Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
File:                     63884D122F5911EE8D896A87C4F9AE02.roa (raw, json)
Hash identifier:          A0b3lbhu5psXu4iPwN6/ETPVqEFVoWkyvdJtYD4UmH8=
Subject key identifier:   9F:51:E6:C2:6E:EC:2C:FC:84:D0:B0:41:0A:49:66:5E:DA:D9:03:BB
Certificate issuer:       /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial:       01EC
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:17:29 +0000
ROA not before:           Mon 09 Feb 2026 03:22:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        103.61.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl
                          rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C355, serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
        Validity
            Not Before: Feb  9 03:22:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41239-77c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:09:95:4a:f5:2d:7f:51:b3:c5:8e:c9:49:
                    1e:50:86:2a:f9:68:9b:6b:54:39:c3:1d:1f:7e:e3:
                    24:73:b5:1c:fe:6f:70:0f:26:3c:4c:b5:1b:09:c6:
                    e7:c1:40:26:fd:d4:d6:5a:33:98:c6:ca:0f:7d:0c:
                    cc:de:bf:ea:16:23:03:47:9c:f3:f4:08:37:bf:a8:
                    e0:b4:bc:39:46:23:0f:59:7b:f1:8e:08:87:17:2b:
                    1b:09:be:28:94:7a:a7:c5:64:18:1d:8f:af:bf:83:
                    b2:f6:57:b0:e4:8b:20:9b:fb:e9:0b:c7:b9:cb:30:
                    fb:ee:de:c8:7a:ff:7a:60:c4:be:1e:c1:e0:ea:12:
                    c6:46:f4:82:73:8a:35:08:66:3e:54:87:38:bf:6f:
                    f4:2e:a1:67:e2:50:54:2a:f4:cd:93:77:d9:32:8f:
                    95:3a:75:a8:1f:21:a3:3e:3f:7f:94:20:68:38:0d:
                    e1:52:fe:ed:7f:35:48:24:ea:2d:9b:e1:13:99:2a:
                    a5:f0:4b:db:7e:84:22:66:52:f0:b8:52:68:d0:24:
                    2e:85:b1:50:11:fd:55:76:2a:39:d8:b0:72:fa:65:
                    01:48:d0:4e:21:89:80:90:a2:48:0f:77:a9:95:82:
                    fb:8f:1f:63:5c:03:95:12:1a:b8:27:65:c9:b4:24:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:E6:C2:6E:EC:2C:FC:84:D0:B0:41:0A:49:66:5E:DA:D9:03:BB
            X509v3 Authority Key Identifier:
                keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:66:23:1c:4d:c7:be:92:77:2d:f8:51:0a:f8:16:b3:8b:
         f6:85:b7:64:93:fb:ee:30:34:19:a1:82:ce:c3:21:50:9b:cc:
         93:e0:40:bc:01:d7:96:59:df:f3:a7:88:da:54:fe:f5:a8:78:
         45:07:a7:a9:48:0e:3f:a3:32:cd:ad:57:35:c4:08:98:15:23:
         4e:ab:a0:ed:86:8a:e2:b4:22:a0:34:cc:2b:db:cd:81:77:9d:
         8c:39:f0:9c:a5:00:77:13:45:f0:99:fb:07:b4:b7:ea:b0:47:
         4c:92:b1:a2:e8:38:13:9f:99:fd:f8:2e:90:d2:58:66:76:49:
         1a:30:4c:4c:b8:a8:9d:9d:49:dd:79:84:75:18:0e:b9:d0:5f:
         e7:8f:6a:32:0f:30:a6:dd:13:a9:08:5b:f1:be:3d:cd:a2:fc:
         03:e7:5f:89:46:19:60:b4:3f:a4:04:31:3e:b7:73:bf:d4:d9:
         48:51:d4:1a:58:bf:89:c4:46:7a:14:19:74:be:4c:b5:33:66:
         e6:49:b6:51:f4:ef:ff:1f:e7:ba:8b:00:ee:c6:89:41:ce:e6:
         1c:89:b5:eb:a2:f7:89:f0:20:f7:39:56:6c:7f:ae:09:06:1f:
         d1:52:46:f7:d0:d5:25:cc:4f:42:f0:73:49:17:00:6a:47:0b:
         9b:55:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:47:05 2026 by rpki-client