Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8A537D0CEB8811F09D1C7947556F56BC.roa
File:                     8A537D0CEB8811F09D1C7947556F56BC.roa (raw, json)
Hash identifier:          HXOczdbG3jBtr/wzTx6ipHvHkHT1tt95ne5sa0eRBf8=
Subject key identifier:   2B:44:D2:23:10:98:97:32:02:CB:D5:F2:13:5F:D7:D6:92:3A:D1:5F
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       02B3
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8A537D0CEB8811F09D1C7947556F56BC.roa
Signing time:             Sun 01 Mar 2026 17:17:03 +0000
ROA not before:           Wed 07 Jan 2026 05:20:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        103.62.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 01:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Jan  7 05:20:12 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4748f-3d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:19:23:ec:21:e1:83:63:0a:4d:4b:c0:2a:
                    e7:2e:55:26:1f:0c:de:bd:d1:20:49:0c:96:1f:66:
                    ea:29:e4:6e:1f:94:09:46:39:52:b5:66:9e:26:52:
                    14:e3:ad:01:5e:d2:63:39:7f:83:b1:1a:7a:67:35:
                    a1:9b:14:97:01:33:ee:6c:8a:5a:3d:f1:c3:aa:f9:
                    50:91:70:48:2e:df:90:a2:76:11:b2:16:63:3b:9c:
                    07:0d:aa:5a:ee:90:57:a7:92:03:d0:77:e5:6b:72:
                    b8:bb:21:2e:f9:57:1b:36:7e:24:cd:3b:9f:f6:9c:
                    5a:99:80:cf:7f:4f:44:90:80:e4:8c:fa:79:52:7c:
                    cd:a8:cb:2e:4a:ee:97:af:f0:83:f8:7c:45:84:b4:
                    7a:43:cb:bb:b2:63:63:d7:8a:da:52:61:45:cc:72:
                    b7:73:48:1a:ac:46:16:ea:db:40:aa:95:c2:17:20:
                    c8:98:b2:87:bf:a2:7e:b7:cd:2d:15:fc:bc:d3:ed:
                    8d:0b:64:c9:19:88:ec:bc:6e:37:77:53:28:bf:ae:
                    68:b0:6b:34:8a:92:84:28:ff:38:7c:1e:d8:e9:93:
                    7a:70:41:2b:6d:57:6b:3d:61:0c:bd:b0:13:da:8a:
                    e8:ab:24:9c:06:46:d2:e8:28:c0:00:16:5d:ca:93:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:D2:23:10:98:97:32:02:CB:D5:F2:13:5F:D7:D6:92:3A:D1:5F
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8A537D0CEB8811F09D1C7947556F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:22:e5:26:89:c2:ee:29:39:da:5e:c0:b5:b9:be:bf:9e:
         fc:04:f9:34:2e:a4:30:d5:75:00:6a:46:f7:9c:ce:fa:02:5e:
         83:09:58:43:27:37:c9:96:f5:18:07:b2:c0:59:9a:68:31:65:
         b8:d2:b7:9b:71:9a:66:f2:f2:4d:ec:a3:56:5a:a9:1b:e2:3e:
         15:3f:85:22:b1:a6:2b:6d:49:ab:64:d0:42:da:0e:af:c3:6a:
         f8:f5:aa:36:90:34:82:ba:bb:b1:56:6e:57:24:4d:64:92:0d:
         dc:bc:1f:22:8a:18:13:c6:78:73:c5:9e:24:a6:08:4b:93:14:
         e6:c8:0e:3f:b6:27:8f:23:73:f5:5d:b5:e4:2e:0c:58:d2:94:
         34:b4:b9:58:35:5c:0e:64:f9:4b:00:01:00:c2:81:2c:0f:48:
         1a:84:e7:bb:32:b8:a3:cb:a6:91:e3:3d:f9:5d:88:ee:02:22:
         1c:26:6b:f7:06:62:3d:3d:ad:c5:70:bb:fd:8c:6d:fc:3c:de:
         ef:d1:30:97:87:b0:c5:a5:dc:36:67:ff:5c:df:4f:11:d8:79:
         93:17:5f:89:3d:4a:53:94:af:2b:6f:47:4f:7d:74:6a:b0:ea:
         b1:c0:1d:04:6a:93:45:cd:95:c4:1f:8c:e1:c0:3c:e4:09:19:
         20:5d:18:62
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjYwMTA3MDUyMDEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQ4Zi0zZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWgZI+wh4YNjCk1LwCrnLlUmHwzevdEgSQyWH2bqKeRuH5QJRjlStWaeJlIU
460BXtJjOX+DsRp6ZzWhmxSXATPubIpaPfHDqvlQkXBILt+QonYRshZjO5wHDapa
7pBXp5ID0Hfla3K4uyEu+VcbNn4kzTuf9pxamYDPf09EkIDkjPp5UnzNqMsuSu6X
r/CD+HxFhLR6Q8u7smNj14raUmFFzHK3c0garEYW6ttAqpXCFyDImLKHv6J+t80t
Ffy80+2NC2TJGYjsvG43d1Mov65osGs0ipKEKP84fB7Y6ZN6cEErbVdrPWEMvbAT
2oroqyScBkbS6CjAABZdypNW4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCtE0iMQ
mJcyAsvV8hNf19aSOtFfMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvOEE1MzdEMENF
Qjg4MTFGMDlEMUM3OTQ3NTU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZz4AMA0GCSqGSIb3DQEBCwUAA4IBAQBCfiLlJonC7ik52l7Atbm+
v578BPk0LqQw1XUAakb3nM76Al6DCVhDJzfJlvUYB7LAWZpoMWW40rebcZpm8vJN
7KNWWqkb4j4VP4UisaYrbUmrZNBC2g6vw2r49ao2kDSCuruxVm5XJE1kkg3cvB8i
ihgTxnhzxZ4kpghLkxTmyA4/tiePI3P1XbXkLgxY0pQ0tLlYNVwOZPlLAAEAwoEs
D0gahOe7Mrijy6aR4z35XYjuAiIcJmv3BmI9Pa3FcLv9jG38PN7v0TCXh7DFpdw2
Z/9c308R2HmTF1+JPUpTlK8rb0dPfXRqsOqxwB0EapNFzZXEH4zhwDzkCRkgXRhi
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:07:11 2026 by rpki-client