Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
File:                     710A095EB62A11EF9D01E53DC4F9AE02.roa (raw, json)
Hash identifier:          /o4SLgeuUU9OSfiAD7UJtOCCqvNSUtLbtPYkogIfFeQ=
Subject key identifier:   34:55:E8:B3:AE:32:93:9C:41:C6:51:9B:EA:A8:C0:6B:CF:BF:98:25
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       031F
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
Signing time:             Sat 29 Aug 2026 01:51:41 +0000
ROA not before:           Sat 29 Aug 2026 01:51:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        103.62.1.0/24 maxlen: 24
                          103.62.2.0/24 maxlen: 24
                          103.62.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 01:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 29 01:51:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a923b2d-959e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:56:a6:be:93:05:49:0c:43:af:6b:7c:16:
                    61:6e:81:a7:2d:db:09:c4:86:dc:cc:ae:fe:fa:cd:
                    3c:71:eb:ff:6e:51:02:1e:b6:37:ab:81:d8:6d:90:
                    44:92:cb:b1:ee:c9:95:21:fe:7e:23:88:d0:e3:c5:
                    9e:ba:49:b8:48:d5:d8:51:c9:24:3f:fb:c4:11:0c:
                    01:76:45:49:32:f9:34:02:1b:d2:7c:88:85:a5:ea:
                    1d:64:7d:a5:54:6d:26:75:7a:37:c8:50:45:cf:35:
                    ff:3f:d3:e7:ab:9a:40:ba:48:7d:25:d7:e5:36:0a:
                    a6:81:47:d6:30:96:ac:1e:50:bc:21:2e:a4:97:55:
                    de:7a:e7:ea:bc:0f:bd:9a:0f:d3:2e:64:4c:ed:d7:
                    8c:0c:64:57:61:7d:a5:6f:23:e6:e5:8a:cd:68:e2:
                    97:28:1b:19:2e:1c:25:59:99:18:a0:73:d1:97:bf:
                    01:a6:cf:fa:27:5b:d5:be:f3:09:8f:63:67:d4:25:
                    c9:1d:18:97:31:66:0f:e3:0f:fb:c7:d7:b9:7a:b5:
                    4b:eb:8d:4c:10:9d:5e:c4:bc:7d:7b:4b:a2:20:dc:
                    22:1b:33:28:1e:a0:c5:e4:ef:dd:8a:92:a9:f1:b4:
                    11:34:e4:8e:ca:0f:0c:dd:88:18:cd:32:41:b9:f0:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:55:E8:B3:AE:32:93:9C:41:C6:51:9B:EA:A8:C0:6B:CF:BF:98:25
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.1.0-103.62.3.255

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:f6:07:e9:72:f7:93:40:28:44:90:f4:d2:88:42:b8:b5:
         f9:62:28:e9:fc:19:c4:dd:64:54:50:ad:6a:95:5a:85:94:35:
         c1:eb:c1:48:64:e8:27:b4:ad:0e:dd:2b:bc:b4:d7:60:cf:5b:
         0d:bd:8a:fe:7b:fb:ea:09:26:d8:fa:90:5d:cf:09:a0:15:fb:
         0e:a8:bd:03:25:8c:5e:54:f3:48:e1:6e:a0:e7:ed:a3:df:be:
         6a:ff:0a:e1:fc:f6:62:c9:c8:da:fa:7c:bd:c1:99:77:92:44:
         f4:f7:49:c9:ee:ae:f5:1d:cb:a9:39:9f:2b:32:8d:29:65:cd:
         3a:8d:b4:4b:94:a1:35:11:f9:f3:5f:9a:c2:49:72:cb:7d:9e:
         91:2e:8b:55:8e:0b:11:34:d4:32:68:ae:a5:3f:26:02:0d:d2:
         28:7a:0b:18:48:c4:01:40:f2:fc:1e:06:f7:18:da:6f:98:b5:
         71:e6:1c:33:76:82:ab:6d:39:81:ba:10:ca:05:81:bb:9a:54:
         ca:fb:47:98:9f:ef:a9:4b:39:56:41:ec:a4:a7:79:c3:89:7c:
         45:d1:35:b1:8a:be:5e:62:ea:1a:52:b8:ef:3f:b0:fc:60:97:
         ae:4b:88:bc:2e:bc:7b:b0:78:25:6f:85:46:75:99:fc:58:64:
         7a:1b:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:46 2026 by rpki-client