Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
File:                     62B575B8104C11ED8CE56267C4F9AE02.roa (raw, json)
Hash identifier:          oy4+r/4ch7tssdBS/m9AWzTx9LFGGR6DYkx4YW2zzvg=
Subject key identifier:   34:FE:5F:2C:4A:2B:6E:26:F4:4B:E5:C0:90:8A:5B:97:25:28:A9:B2
Certificate issuer:       /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial:       030A
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:06:00 +0000
ROA not before:           Tue 05 Aug 2025 02:40:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150116
IP address blocks:        103.191.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
                          rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
        Validity
            Not Before: Aug  5 02:40:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40178-2ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:59:8b:4e:4a:0b:d9:ca:e2:47:01:23:dd:
                    1f:19:e9:50:95:d0:e6:53:cd:e8:95:81:10:dc:5c:
                    0f:e7:4b:ee:b2:71:55:c1:27:35:7f:49:2c:f7:7d:
                    b4:ba:d4:c0:5d:41:c1:2a:07:43:32:88:5f:a9:8a:
                    92:74:a1:f9:60:cc:a4:e9:4d:69:ad:b0:85:da:54:
                    71:45:b7:63:99:aa:51:da:7c:c3:9f:0d:95:8e:3b:
                    13:7b:77:8f:32:01:aa:6e:79:d0:d0:63:35:79:62:
                    a0:c8:34:15:fd:52:46:bc:db:cc:88:9d:38:0d:0b:
                    2b:da:64:00:be:51:33:33:14:32:6d:f7:f1:b1:18:
                    cc:ea:60:02:03:eb:d2:84:cd:a1:a2:46:2a:87:3d:
                    28:ac:63:42:f5:09:d3:b3:c6:f4:cd:50:d6:6d:e0:
                    1c:12:e0:ba:7e:69:bc:90:48:d9:8a:13:87:75:22:
                    1a:ce:70:42:56:80:a0:4f:66:de:e8:60:1e:ac:be:
                    4f:be:a0:4d:9c:32:1e:13:86:00:2b:e0:f9:b4:54:
                    fd:aa:ba:6b:92:8d:f7:7d:e3:44:74:55:74:5a:bf:
                    8b:e8:af:e9:d4:e6:84:75:0f:3e:e6:b0:2d:2b:7b:
                    61:53:8a:16:43:17:33:17:58:06:f4:15:6c:75:3b:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:5F:2C:4A:2B:6E:26:F4:4B:E5:C0:90:8A:5B:97:25:28:A9:B2
            X509v3 Authority Key Identifier:
                keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:46:c9:5a:23:1a:f6:0d:01:b0:96:5e:a3:4a:d4:8c:89:
         b0:99:be:6c:74:df:0f:52:95:8e:9d:de:0d:78:b6:43:4b:f1:
         32:32:4c:9d:c2:d9:c6:a3:6b:ef:95:8f:ce:47:84:8c:1d:99:
         db:01:ca:50:87:c4:0a:22:ce:57:5b:a8:c0:29:7a:44:5c:42:
         af:ea:05:f7:41:d1:8d:54:cb:67:41:bd:d2:af:0c:77:60:bd:
         c2:29:50:9d:fd:b8:27:9b:72:9c:14:67:a6:f0:81:d7:04:30:
         a3:aa:77:b3:7a:64:46:cf:5e:c7:29:e1:ef:cc:79:b3:b0:c6:
         b3:74:53:85:5d:d9:f1:11:ab:39:f4:cc:15:c0:76:5a:a5:8c:
         67:fe:64:e3:24:21:c2:ab:15:eb:61:65:11:24:1d:e0:bb:ea:
         96:f9:8f:86:be:5b:1e:b1:89:dd:e0:23:a1:cc:b8:9a:22:d3:
         9f:a7:2a:30:bd:16:c7:8c:29:f5:87:17:98:95:f6:80:cb:84:
         54:37:13:a4:28:f7:a7:91:c9:27:a2:af:6e:66:59:be:41:80:
         45:06:f1:ec:86:5a:1c:90:ab:7a:21:90:ed:8a:de:75:56:81:
         c6:df:d3:94:58:a9:d9:c7:74:08:df:c9:7e:0b:dd:c4:bb:b6:
         b3:df:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:00 2026 by rpki-client