Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa
File:                     D65601C8861C11F188AD997381A30FBC.roa (raw, json)
Hash identifier:          WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=
Subject key identifier:   BA:DB:E6:38:8A:E3:58:9A:91:7D:81:18:65:E1:B6:9E:38:F4:D0:FB
Certificate issuer:       /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial:       0ABB
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa
Signing time:             Wed 22 Jul 2026 22:35:24 +0000
ROA not before:           Wed 22 Jul 2026 22:35:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     64095
IP address blocks:        203.80.62.0/23 maxlen: 23
                          203.80.62.0/24 maxlen: 24
                          203.80.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
        Validity
            Not Before: Jul 22 22:35:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a6145ac-7d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:fc:0c:dd:3e:40:eb:ef:4f:d5:69:06:56:
                    73:21:56:74:7f:0c:41:1a:f8:09:60:1c:28:09:b1:
                    c1:6a:66:c9:c0:c6:ef:15:0a:2e:28:e4:79:89:72:
                    3f:d9:96:53:7c:e5:fd:b0:16:35:dc:48:3c:97:58:
                    32:b1:f8:3f:52:f9:f2:fc:14:7a:a7:02:f5:32:3c:
                    68:ff:75:0b:25:39:c1:8b:9b:a0:1f:e9:bd:11:a7:
                    6e:c9:11:b9:fd:bc:73:9a:2c:01:a0:56:c0:8d:c7:
                    de:9b:79:a4:36:62:a1:a0:b7:ad:77:dc:d0:c8:28:
                    ba:e2:d2:10:f5:34:e2:e8:2c:83:1a:2d:98:cd:f1:
                    b0:61:c9:b6:42:ee:36:5c:7a:80:72:1a:2b:5d:6c:
                    10:0e:4a:9e:cc:b4:33:6f:49:97:ed:0b:60:2b:79:
                    69:7b:9a:82:29:2e:32:7b:2f:c2:08:46:d7:8d:52:
                    cd:20:10:42:99:f0:28:8c:0f:99:1d:c7:fd:8e:aa:
                    0f:79:61:3d:43:2d:8e:36:e1:62:a5:e3:e6:9a:c4:
                    80:2e:dd:88:45:d3:d7:f4:7f:4e:eb:86:ba:95:67:
                    bf:1c:5c:29:a0:81:ce:2f:97:be:9a:61:9f:09:79:
                    67:cc:bf:30:de:37:d5:c4:30:5f:81:dd:51:b3:48:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:E6:38:8A:E3:58:9A:91:7D:81:18:65:E1:B6:9E:38:F4:D0:FB
            X509v3 Authority Key Identifier:
                keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/D65601C8861C11F188AD997381A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:3e:87:21:78:42:13:8b:76:d9:83:7b:2a:de:85:80:79:
         e6:7d:fd:36:3d:4c:68:f1:68:15:17:cf:80:ea:87:c2:50:f9:
         2f:f6:c4:b6:31:e7:ce:b7:ca:a8:93:50:a6:11:d6:9e:e2:59:
         8c:92:eb:21:76:5c:2b:d7:90:86:31:19:86:c5:f0:7c:ab:b4:
         00:6b:7f:89:5c:74:93:cf:10:ab:48:17:8f:4b:5b:f4:86:2f:
         3e:0e:7b:43:5d:03:cf:68:20:00:d6:06:ab:56:04:a2:ca:f7:
         bb:ba:fa:ad:7d:36:6b:ac:0d:c1:c7:db:28:2e:70:b1:4d:0d:
         77:e8:3d:54:3c:d9:de:e2:d7:74:fa:17:87:b7:f3:1f:b1:77:
         f4:05:6f:91:be:7f:86:67:5f:e3:02:b6:3b:b7:20:c0:99:68:
         91:df:e4:92:af:6a:c0:57:c7:9d:22:0e:64:7a:ed:ef:c3:5e:
         b1:a5:18:14:a7:a5:13:15:4d:68:03:7d:6e:a4:4e:9c:0b:6b:
         9c:79:fa:62:60:c5:64:77:df:6e:cd:e1:e0:12:b3:2a:eb:f8:
         81:2e:b3:1a:7c:53:0f:f1:9c:b4:8d:81:d6:30:bf:9c:61:b7:
         c3:b0:dd:3a:59:1b:d7:c7:92:95:80:e3:31:a3:ab:88:7a:7a:
         ce:40:84:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2
QzVGRjkxQTQwHhcNMjYwNzIyMjIzNTI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxNDVhYy03ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxB38DN0+QOvvT9VpBlZzIVZ0fwxBGvgJYBwoCbHBambJwMbvFQouKOR5iXI/
2ZZTfOX9sBY13Eg8l1gysfg/Uvny/BR6pwL1Mjxo/3ULJTnBi5ugH+m9EaduyRG5
/bxzmiwBoFbAjcfem3mkNmKhoLetd9zQyCi64tIQ9TTi6CyDGi2YzfGwYcm2Qu42
XHqAchorXWwQDkqezLQzb0mX7QtgK3lpe5qCKS4yey/CCEbXjVLNIBBCmfAojA+Z
Hcf9jqoPeWE9Qy2ONuFipePmmsSALt2IRdPX9H9O64a6lWe/HFwpoIHOL5e+mmGf
CXlnzL8w3jfVxDBfgd1Rs0iMeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLrb5jiK
41iakX2BGGXhtp449ND7MB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0
MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkEzQkUvODlCNEY2Nzg4NDE5MTFFQTk4RkYwNjM3QzRGOUFFMDIvRDY1NjAxQzg4
NjFDMTFGMTg4QUQ5OTczODFBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBy1A+MA0GCSqGSIb3DQEBCwUAA4IBAQAD0z6HIXhCE4t22YN7Kt6F
gHnmff02PUxo8WgVF8+A6ofCUPkv9sS2MefOt8qok1CmEdae4lmMkushdlwr15CG
MRmGxfB8q7QAa3+JXHSTzxCrSBePS1v0hi8+DntDXQPPaCAA1garVgSiyve7uvqt
fTZrrA3Bx9soLnCxTQ136D1UPNne4td0+heHt/MfsXf0BW+Rvn+GZ1/jArY7tyDA
mWiR3+SSr2rAV8edIg5keu3vw16xpRgUp6UTFU1oA31upE6cC2ucefpiYMVkd99u
zeHgErMq6/iBLrMafFMP8Zy0jYHWML+cYbfDsN06WRvXx5KVgOMxo6uIenrOQIQw
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:09 2026 by rpki-client