Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
File:                     62B575B8104C11ED8CE56267C4F9AE02.roa (raw, json)
Hash identifier:          ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=
Subject key identifier:   3F:28:D6:C3:7B:6C:BA:DD:39:0E:A8:48:75:9B:EA:17:22:DF:D7:BE
Certificate issuer:       /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial:       029E
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
Signing time:             Tue 05 Aug 2025 02:40:39 +0000
ROA not before:           Tue 05 Aug 2025 02:40:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150116
IP address blocks:        103.191.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
                          rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
        Validity
            Not Before: Aug  5 02:40:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68916f27-7d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:70:46:f5:a1:61:77:6d:51:7e:69:a4:00:
                    27:b3:8c:0f:7a:4d:d0:83:72:eb:3a:bf:d0:42:c4:
                    9e:cb:88:0e:39:6b:5f:87:60:04:bf:a4:75:cc:f1:
                    7f:0b:05:fb:d3:73:1d:c9:d5:63:96:d5:8d:0c:7d:
                    86:1f:52:2c:93:d4:b2:38:80:bf:42:69:b4:db:71:
                    3b:2a:fc:67:bf:6a:2f:ba:37:9b:18:94:50:fb:76:
                    8a:2c:47:24:d0:03:ec:28:84:dd:09:f5:95:9e:ff:
                    3f:57:08:87:9c:78:ce:89:38:1f:db:5e:c1:b7:3e:
                    f4:22:15:ef:44:72:da:e9:53:cd:2c:48:38:29:d8:
                    9d:9a:89:49:a7:b3:79:d8:2d:74:10:90:61:26:c1:
                    69:71:71:b1:ac:cb:d0:fb:8b:4e:63:7d:ae:d8:6b:
                    88:14:5e:83:f8:95:f1:92:e8:9f:d5:73:3c:16:f9:
                    65:a6:af:8c:7b:b4:7a:1e:f7:e5:df:b7:79:47:6b:
                    f5:cf:c0:e3:4b:da:00:bf:4e:32:a7:13:a7:a5:8b:
                    c3:4e:71:41:72:b0:f8:d4:73:24:9a:e6:ce:6a:06:
                    52:0d:0d:d1:11:cf:7e:44:ee:e1:6e:e5:eb:8d:95:
                    7d:7d:f7:15:03:f8:02:72:a2:ca:33:5c:f0:21:4b:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:D6:C3:7B:6C:BA:DD:39:0E:A8:48:75:9B:EA:17:22:DF:D7:BE
            X509v3 Authority Key Identifier:
                keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:7c:5c:1a:42:b9:1e:75:89:f2:75:fc:a6:13:17:d6:be:aa:
         a2:09:b3:78:56:3d:4e:f1:80:d0:97:b3:85:62:58:26:ab:c8:
         a3:4d:e5:7f:6c:e9:53:ea:98:80:9d:12:a8:e8:f7:b6:4b:7d:
         4e:64:c4:e3:f7:17:ea:98:af:8b:69:6d:df:35:d8:a9:c3:c7:
         c2:11:93:7d:75:d7:e3:13:f9:51:7c:d1:58:72:cb:95:1a:0c:
         96:76:fc:d6:61:ab:a3:b2:f1:4c:e6:d5:0d:d0:08:6b:14:be:
         da:c8:97:e5:fa:d2:8d:7a:bc:f1:f6:d1:f2:ec:4e:51:5e:8a:
         43:ec:69:c1:2d:11:c1:20:00:a5:10:3f:42:a9:08:17:5a:36:
         9a:ce:fc:77:5e:91:02:d2:c4:48:f0:c8:f5:64:2b:6e:99:92:
         85:06:59:f6:e2:78:ad:e8:d5:0a:8a:34:2d:19:76:be:45:33:
         6c:2b:8f:a9:41:a4:4e:7f:36:a7:65:99:55:83:1e:7f:0e:e8:
         2a:d1:82:c9:4a:b0:76:cd:e6:69:40:35:c5:10:a0:73:a7:fc:
         99:3d:76:42:1d:3b:4b:66:56:ad:d5:76:7a:2f:f5:b8:54:c9:
         17:8e:7c:02:6c:48:89:93:71:26:a0:a6:fc:d3:d2:d0:c6:5e:
         84:ca:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:13 2025 by rpki-client