Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
File:                     28536FDC340111EDB747A054C4F9AE02.roa (raw, json)
Hash identifier:          2Xl3z1pNnYLf6ScCsN8oADuaEpP5EV/oWQWpdcUNlJM=
Subject key identifier:   95:6A:A6:0A:59:9A:D1:CD:06:C6:31:6C:9A:F4:5C:8E:CF:5C:D2:CD
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       02FC
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 01:49:56 +0000
ROA not before:           Fri 07 Aug 2026 01:49:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     63199
IP address blocks:        103.62.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Aug  7 01:49:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7539c4-7528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:d9:3f:7c:48:8a:33:48:d9:9e:55:1d:8a:
                    28:a4:43:1c:54:0d:0a:da:fc:9b:dd:74:2a:1e:b8:
                    06:c9:07:e7:95:6e:96:1f:02:47:85:d7:ac:25:fc:
                    b3:3a:97:4a:47:e6:f0:6c:0b:6b:15:7c:ff:49:fb:
                    ed:8f:2d:de:91:9c:15:a0:fd:d2:f3:47:ec:54:a1:
                    e3:8a:82:09:31:18:c6:56:dd:5e:60:b3:eb:45:ff:
                    8d:4f:29:2a:72:3c:ee:43:c3:6a:9f:4f:e0:25:58:
                    52:c5:45:c9:b5:f5:62:de:a7:80:d1:e6:00:2f:5a:
                    57:f0:52:4b:a0:4d:f4:07:41:be:d3:ab:9c:8a:08:
                    66:94:48:72:ad:18:29:3a:f5:da:2a:ce:a9:18:5f:
                    02:42:01:40:16:db:09:83:cd:62:fd:a4:80:d3:e6:
                    c3:cd:55:17:28:91:d6:80:54:a9:35:8f:4c:2f:d5:
                    44:e7:53:69:1c:14:a2:da:5c:b0:99:b6:4b:8a:fb:
                    8e:19:25:83:a9:1e:eb:e9:a7:96:35:f0:59:19:de:
                    b9:fe:68:9b:27:79:ad:9b:b0:d4:ab:8a:c5:53:c6:
                    11:82:78:ea:a0:2f:c4:a9:8f:c6:12:db:86:c4:27:
                    e4:31:4b:af:0e:24:0f:39:81:4c:79:0d:40:49:4f:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6A:A6:0A:59:9A:D1:CD:06:C6:31:6C:9A:F4:5C:8E:CF:5C:D2:CD
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:d0:db:76:a5:e1:79:06:d5:c9:cc:a9:08:31:4b:cc:ed:
         95:83:31:ae:7e:c5:5f:56:76:93:1c:44:75:22:ec:50:35:34:
         ea:3d:fc:96:57:dc:09:31:81:66:05:83:ad:75:72:08:30:4b:
         19:79:67:24:69:72:7b:60:67:35:8e:59:ac:ff:ca:b9:68:6e:
         69:73:82:d6:77:56:b8:66:75:61:32:59:05:ca:01:96:bc:5a:
         c4:21:1a:c2:15:c8:5e:2d:52:b3:72:72:a6:ff:95:a3:97:b4:
         6d:da:d7:dc:0c:f8:30:e5:04:38:06:6c:43:a3:08:96:34:c5:
         d7:2f:11:cc:22:03:e9:bb:cd:38:e3:d7:1e:f0:c9:06:0f:a6:
         56:22:7e:9a:ad:e6:8e:64:bd:1b:2d:11:ea:23:f6:02:1f:3f:
         80:ef:4c:42:28:66:c9:e5:66:68:4d:11:d9:c7:71:b2:dd:48:
         67:63:56:51:dc:03:81:8f:0f:c1:09:09:7d:a5:06:28:63:a1:
         74:0d:84:c9:ec:13:e4:e7:c1:ba:b7:b9:d9:f0:0b:2b:70:e0:
         2e:48:da:67:ad:58:90:fd:c0:69:21:50:8e:8e:61:78:13:da:
         92:02:bf:22:c5:2d:95:cb:36:61:2b:63:b9:c3:67:38:f3:d2:
         a5:f7:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:48 2026 by rpki-client