Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa
File:                     62D88F5A1C5811F190C6BEC40A3D8C67.roa (raw, json)
Hash identifier:          ZXXxhvJjeyK6UyQKRzh/tKPG3kcR6pN6E6QObWw4Zbg=
Subject key identifier:   B9:2B:B5:13:5A:C7:12:0B:62:94:83:4E:E3:A6:21:EF:BE:C2:1F:45
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DCF9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa
Signing time:             Sat 28 Mar 2026 10:39:38 +0000
ROA not before:           Sat 28 Mar 2026 10:39:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142485
IP address blocks:        103.170.176.0/23 maxlen: 24
                          103.176.173.0/24 maxlen: 24
                          163.227.53.0/24 maxlen: 24
                          2407:b5c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 11:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56569 (0xdcf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 28 10:39:38 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69c7afe9-9f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:73:da:7c:32:f0:db:af:c8:72:11:48:19:
                    52:6e:e3:ab:38:86:35:81:8f:3c:c3:bd:6a:e5:f3:
                    05:8e:f7:f5:cb:d3:b7:68:19:1c:bf:69:f0:09:36:
                    68:77:99:1a:11:dd:01:79:6b:3f:26:8a:99:e5:1f:
                    9b:3d:2a:35:50:18:f0:40:b1:51:86:e2:5f:f6:ae:
                    a2:2c:7a:f4:94:ff:04:ef:32:8b:28:17:65:e3:22:
                    bb:82:d1:5e:6a:46:38:73:c4:4b:57:6a:73:5d:65:
                    40:80:07:59:b6:27:a4:6d:ba:72:f6:f7:cc:1f:e0:
                    87:38:7f:35:20:b0:2a:16:55:17:fa:20:8c:a7:17:
                    5e:91:ae:39:fd:fa:2c:e2:a9:8a:2d:4c:20:0f:24:
                    a5:e6:6d:7f:c1:8c:f3:bf:37:ff:54:4a:78:e8:7b:
                    fa:ce:0c:2d:92:e7:a2:c9:b9:4d:6a:96:76:41:8c:
                    17:31:a9:71:6d:35:a5:5d:0e:a7:83:e9:d4:c9:52:
                    c0:8b:c1:f1:2a:9b:a2:8e:ba:68:b5:a5:c2:57:38:
                    31:6e:f7:8a:a0:95:91:f8:94:83:ae:c6:83:41:31:
                    a9:32:3e:b9:a1:11:07:3e:33:b1:f6:1a:2e:37:4e:
                    62:1e:90:b5:99:32:16:43:d5:89:67:5d:0f:81:50:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2B:B5:13:5A:C7:12:0B:62:94:83:4E:E3:A6:21:EF:BE:C2:1F:45
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62D88F5A1C5811F190C6BEC40A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.176.0/23
                  103.176.173.0/24
                  163.227.53.0/24
                IPv6:
                  2407:b5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:3e:eb:4a:82:96:6f:83:9d:76:b1:54:4c:d8:2c:8e:b3:
         5c:c1:20:02:bc:aa:ed:40:45:f4:c9:42:63:a5:e1:1d:4f:fb:
         81:0b:9a:6a:04:69:aa:cf:21:de:f2:59:f3:26:27:25:33:6a:
         ae:f4:a4:ba:3b:d8:85:9d:de:e6:74:9b:92:ea:9e:66:3f:ae:
         2a:3a:c1:79:7b:c7:42:ff:dd:ad:36:5e:71:70:07:0e:55:50:
         52:94:f6:4f:0e:cc:fb:3e:61:94:40:84:02:68:a2:b4:98:e1:
         94:32:b8:6c:52:f7:d7:66:23:a5:d3:80:88:76:b0:2e:ce:2d:
         e1:35:65:ce:69:69:34:48:c6:96:1c:7d:c6:d4:8f:5c:87:97:
         28:f6:79:43:df:01:cd:70:b7:98:1c:eb:f4:04:de:a9:34:6a:
         eb:70:c3:32:aa:1b:25:97:a9:c8:27:6d:47:35:15:41:24:7a:
         b0:07:4b:da:4a:31:7f:2b:5c:cc:c5:35:f9:a0:5b:d9:06:f5:
         58:2b:86:12:5f:7f:05:0c:a1:bf:e1:91:6b:40:97:f0:ad:17:
         ee:9b:50:85:00:b5:bd:61:9d:7e:1a:b6:93:43:73:a9:ff:a8:
         a0:28:3f:97:2a:cf:c4:ba:62:9d:26:83:f2:58:87:b4:21:d5:
         0e:d1:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 02:34:29 2026 by rpki-client