Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
File:                     D6CC557C6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier:          P99mvWZlY8P1geIzs7ku9n4rnRGbQWllNHbE+mokqck=
Subject key identifier:   34:E1:0F:13:CC:2E:DC:C7:8E:1E:85:FA:83:CC:0C:02:D5:2D:E7:AE
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       0214
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 04:53:06 +0000
ROA not before:           Wed 29 Jul 2026 04:53:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55884
IP address blocks:        103.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 29 04:53:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a698732-ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:7c:bb:d6:c1:5c:ab:0b:83:20:f9:18:8e:
                    ab:1e:dd:f2:a4:d9:75:de:5b:bb:7b:99:66:64:64:
                    e0:61:75:cb:e9:e0:31:24:0d:f6:3f:17:3f:78:6e:
                    19:a2:c3:d9:61:dd:31:1a:97:84:fb:a9:14:6b:5d:
                    3e:e2:a7:de:bf:39:9a:2e:fc:15:8c:d1:40:aa:17:
                    23:e9:1d:88:4f:68:13:e9:5d:e5:99:2a:df:b9:ff:
                    2b:b4:e3:b7:1b:fa:d7:12:f5:9f:c4:4a:22:cb:87:
                    9c:76:5a:e5:4e:b4:57:18:22:f5:1e:82:24:50:d1:
                    dc:32:0c:e6:94:2a:39:9a:be:85:c6:51:53:e0:ea:
                    d8:bf:f5:53:bb:a4:31:ba:e3:06:08:9f:91:e9:51:
                    7d:36:d5:25:7c:52:d9:a4:55:24:dc:a7:bb:9d:87:
                    40:64:c7:89:27:32:f4:ea:70:01:b7:88:69:e6:54:
                    f9:d2:fa:f1:9f:f6:7d:17:99:91:e4:b2:53:bd:68:
                    73:0f:62:d6:db:76:1f:ad:58:4b:37:0c:59:fd:81:
                    29:a1:9d:ad:38:bd:3c:1b:6e:49:d0:bb:e0:cc:02:
                    ee:08:e3:18:e2:03:c4:01:70:a7:00:1a:2a:a1:17:
                    52:7d:af:b5:3d:6b:e1:27:6a:23:30:be:c3:14:cb:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E1:0F:13:CC:2E:DC:C7:8E:1E:85:FA:83:CC:0C:02:D5:2D:E7:AE
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D6CC557C6E2C11EEBFE28628C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:ed:08:7b:e8:f8:c9:fd:43:51:b6:7b:87:f4:23:4b:08:
         04:5c:37:45:ee:7a:68:37:cf:e2:6b:2d:36:09:0b:7f:62:0f:
         12:34:78:46:9f:3f:d3:44:96:74:fd:1d:0a:88:70:f1:0a:06:
         80:62:8b:5f:5f:3b:2a:7b:9a:2a:56:0c:b6:11:c3:c0:9d:16:
         1d:88:31:e7:f9:7f:ee:b6:8e:57:a7:92:85:6b:e2:7c:54:d2:
         a6:d0:74:a5:36:95:e9:f9:25:90:3e:d9:03:06:04:c9:72:b4:
         1e:f0:47:f6:ba:08:a0:c9:1f:28:4d:22:c2:01:b0:10:f3:50:
         97:75:6c:56:7e:88:c9:99:67:49:52:69:12:0a:63:33:b7:ff:
         40:d9:31:e2:11:d5:6c:4b:34:ea:6a:6e:c9:ff:90:01:8b:42:
         c7:de:17:50:f5:66:02:c3:29:f8:9d:83:c8:4f:6d:5a:55:fe:
         c6:2a:cf:2a:5a:10:02:93:5a:5e:2b:4a:73:27:e3:99:64:f8:
         eb:d4:25:8c:38:d6:9d:43:d5:8c:8e:5f:5b:2d:dc:ce:6a:f3:
         72:68:4a:aa:96:7c:d4:27:b5:7d:2f:1e:5b:0a:11:74:ff:61:
         76:70:ba:75:15:c2:07:36:b7:f4:93:75:ca:a8:4e:ec:b5:91:
         85:d9:e6:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0
Mjc4N0FGODMwHhcNMjYwNzI5MDQ1MzA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5ODczMi1hYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdZ8u9bBXKsLgyD5GI6rHt3ypNl13lu7e5lmZGTgYXXL6eAxJA32Pxc/eG4Z
osPZYd0xGpeE+6kUa10+4qfevzmaLvwVjNFAqhcj6R2IT2gT6V3lmSrfuf8rtOO3
G/rXEvWfxEoiy4ecdlrlTrRXGCL1HoIkUNHcMgzmlCo5mr6FxlFT4OrYv/VTu6Qx
uuMGCJ+R6VF9NtUlfFLZpFUk3Ke7nYdAZMeJJzL06nABt4hp5lT50vrxn/Z9F5mR
5LJTvWhzD2LW23YfrVhLNwxZ/YEpoZ2tOL08G25J0LvgzALuCOMY4gPEAXCnABoq
oRdSfa+1PWvhJ2ojML7DFMuSpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDThDxPM
LtzHjh6F+oPMDALVLeeuMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF
MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI4MTMvQTg1MjQzNkE2RTJCMTFFRThERDY2NzM1QzRGOUFFMDIvRDZDQzU1N0M2
RTJDMTFFRUJGRTI4NjI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZz1gMA0GCSqGSIb3DQEBCwUAA4IBAQC22u0Ie+j4yf1DUbZ7h/Qj
SwgEXDdF7npoN8/iay02CQt/Yg8SNHhGnz/TRJZ0/R0KiHDxCgaAYotfXzsqe5oq
Vgy2EcPAnRYdiDHn+X/uto5Xp5KFa+J8VNKm0HSlNpXp+SWQPtkDBgTJcrQe8Ef2
ugigyR8oTSLCAbAQ81CXdWxWfojJmWdJUmkSCmMzt/9A2THiEdVsSzTqam7J/5AB
i0LH3hdQ9WYCwyn4nYPIT21aVf7GKs8qWhACk1peK0pzJ+OZZPjr1CWMONadQ9WM
jl9bLdzOavNyaEqqlnzUJ7V9Lx5bChF0/2F2cLp1FcIHNrf0k3XKqE7stZGF2eZs
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:19:02 2026 by rpki-client