zs7JmMfaSVwUAtg7ScZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgxRS85MUM5NTU5QzM0
RkExMUVCOTg5NDFFN0JDNEY5QUUwMi9iY0RIQW9yck96c21ZeDlwSlhCUUMyRHRK
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JjREhBb3JyT3pzbVl4OXBKWEJRQzJEdEp4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E4MUUvOTFDOTU1OUMzNEZBMTFFQjk4OTQxRTdCQzRGOUFFMDIvQzU2MkEwOEMz
NEZDMTFFQjlBQTBFRTdEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ5rGAwQAZ6LjMA0GCSqGSIb3DQEBCwUAA4IBAQBDyrRJ8AjCF2G/
RAxGd3RcdStsmdVDd3OTWd9Q0oyvP2FnA+m+5RrHQ0wBvMexCt7z3/i/akeV0GXd
JjUn1kuOp3Y19cD2pk7idbKQeaVj2HAegXTiNdESXlK5hfzGdoTgRK0pWb7qs9qf
SAvrqxtwGbDjeaC/aJAACVzSRrJrFr0yNyM7KbLSrtEZZw5Odys+Fr6S8AHaBq6X
1ILxfHcpEieBYgIAzJKzqbHxpYJiFdhgB+r3cI0tFxcAZyNngUysM6MxL7WklAUD
v0qPjX1XPqxG88TqpAviu0Cq1I801e49ZabE4Jj5Trys2WcPEt7jCismFOQR/1ln
88WXiyeK
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:05 2026 by rpki-client