Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/E62E8D50553A11EFB6BCFB83C4F9AE02.roa
File:                     E62E8D50553A11EFB6BCFB83C4F9AE02.roa (raw, json)
Hash identifier:          uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=
Subject key identifier:   07:ED:7A:1A:1A:91:4C:93:A3:C3:A7:6A:A6:B4:47:89:B2:EE:60:59
Certificate issuer:       /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial:       E4
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/E62E8D50553A11EFB6BCFB83C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 06:34:17 +0000
ROA not before:           Thu 09 Oct 2025 06:34:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55803
IP address blocks:        103.141.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl
                          rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
        Validity
            Not Before: Oct  9 06:34:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e75769-9a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:59:a0:f1:34:ee:a7:fe:5a:25:9e:88:f6:
                    07:c1:02:de:a2:b2:d1:7d:b6:05:dc:87:d0:cd:29:
                    a7:85:e8:a5:53:6a:d5:12:6c:bb:6a:88:13:5a:43:
                    dd:eb:73:ab:54:71:92:90:be:77:04:07:86:2c:f4:
                    43:b2:e8:b9:9f:22:22:f9:90:c9:23:d4:5a:27:f2:
                    04:47:c3:b0:93:dd:8a:d9:36:6c:4b:82:ce:b8:92:
                    a9:35:0b:4e:40:eb:a3:fa:f4:c9:7e:97:7b:03:42:
                    fa:b8:db:1a:8a:70:a2:12:4f:cb:3f:1f:05:21:3b:
                    96:be:d3:ec:87:4e:b9:aa:46:17:64:18:85:e9:56:
                    93:8c:5d:dc:19:12:26:b9:f2:40:5e:a9:b1:4f:e4:
                    9a:9f:a0:ca:9e:4b:f1:8a:1d:7c:1e:a9:29:07:74:
                    c3:20:38:49:63:56:74:5b:82:ad:05:35:61:d8:9a:
                    ea:c7:03:7d:59:fa:92:e0:92:b0:dd:1a:40:47:41:
                    ea:db:ee:af:7f:f0:1f:00:9b:8d:67:80:56:16:f7:
                    36:e4:09:e7:0c:f8:1b:85:7e:d7:e4:fc:61:59:86:
                    b6:c4:3d:fe:5e:65:b4:61:03:c0:37:31:0c:cf:b7:
                    d8:fe:a9:9d:d4:d2:9a:99:cc:2b:71:90:3b:ec:47:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:ED:7A:1A:1A:91:4C:93:A3:C3:A7:6A:A6:B4:47:89:B2:EE:60:59
            X509v3 Authority Key Identifier:
                keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/E62E8D50553A11EFB6BCFB83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:3d:4f:22:7b:66:56:19:bb:d2:2c:22:c8:a6:83:8d:bc:55:
         00:3c:15:0a:c0:12:6a:63:62:db:94:02:1c:9a:99:44:cb:4f:
         18:22:fb:2b:80:02:c4:d0:ea:b3:4b:77:a2:5c:30:b8:4c:75:
         41:6f:1a:68:6d:3a:eb:bd:cb:b4:4f:f4:1d:62:1c:f7:14:49:
         5a:c9:43:03:51:c0:78:62:23:49:a5:97:2b:59:62:30:89:be:
         cc:d9:f3:05:7d:4d:1d:a7:a1:f1:6a:43:fe:ab:8d:48:f3:06:
         51:54:5f:cd:fb:bc:37:e5:ea:6e:92:95:51:83:2d:d0:31:ac:
         c6:41:55:75:b3:3f:83:77:7c:1d:72:df:ed:5b:f8:8d:3c:14:
         ec:24:4c:74:d0:d6:ce:9f:d1:94:ae:6e:bf:a1:d1:72:d2:f8:
         a0:d1:8e:30:4d:e7:12:ca:bb:fb:58:b7:20:29:b0:be:b4:4c:
         79:25:65:c7:4b:58:13:7a:ec:06:d9:9a:8f:24:1d:fe:bd:a0:
         74:1e:28:6e:d1:7e:57:4c:c5:ec:b3:99:b5:47:ac:7c:25:ad:
         ae:f5:bc:61:4e:b1:a2:e9:52:17:e8:14:05:a2:32:a1:8d:ff:
         fe:dd:e5:9b:39:d4:b7:9a:5e:64:b3:f3:12:aa:f5:6d:ef:27:
         64:23:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:03 2025 by rpki-client