Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa
File:                     E62BCC784C9211F09A2E3014C4F9AE02.roa (raw, json)
Hash identifier:          e/qoVpmKt8fCZimHa48idWx8ZDlS0KQsXYwTkjXC6NI=
Subject key identifier:   E3:11:63:C9:AB:37:42:E3:6F:65:24:C3:D2:92:5C:EC:D9:B5:AA:00
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       11
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 22:23:46 +0000
ROA not before:           Wed 18 Jun 2025 22:23:46 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     141392
IP address blocks:        103.158.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Jun 18 22:23:46 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68533c72-7a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:11:3e:9b:c0:17:38:89:05:ad:47:3d:48:
                    b7:1d:cf:a8:db:e1:eb:c0:3f:1c:d0:9b:19:2b:14:
                    36:19:02:0a:54:51:24:23:0c:b9:95:e1:7a:b2:13:
                    67:ca:97:0a:78:ab:8d:77:ee:ea:bb:51:aa:cf:58:
                    c1:81:f4:29:96:ec:c0:01:2f:b6:92:af:c2:3c:08:
                    e7:7f:96:1f:77:02:53:1a:9c:43:eb:b9:99:37:f7:
                    89:5b:94:fc:6a:e9:5f:af:4c:91:57:49:54:52:2f:
                    d8:e0:14:ad:28:de:a4:6d:47:6c:3d:07:68:bc:0f:
                    e9:80:3c:4a:01:40:44:16:e0:82:37:a9:35:b5:3f:
                    a9:b7:fd:21:77:90:fe:5b:12:42:8d:15:f3:f5:2c:
                    02:f7:4a:d8:3e:7c:24:79:cf:8e:c3:41:0d:28:d8:
                    a6:a7:65:7e:11:59:0f:06:c0:97:e8:3a:bd:f0:0d:
                    d6:70:e1:1e:51:29:3a:a4:73:3b:1e:41:67:f2:5f:
                    de:da:25:cc:4e:1d:1a:a9:df:bb:5e:44:7f:6c:64:
                    5e:2f:e3:21:dc:ae:a5:7b:2b:c2:04:25:ca:18:cd:
                    20:64:5a:a1:d2:a7:9b:c4:ff:a8:95:40:d0:c8:f6:
                    e9:46:55:57:6b:9e:0b:fc:54:7c:c5:f6:d9:14:70:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:63:C9:AB:37:42:E3:6F:65:24:C3:D2:92:5C:EC:D9:B5:AA:00
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:02:53:37:79:87:c2:ef:53:21:2a:5a:4c:f9:fb:4a:a3:
         b9:19:e2:b4:2b:61:e4:49:e1:c9:6d:e0:c9:d9:84:fb:f1:38:
         68:c9:3d:72:0b:a7:46:37:23:04:48:43:83:0f:87:0d:15:ee:
         93:95:17:b9:ac:96:99:62:ac:a5:01:bb:e7:b1:f6:17:75:94:
         ff:68:40:3d:f2:96:1e:41:9e:7a:c8:ea:13:7c:39:9a:5c:99:
         b5:91:b3:ca:6c:98:17:8e:c0:e9:dc:0f:a6:08:ee:dc:77:bb:
         04:a4:7c:97:f2:b9:f3:bc:05:41:f6:d8:e7:8e:e7:25:ba:bd:
         62:bd:c6:00:f0:af:a9:7c:1c:07:5d:2f:26:95:b9:89:d2:14:
         5c:70:ca:17:66:c8:fc:b7:82:b3:2a:21:ee:bd:9d:41:3c:50:
         e6:34:e1:fe:bb:c9:10:f2:ae:05:fc:33:ed:35:18:4e:d7:37:
         47:9d:bd:ec:9d:8e:2d:2b:72:8f:5a:35:25:a8:ac:6b:7a:d3:
         00:51:11:fe:aa:5e:ff:8c:fb:fd:b0:07:eb:3b:15:5a:46:cc:
         80:9f:c0:e9:5a:65:be:b8:e6:d2:d0:95:78:6a:d5:60:ee:f1:
         bc:4b:ca:bb:83:5e:1c:4a:31:90:bb:71:58:06:30:81:d8:63:
         03:bf:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:02:52 2025 by rpki-client