Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/946E7D7C660E11F192F6B2999847A888.roa
File:                     946E7D7C660E11F192F6B2999847A888.roa (raw, json)
Hash identifier:          UPxwASkRaCM0BmW/75/VdGF2qprJhUWAyXmzhw5bK/Y=
Subject key identifier:   BB:B8:7D:FD:E5:B4:5D:A7:2D:13:A2:22:A1:EE:7B:CF:0A:09:28:D8
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       031C
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/946E7D7C660E11F192F6B2999847A888.roa
Signing time:             Sat 29 Aug 2026 01:51:35 +0000
ROA not before:           Sat 29 Aug 2026 01:51:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.62.0.0/22 maxlen: 22
                          103.230.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 01:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 29 01:51:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a923b27-f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:59:a3:0b:3e:ce:44:22:8b:55:f8:bb:69:
                    f8:58:a2:81:52:c6:d6:78:8b:84:a1:62:12:dd:37:
                    98:be:cd:52:55:da:5c:15:7f:35:84:3e:b8:52:5b:
                    40:19:bd:1e:c4:d9:f4:a1:89:f0:a1:74:4d:e3:05:
                    ae:09:18:45:9c:b2:54:c9:f8:82:e7:6d:09:91:80:
                    ac:2b:db:27:95:c0:ab:20:e9:8f:d5:46:c7:ce:a0:
                    74:6d:ce:81:2a:82:54:ef:8e:8d:40:7c:09:bd:3b:
                    98:5a:ae:a1:c9:3b:ee:bf:ff:c4:27:8a:01:e0:6f:
                    4e:ef:ad:f1:cd:97:76:7f:3d:d2:85:99:13:6c:31:
                    d8:15:ae:5a:ce:56:63:0c:6b:b8:b4:b6:75:19:2f:
                    55:43:d9:e2:e7:11:7f:b9:24:ff:bd:7b:42:28:68:
                    b2:29:87:e0:b7:7d:6b:26:cf:bd:99:ec:f2:c8:86:
                    78:53:84:f6:31:b0:e6:ba:98:90:0a:96:7f:d0:5d:
                    1a:6e:12:9c:90:c4:5b:66:ea:bb:2c:c9:ed:64:2f:
                    de:30:34:33:2c:66:3a:ab:8a:c7:b5:aa:82:e3:40:
                    be:36:36:b2:26:45:7e:d5:18:07:02:98:fe:53:96:
                    39:1a:32:ba:b5:6b:eb:ff:1c:06:77:8e:a5:70:87:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B8:7D:FD:E5:B4:5D:A7:2D:13:A2:22:A1:EE:7B:CF:0A:09:28:D8
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/946E7D7C660E11F192F6B2999847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.0.0/22
                  103.230.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:ee:84:bf:76:a6:36:38:6b:07:9c:74:d1:42:0e:e2:fb:
         59:8a:d3:54:46:82:a9:80:6a:61:7e:f1:a5:82:e2:8a:bc:e2:
         03:53:a4:ec:ef:61:1b:fa:43:a9:49:05:fb:98:25:0b:f7:1e:
         89:58:c8:2b:aa:49:98:33:64:f3:2a:9d:c3:47:fe:53:50:d3:
         6a:f8:96:0c:8f:d0:75:bf:f2:e7:1d:8d:e7:83:d3:54:56:1f:
         0f:c3:fc:d9:35:09:a8:8a:a0:80:03:1e:11:39:4f:ee:14:6c:
         92:df:8b:33:67:c5:26:0b:90:ec:16:4e:75:e1:49:75:fa:0c:
         c0:a1:86:84:90:00:48:4f:c4:3c:69:2f:50:99:bd:98:f2:d0:
         c0:23:4a:93:c3:3b:64:b1:2f:f3:1f:34:2b:75:08:d8:48:a9:
         71:05:c3:95:8d:34:99:49:fc:3f:b1:aa:24:f4:99:c0:6b:55:
         01:3b:63:5b:05:2d:3b:3d:df:40:ee:9f:a6:1c:d3:06:fc:03:
         84:a4:e7:43:7f:c5:19:25:93:f1:cf:db:40:c5:e0:20:35:81:
         25:62:dc:bc:41:ef:60:bd:dd:08:43:4a:92:68:9b:01:a0:fb:
         67:f1:46:bc:2d:bb:d0:a7:7f:34:94:e3:1d:16:b1:22:1c:1b:
         29:59:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:51:43 2026 by rpki-client