Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
File:                     FC45B5BE63A911EF954C7983C4F9AE02.roa (raw, json)
Hash identifier:          cv8lvb3oUvoIw5frHTF3QZisdjvnnFPkeuOUYzWdt+0=
Subject key identifier:   63:5C:56:7A:71:65:BE:32:2C:4B:B4:54:6A:BA:3A:3E:35:AB:ED:D1
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       156D
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 17:24:53 +0000
ROA not before:           Wed 02 Jul 2025 17:24:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150001
IP address blocks:        103.114.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5485 (0x156d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Jul  2 17:24:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68656b64-313b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fb:20:96:a0:a1:e8:4b:de:8f:47:a7:d7:1b:
                    85:56:13:50:58:2d:e6:ba:a9:fb:b7:17:58:dd:ad:
                    a0:59:73:98:cb:68:13:f7:53:8b:48:c2:0a:24:37:
                    f6:83:82:ed:65:03:21:dd:7d:9a:42:f4:4d:c0:f6:
                    2c:16:53:2f:6e:b3:28:1d:39:05:2e:d5:38:05:d8:
                    29:13:6e:48:31:fc:2c:14:c2:62:3d:61:cd:93:00:
                    bb:a8:98:c4:b0:ce:63:57:b7:73:df:e7:0a:04:d6:
                    3d:ba:55:8c:d1:ad:9b:aa:00:55:cc:6e:e1:2d:85:
                    aa:eb:4c:43:95:ef:ca:bf:7a:b0:c4:cf:da:81:d8:
                    5b:a2:ae:e2:50:0c:38:bf:d2:7b:98:22:48:51:b1:
                    af:43:09:4f:dc:8c:21:af:b0:9d:20:e0:1e:7a:8e:
                    8c:9c:35:4f:cf:e7:35:6b:ca:0c:89:4d:fa:75:0d:
                    8e:44:b9:e4:d6:01:7f:c3:72:3e:cd:d0:aa:2e:e5:
                    76:56:25:73:31:99:95:e0:59:d5:9e:b9:cb:fa:60:
                    4e:7f:c9:72:63:96:ac:91:33:5b:e5:4b:22:be:0a:
                    08:3f:5c:7a:41:94:a0:1c:05:c8:3d:24:b5:db:7d:
                    d4:f3:8f:72:da:25:ff:fe:b5:9f:78:d7:68:91:ef:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:56:7A:71:65:BE:32:2C:4B:B4:54:6A:BA:3A:3E:35:AB:ED:D1
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:67:04:e1:eb:ae:cb:9d:70:24:9f:f4:38:a5:54:d0:29:67:
         47:d0:99:fc:fa:2c:e9:8a:6f:1e:89:5e:56:9e:ff:c4:43:5e:
         a7:8b:6f:82:a5:b2:53:3e:8f:00:36:34:76:88:1b:80:73:00:
         48:2f:69:96:2a:6f:0b:89:78:32:e7:d4:b7:51:34:f8:6d:15:
         88:07:04:77:51:de:e2:ac:6f:51:ef:1b:f9:8c:e2:95:45:a9:
         f6:93:9c:a2:54:75:7b:05:6b:ee:a0:27:8e:6d:b5:70:a9:8b:
         56:0d:74:5e:47:fb:83:c0:00:26:5a:8f:e0:d3:77:79:5d:e6:
         e2:d7:92:2a:97:76:f5:a5:55:22:af:61:98:3e:cd:e3:32:a5:
         41:d5:ed:ff:7a:b8:c0:54:24:4e:25:6e:1e:fe:da:40:34:87:
         b7:9a:5c:39:f9:f5:82:94:0a:64:f2:0a:37:60:f3:7b:9b:09:
         74:d6:2b:16:a0:37:2f:79:8d:e7:2f:44:37:34:b6:97:fa:34:
         4e:2b:94:c9:3b:7f:0e:fc:80:85:b6:6d:ba:7d:bb:4d:48:7a:
         13:21:fc:49:f5:eb:9e:54:eb:66:1a:19:d1:67:6b:0c:f5:df:
         65:bd:eb:b7:de:45:2a:d7:c8:43:68:4b:37:b4:b6:d3:2f:ef:
         39:cf:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:37:44 2025 by rpki-client