Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
File:                     F63AE024CFE111EE86A9477EC4F9AE02.roa (raw, json)
Hash identifier:          cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=
Subject key identifier:   7B:E6:5D:36:60:32:98:41:39:28:7A:6D:6A:30:83:EC:9D:48:F8:B4
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       0234
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 06:45:56 +0000
ROA not before:           Sat 01 Aug 2026 06:45:56 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152151
IP address blocks:        103.62.233.0/24 maxlen: 24
                          103.62.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Aug  1 06:45:56 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6d9624-56a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:bc:70:ca:1e:31:0c:fa:b3:71:1c:56:c4:
                    3c:8f:6d:f4:f4:3d:23:03:ee:21:a2:da:b4:70:f4:
                    fb:92:ad:b3:03:84:95:7f:5c:b7:58:9e:b9:02:73:
                    ff:33:3a:80:16:65:f3:63:9d:f7:d2:c9:75:8f:1b:
                    8a:7c:51:87:26:c6:15:82:9d:16:51:a9:0f:eb:3e:
                    c2:ed:6f:8b:7a:b8:5f:c9:d2:26:0c:2a:4f:af:60:
                    87:02:18:80:a6:01:d2:27:0a:4c:15:1e:31:e2:32:
                    9c:04:00:e4:b7:f2:36:60:74:bd:19:5a:9f:5c:cf:
                    f5:55:b7:72:7c:e4:3d:17:81:35:a2:92:66:87:59:
                    a4:8a:8f:9b:cd:2b:73:e4:fc:52:ee:9a:fa:10:1e:
                    c4:ef:89:e6:2e:08:e8:b2:12:cb:63:f8:96:f4:b3:
                    ed:73:50:84:c2:20:75:10:0b:c7:03:12:7c:6c:ac:
                    77:f8:14:61:f9:dc:ab:21:2f:00:5e:d2:fe:b5:6f:
                    06:23:d9:64:a6:c0:d0:4d:25:18:27:37:5e:1e:c3:
                    55:fa:88:12:0c:97:57:6c:82:2e:77:87:71:e9:11:
                    56:f6:97:44:46:59:00:c8:72:ba:5a:ec:d8:1c:14:
                    40:af:d1:5e:af:11:c5:60:4e:10:f5:02:3c:cc:2e:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:5D:36:60:32:98:41:39:28:7A:6D:6A:30:83:EC:9D:48:F8:B4
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.233.0-103.62.234.255

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:c2:c7:ac:0c:e2:84:2a:f2:2c:f7:48:54:1b:88:40:94:
         f1:2f:a7:79:35:39:64:c8:21:f5:b7:9c:4d:bf:dd:41:49:93:
         a7:32:67:50:55:df:dd:a5:cd:63:0c:af:33:9a:49:54:37:66:
         70:95:5b:e7:eb:97:2a:d7:34:3a:b8:47:0a:99:1e:e7:dd:a2:
         e6:ad:ce:81:c0:2c:6c:a8:a6:71:3a:f4:40:51:9e:65:c2:fc:
         7d:aa:e9:3e:50:08:f4:a1:67:44:b3:63:9c:b3:9a:1a:75:d9:
         bb:52:2a:ca:7a:35:88:92:d4:8c:cc:b6:0d:f4:bc:63:22:c3:
         67:b4:fd:68:2a:dc:68:60:a8:16:9e:87:83:71:e9:7c:f1:9c:
         aa:32:8d:f9:82:dd:c6:16:ea:81:f6:ae:89:ce:58:35:eb:3f:
         97:4f:91:07:c2:cf:13:f1:af:88:48:98:95:db:67:c0:6a:ce:
         d1:2f:f5:1d:c5:a0:7b:0f:81:03:31:6f:c2:21:a9:2f:41:9f:
         2b:d2:fa:34:e5:45:31:8e:f5:d1:4a:bd:95:70:7d:1a:1c:a5:
         75:49:f0:a2:07:80:ae:b6:3f:b4:26:7b:e0:25:c3:62:a1:d4:
         cf:9a:03:33:3c:de:36:85:21:1b:c6:62:2b:3b:8e:a2:1a:46:
         ba:c9:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:12:46 2026 by rpki-client