Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
File:                     D663158A6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier:          q+XSi1s238dMGhuwUgaHufUBQNrf/5iPlR0JXsxUO7Y=
Subject key identifier:   62:00:AD:2F:95:C6:57:A8:B1:C5:E3:10:A6:C7:8B:86:1F:53:C4:85
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       0213
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 04:53:04 +0000
ROA not before:           Wed 29 Jul 2026 04:53:04 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        103.61.97.0/24 maxlen: 24
                          103.61.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 29 04:53:04 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a698730-3088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:ef:92:46:c8:80:bc:14:25:c3:41:f6:e2:
                    c9:0b:7c:cc:b4:5b:cc:11:71:c3:e0:01:36:2b:33:
                    cf:45:bf:42:45:c0:5a:5b:d3:e6:91:53:7b:68:81:
                    ee:f7:4a:97:7a:ca:8f:af:39:c4:9f:52:a6:70:c1:
                    48:8c:61:15:74:29:79:6b:84:36:fc:a0:31:66:5c:
                    31:aa:10:79:05:9d:eb:89:71:08:f4:f3:3f:b5:ce:
                    75:70:88:e3:3a:41:15:78:ea:75:76:c2:82:e9:69:
                    89:80:96:f0:e8:73:c7:38:d6:5c:f5:ea:58:4b:df:
                    80:79:f1:72:c2:02:4f:f2:f6:df:99:13:33:ea:72:
                    af:08:f8:b9:8c:ac:b0:00:c8:3b:be:f2:88:0d:7a:
                    0c:dd:33:36:ab:6a:10:6f:c6:c8:1a:c1:18:bb:4b:
                    94:8a:db:89:a1:99:34:d2:43:61:ef:32:42:89:e0:
                    a4:00:e7:2a:bc:78:be:6e:8d:f5:b7:19:46:07:96:
                    ae:95:d4:80:0d:f5:63:a6:28:29:cd:ae:dd:2c:db:
                    43:86:a7:9d:e4:4b:be:19:32:50:37:dc:4a:46:bc:
                    61:93:4d:75:63:d7:ce:98:11:e9:80:b1:5d:84:87:
                    49:64:b3:5e:b2:9e:09:1d:25:09:a8:be:71:5b:28:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:AD:2F:95:C6:57:A8:B1:C5:E3:10:A6:C7:8B:86:1F:53:C4:85
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.97.0/24
                  103.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:e8:13:f0:14:ef:4a:85:8b:0c:af:42:7e:65:5b:d9:39:
         68:24:14:35:78:43:a6:f7:78:7d:e7:41:7e:22:de:f0:12:c1:
         4e:fa:f8:24:d9:fc:0c:96:44:a8:12:de:7f:6c:8a:99:29:f9:
         6d:ad:90:50:a3:53:ac:f7:2a:b8:32:d8:5d:cb:d0:77:64:0a:
         b2:32:c7:17:5c:9c:a2:d6:f2:e1:ff:68:fd:34:21:73:1f:af:
         10:7f:dc:3b:b6:9b:45:95:c8:38:59:f9:c7:96:8d:7a:5a:dd:
         42:78:99:ee:01:84:68:05:78:cb:4f:8e:8d:e0:35:a3:0d:85:
         fe:10:d7:9a:3a:61:32:c9:48:40:5b:73:7d:9f:03:7f:54:ea:
         70:15:b4:6c:55:00:c2:6e:96:19:85:f3:d4:5f:46:03:d7:6f:
         a0:20:a0:f0:53:96:b6:8f:1f:11:b9:10:2a:cb:5f:bd:8e:10:
         8b:04:59:7f:64:da:5b:fc:1b:85:07:6c:14:0d:ce:08:c7:08:
         b7:b3:fb:64:84:99:51:2d:5b:5d:c7:5d:f7:29:7f:09:c7:18:
         c0:e9:1a:fb:aa:72:34:3b:79:77:60:49:77:a9:e6:6c:92:cb:
         ff:f4:8a:56:6a:28:ab:1e:ca:c4:39:f2:58:2e:39:16:50:34:
         ec:76:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:44:10 2026 by rpki-client