Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
File:                     D6CC557C6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier:          FJ+repPrmYSlijYjI+MRSa3mhNIvAfvhuyQif/Z3/Zo=
Subject key identifier:   2D:38:1B:21:7B:C3:06:0C:6C:91:FC:40:0B:B3:CC:6B:07:6D:4B:4B
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       01C4
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:23:34 +0000
ROA not before:           Tue 29 Jul 2025 04:41:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55884
IP address blocks:        103.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 29 04:41:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a413a6-5161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:2e:b0:7b:9f:08:c6:12:4b:0e:4d:af:91:
                    ba:0f:86:b2:50:53:d4:7f:59:78:ca:6e:80:d6:66:
                    8d:6f:c4:f5:e9:44:85:df:4d:9f:f8:9a:90:a6:65:
                    96:0e:f4:42:c5:91:29:aa:6e:cb:94:87:38:8b:b2:
                    76:43:0a:df:54:c0:ba:1a:0e:b6:49:a4:8d:79:3e:
                    05:9c:81:16:10:6f:b4:82:f7:5e:c8:4b:85:f3:e2:
                    d7:84:87:9e:b6:c7:27:f6:28:aa:d7:09:e3:fc:01:
                    43:9f:71:b7:e3:20:a1:5c:fb:6f:a3:f0:55:6f:69:
                    1e:87:bb:ed:bf:48:ae:8b:7a:93:d5:93:d1:2d:63:
                    3c:b7:f7:6f:50:81:c4:9d:82:b7:94:49:3f:23:34:
                    27:63:b9:b5:fd:1e:bb:ca:f5:55:b8:36:3a:9f:74:
                    13:aa:5a:eb:94:cc:9d:29:c8:9a:57:4c:82:2b:8f:
                    da:d3:0e:dc:c2:85:59:05:cc:05:a0:e3:04:fb:69:
                    73:bf:ad:50:b0:af:7a:db:e1:3a:aa:a6:a6:cb:e8:
                    85:23:59:de:c2:6f:06:3f:09:8e:a5:62:0a:7b:78:
                    ce:c4:cd:29:8e:5d:b5:83:87:08:42:8a:18:48:dc:
                    be:a6:e9:93:fd:26:0e:d0:31:a3:bc:e7:22:fd:dd:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:1B:21:7B:C3:06:0C:6C:91:FC:40:0B:B3:CC:6B:07:6D:4B:4B
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:b6:76:46:8c:cc:15:3e:25:cb:da:2b:04:fb:7e:b0:20:
         35:e6:38:72:68:bb:b6:f0:70:0b:1f:45:3a:48:3d:cc:20:c5:
         a4:2a:66:26:9a:29:3c:3e:b5:4f:4b:f4:c8:d7:bf:19:57:7c:
         e1:87:ee:35:6c:22:19:c7:59:44:f0:21:f2:96:fe:e5:05:ed:
         0e:86:e7:fd:d3:48:bd:1f:c9:a0:bb:04:5c:e1:81:ab:76:71:
         de:27:5d:cf:07:2d:23:3c:42:1f:f9:ef:f2:e7:9c:26:f5:02:
         bf:9c:9c:d5:a7:99:68:98:5a:77:af:5f:2d:50:a4:2a:bb:7c:
         37:54:8f:30:80:3d:88:2a:d2:cd:09:01:7e:a7:7b:42:d3:2f:
         f2:74:1f:32:3d:bc:51:37:93:18:76:84:58:60:39:95:f5:b6:
         9e:60:30:be:44:b3:83:e6:4f:72:c9:45:94:31:80:45:73:d9:
         31:20:90:50:e4:ea:6e:b0:a4:51:02:2d:94:b3:28:9a:b3:fa:
         41:34:f8:db:77:0d:3f:0b:1c:62:06:3d:f1:83:00:09:20:3f:
         a0:ed:1e:58:ec:90:0a:43:b8:8b:b7:37:41:01:0d:2b:43:8b:
         88:94:b5:49:69:1e:35:99:bf:f1:eb:e2:b7:40:41:ec:90:93:
         61:a1:10:b1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0
Mjc4N0FGODMwHhcNMjUwNzI5MDQ0MTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTNhNi01MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzsUusHufCMYSSw5Nr5G6D4ayUFPUf1l4ym6A1maNb8T16USF302f+JqQpmWW
DvRCxZEpqm7LlIc4i7J2QwrfVMC6Gg62SaSNeT4FnIEWEG+0gvdeyEuF8+LXhIee
tscn9iiq1wnj/AFDn3G34yChXPtvo/BVb2keh7vtv0iui3qT1ZPRLWM8t/dvUIHE
nYK3lEk/IzQnY7m1/R67yvVVuDY6n3QTqlrrlMydKciaV0yCK4/a0w7cwoVZBcwF
oOME+2lzv61QsK962+E6qqamy+iFI1newm8GPwmOpWIKe3jOxM0pjl21g4cIQooY
SNy+pumT/SYO0DGjvOci/d39HwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC04GyF7
wwYMbJH8QAuzzGsHbUtLMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF
MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI4MTMvQTg1MjQzNkE2RTJCMTFFRThERDY2NzM1QzRGOUFFMDIvRDZDQzU1N0M2
RTJDMTFFRUJGRTI4NjI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZz1gMA0GCSqGSIb3DQEBCwUAA4IBAQBvdbZ2RozMFT4ly9orBPt+
sCA15jhyaLu28HALH0U6SD3MIMWkKmYmmik8PrVPS/TI178ZV3zhh+41bCIZx1lE
8CHylv7lBe0Ohuf900i9H8mguwRc4YGrdnHeJ13PBy0jPEIf+e/y55wm9QK/nJzV
p5lomFp3r18tUKQqu3w3VI8wgD2IKtLNCQF+p3tC0y/ydB8yPbxRN5MYdoRYYDmV
9baeYDC+RLOD5k9yyUWUMYBFc9kxIJBQ5OpusKRRAi2Usyias/pBNPjbdw0/Cxxi
Bj3xgwAJID+g7R5Y7JAKQ7iLtzdBAQ0rQ4uIlLVJaR41mb/x6+K3QEHskJNhoRCx
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:45 2026 by rpki-client