Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/62A0C17A16C511ED91E80F56C4F9AE02.roa
File:                     62A0C17A16C511ED91E80F56C4F9AE02.roa (raw, json)
Hash identifier:          JJX6OI5aam7BC0uvlTdjVV9SQAAwhFakRzY5oiIX9Uk=
Subject key identifier:   44:BA:3B:27:D5:EB:6A:87:91:EF:D1:B8:9C:9F:3E:96:69:94:65:02
Certificate issuer:       /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial:       0266
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/62A0C17A16C511ED91E80F56C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:49:09 +0000
ROA not before:           Thu 05 Jun 2025 01:49:09 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138915
IP address blocks:        103.191.48.0/24 maxlen: 24
                          103.191.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
                          rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 01:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
        Validity
            Not Before: Jun  5 01:49:09 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6840f795-8c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:91:5c:1c:a9:3e:95:57:1e:f9:0b:48:aa:
                    e1:3d:56:59:e3:e1:8a:cd:fb:d0:75:f8:30:82:ca:
                    7f:f3:20:9d:6f:2c:24:17:38:5c:5c:8c:49:b8:f9:
                    8b:18:19:3b:18:65:d3:13:95:be:1e:9d:80:73:e9:
                    d5:7b:19:3c:3c:84:e9:42:7d:7c:c6:6f:e8:8c:34:
                    ab:b8:a2:77:1e:6b:8f:8b:15:d0:dc:83:94:dc:e0:
                    98:fb:f9:19:03:19:92:85:f6:2e:9b:0c:51:9a:4c:
                    02:a8:67:53:54:94:8b:76:90:ab:7c:6b:51:a5:5f:
                    12:a9:24:db:0b:77:85:b4:35:f4:ab:4e:34:aa:72:
                    99:81:14:49:73:90:ed:30:4e:ad:bf:64:51:72:0b:
                    2f:3d:8c:fe:f8:84:cc:01:a4:0b:db:a0:16:9e:5d:
                    dd:29:ff:02:25:01:39:1d:7b:5e:69:55:f3:21:a8:
                    69:69:2d:36:5c:24:2a:de:e7:f0:4f:ad:1c:7f:2d:
                    64:f9:d9:99:98:6f:50:e3:05:ae:90:84:ea:dc:03:
                    c7:1f:e3:dc:0a:e2:94:2d:38:02:56:49:8e:67:e1:
                    c6:5e:c0:94:bd:61:85:af:51:19:d8:8c:5e:3f:d5:
                    7c:17:65:72:78:44:23:fa:fe:c1:54:9a:9f:6f:25:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:3B:27:D5:EB:6A:87:91:EF:D1:B8:9C:9F:3E:96:69:94:65:02
            X509v3 Authority Key Identifier:
                keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/62A0C17A16C511ED91E80F56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:98:2f:6d:c8:2e:3d:1b:0e:f1:4d:43:1a:96:a0:d0:c9:e6:
         08:c1:86:62:a9:58:33:dc:71:4b:74:86:d5:b5:39:9e:3b:93:
         cd:f0:dd:d9:ad:f7:e9:bc:5b:ed:62:86:0a:b8:ca:91:34:8a:
         05:f5:eb:93:ca:96:68:28:28:13:25:24:22:36:1d:52:f7:a4:
         bb:15:9e:89:67:d6:bd:2f:28:8d:2b:04:24:05:16:d2:cc:d8:
         de:ef:53:d7:74:b9:9b:88:cd:7a:bd:34:f0:ad:fc:6e:18:d9:
         93:e7:53:0e:0f:5d:3a:b5:49:6e:d1:2c:81:09:fc:f0:b0:06:
         21:81:9f:ef:bb:0d:78:58:3a:01:63:6b:4d:f1:dd:cb:5e:e5:
         24:3b:a2:9c:31:4c:84:c1:d2:d0:1e:dd:c4:d6:e0:81:8d:6f:
         1f:a4:a3:84:a8:bf:49:46:dc:38:c3:ce:77:61:90:c9:24:75:
         cd:8d:b8:9c:d0:52:03:0a:92:2a:47:93:d1:7a:31:82:08:f9:
         2a:87:46:6a:a4:dd:72:47:e7:f1:e3:98:0b:37:bd:f9:8a:bb:
         3a:85:35:67:20:c4:53:54:70:fb:94:97:02:b5:b0:a9:85:01:
         ae:42:4d:75:07:ed:22:8c:2b:de:d3:d6:56:45:11:d7:13:2d:
         2f:cf:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:40:25 2025 by rpki-client