Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
File:                     28536FDC340111EDB747A054C4F9AE02.roa (raw, json)
Hash identifier:          767ZJ3Zu0HqcoNrNoqHbrHeEu3FFQ1fr2JP5wUeYGvI=
Subject key identifier:   34:08:18:0D:0D:6F:FE:9B:25:93:19:85:AE:08:40:97:22:D8:BD:19
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       0238
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 02:38:56 +0000
ROA not before:           Thu 31 Jul 2025 02:38:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     63199
IP address blocks:        103.62.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Jul 31 02:38:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688ad740-92bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:e6:a2:8f:93:0f:98:45:cd:bf:15:d9:35:
                    c9:f8:0e:4b:59:eb:69:b6:cc:71:6c:2a:1a:9e:82:
                    99:f4:c3:67:35:b3:a8:dd:ce:95:f7:ed:b7:17:8c:
                    c8:e9:0a:ea:67:e2:b5:8a:70:51:6c:48:b8:a3:3f:
                    0c:00:d2:75:15:0d:ab:32:27:ad:2d:8d:4c:0e:e1:
                    ab:c5:5d:cd:25:64:f3:e5:67:ae:a5:09:08:e8:91:
                    9a:b2:92:89:83:e7:fb:60:c2:7f:6c:38:42:2c:18:
                    13:93:89:e6:55:d5:6a:48:cf:56:29:96:d6:0e:0b:
                    0e:bc:14:13:af:58:77:5f:e9:5a:78:e5:89:84:18:
                    a4:46:c2:f5:0c:ec:93:c4:fe:70:6e:79:6c:b9:df:
                    96:66:59:e4:99:df:55:be:90:3b:7b:a2:50:31:52:
                    df:1f:a1:33:62:6a:b2:fd:59:47:17:ea:02:08:2f:
                    b2:83:53:c3:ed:8a:ba:c5:67:92:d9:7b:94:89:5f:
                    c0:bf:a5:a9:0d:77:e9:ac:49:99:96:99:16:cf:b2:
                    bf:43:ce:54:b4:4c:ec:77:0a:a2:49:fd:18:69:b5:
                    96:59:f9:00:e9:42:0f:ab:a1:25:43:b9:df:df:81:
                    96:ae:b9:17:24:72:37:58:16:90:23:9c:9e:87:37:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:08:18:0D:0D:6F:FE:9B:25:93:19:85:AE:08:40:97:22:D8:BD:19
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:48:a5:10:02:60:70:6d:2c:07:74:c5:c9:51:74:20:d7:
         88:38:5b:e9:df:9b:59:c4:8e:14:86:02:49:f8:56:1d:89:40:
         c3:74:a8:53:b3:d8:58:b5:39:f2:0a:4a:0f:37:ed:15:96:d7:
         73:11:91:da:d0:28:e5:b0:6f:4d:c3:f1:63:be:c9:8a:60:f6:
         41:3e:e2:30:0f:ad:ec:31:64:69:f4:f2:f9:1d:d5:87:ec:1c:
         d5:bb:97:bd:7f:52:bc:e1:50:df:de:08:3a:12:85:22:bb:c4:
         dc:f5:4b:f1:32:17:9f:0b:31:bc:7b:90:cf:d9:6e:42:8a:de:
         f6:be:df:b7:4c:d3:35:02:8d:ec:3c:0f:84:d7:de:c0:50:02:
         94:3d:ed:2e:88:3a:10:60:58:a7:80:32:f6:13:9e:7c:ca:09:
         f4:65:e8:1e:81:c7:b9:cb:e0:76:71:26:3e:d5:3d:7c:00:91:
         b8:43:10:bf:74:d8:fd:ba:06:5c:55:ad:fc:12:c9:68:2a:f0:
         9c:28:68:5c:fd:d5:5b:c9:90:1d:5a:6f:48:45:12:3b:ac:15:
         a9:39:97:55:7e:a4:77:43:b2:03:e8:93:aa:76:92:87:8b:dd:
         45:d4:2a:70:01:50:e1:1c:1d:0e:af:ef:12:70:cc:e4:bb:19:
         24:71:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:40 2025 by rpki-client