Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa
File:                     8889F4E484A711EBB701E773C4F9AE02.roa (raw, json)
Hash identifier:          WVbnZCcjKCOI4BnHaLUm3JaokyLeN1xidwXdVb9jyyU=
Subject key identifier:   9E:5A:71:08:72:FA:EE:DA:7E:44:B7:26:07:D9:80:68:FB:59:82:8C
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       0760
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa
Signing time:             Fri 28 Aug 2026 22:43:04 +0000
ROA not before:           Fri 28 Aug 2026 22:43:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134680
IP address blocks:        103.62.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Aug 28 22:43:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a920ef8-312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:7a:23:a7:18:e3:4c:b1:c2:80:45:66:8c:
                    83:44:b8:2a:bc:c5:38:e7:dc:b7:86:ca:3c:b9:ec:
                    24:ab:cf:bc:d5:ca:8d:70:d5:d1:3b:49:a3:c1:45:
                    24:2e:d7:31:f8:2e:46:a8:04:27:78:61:c8:f7:1b:
                    2d:ac:11:9d:16:b8:ea:34:50:29:a9:ae:64:1a:c8:
                    98:c8:0e:dd:99:c0:f4:d6:62:18:71:8a:2f:49:4e:
                    dd:1b:21:dd:e8:7a:f9:01:7c:ae:6e:e1:a5:0a:c0:
                    c6:11:aa:f3:b5:c6:16:9c:cf:17:0c:13:12:63:cc:
                    48:8b:e5:4a:26:6f:46:fb:a5:94:66:1d:29:3d:13:
                    ec:67:1d:0c:e9:32:d1:94:9b:e1:50:0c:2a:6c:fd:
                    bb:4d:fa:a1:49:24:8a:3e:25:90:f4:ad:05:04:a1:
                    3f:c3:02:d6:7a:9b:78:22:d4:d1:d8:16:e9:d8:d6:
                    a9:e4:c3:3e:a6:c9:09:c2:9f:7b:b5:f3:45:2f:15:
                    33:5e:0f:9a:75:eb:66:b7:d9:81:d9:2f:30:bb:9d:
                    39:f2:6c:a8:63:9c:42:9a:e3:93:99:3d:34:f6:6e:
                    8a:f6:bb:68:1f:fc:ae:b6:16:8b:cb:30:cc:60:8b:
                    36:7a:7f:b7:ff:88:0a:0d:e3:d4:f4:3b:c1:d2:61:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:71:08:72:FA:EE:DA:7E:44:B7:26:07:D9:80:68:FB:59:82:8C
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/8889F4E484A711EBB701E773C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:f9:78:d1:03:f8:31:fa:06:4b:45:45:fa:17:f4:b4:b2:04:
         aa:92:cc:c7:34:03:41:42:b9:b1:db:04:89:79:a8:4b:2c:5c:
         1f:58:cf:48:40:95:4f:36:21:6a:1e:dd:a8:38:05:5e:29:10:
         d6:16:21:d7:d8:64:7e:0f:f2:e9:c9:38:0b:b3:00:e0:0f:78:
         f2:3c:9c:3b:dc:3c:10:89:89:cd:83:f0:46:94:68:05:7d:d5:
         02:37:71:cd:76:e0:db:9b:91:2e:4b:b5:f1:e1:dd:78:67:63:
         3e:34:dd:23:1e:df:61:5b:1f:f9:d0:c2:bc:43:44:c3:f0:ef:
         4b:29:b4:95:e9:1e:b1:73:7f:25:ca:29:73:95:2b:c6:66:9e:
         75:ea:05:68:4b:79:66:9e:aa:9a:29:1a:2d:c7:50:38:2e:8c:
         0c:56:a5:a1:9b:97:b5:60:70:e6:0b:73:52:49:8f:c1:b8:a2:
         9d:67:82:df:94:4b:1b:dd:cb:ce:5f:12:4c:5f:8c:e9:d9:ce:
         6b:81:a3:03:dd:c7:99:0e:82:53:22:4a:c1:e9:87:27:ca:0e:
         16:7f:b0:b2:b5:a8:22:4d:46:7e:f8:7f:0f:21:ae:1d:e5:af:
         85:5e:74:2f:e2:33:17:2c:d0:01:ab:4c:3a:31:51:ab:72:3b:
         9f:6b:87:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB
RTQ3MjBBMjUwHhcNMjYwODI4MjI0MzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyMGVmOC0zMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrB6I6cY40yxwoBFZoyDRLgqvMU459y3hso8uewkq8+81cqNcNXRO0mjwUUk
Ltcx+C5GqAQneGHI9xstrBGdFrjqNFApqa5kGsiYyA7dmcD01mIYcYovSU7dGyHd
6Hr5AXyubuGlCsDGEarztcYWnM8XDBMSY8xIi+VKJm9G+6WUZh0pPRPsZx0M6TLR
lJvhUAwqbP27TfqhSSSKPiWQ9K0FBKE/wwLWept4ItTR2Bbp2Nap5MM+pskJwp97
tfNFLxUzXg+adetmt9mB2S8wu5058myoY5xCmuOTmT009m6K9rtoH/yuthaLyzDM
YIs2en+3/4gKDePU9DvB0mFyJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ5acQhy
+u7afkS3JgfZgGj7WYKMMB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0
QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA2OEUvRDZFRjY3MUE4NEE1MTFFQkFFOUU0NDcyQzRGOUFFMDIvODg4OUY0RTQ4
NEE3MTFFQkI3MDFFNzczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZz4kMA0GCSqGSIb3DQEBCwUAA4IBAQDH+XjRA/gx+gZLRUX6F/S0
sgSqkszHNANBQrmx2wSJeahLLFwfWM9IQJVPNiFqHt2oOAVeKRDWFiHX2GR+D/Lp
yTgLswDgD3jyPJw73DwQiYnNg/BGlGgFfdUCN3HNduDbm5EuS7Xx4d14Z2M+NN0j
Ht9hWx/50MK8Q0TD8O9LKbSV6R6xc38lyilzlSvGZp516gVoS3lmnqqaKRotx1A4
LowMVqWhm5e1YHDmC3NSSY/BuKKdZ4LflEsb3cvOXxJMX4zp2c5rgaMD3ceZDoJT
IkrB6Ycnyg4Wf7CytagiTUZ++H8PIa4d5a+FXnQv4jMXLNABq0w6MVGrcjufa4fD
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:31:33 2026 by rpki-client