Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
File:                     62C86698F80A11EFA400AC2FC4F9AE02.roa (raw, json)
Hash identifier:          iou6EnoDniALad6Yrel3h0kHQ1grK3uoWpHvIkBO8LI=
Subject key identifier:   C9:DF:50:F0:36:E5:6A:A6:D2:00:04:FB:FF:D9:CB:00:84:C1:30:B8
Certificate issuer:       /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial:       78
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
Signing time:             Fri 17 Oct 2025 10:43:01 +0000
ROA not before:           Fri 17 Oct 2025 10:43:01 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137198
IP address blocks:        103.104.179.0/24 maxlen: 24
                          2001:df3:5700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
                          rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
        Validity
            Not Before: Oct 17 10:43:01 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=68f21db4-fa59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:e0:a1:a1:2f:da:f7:cd:f5:6b:b2:d7:fb:
                    19:5f:1d:f8:53:f3:ac:16:e4:39:e9:33:b5:9b:f5:
                    ca:e1:17:1f:5d:af:db:a4:be:fd:f4:06:67:16:94:
                    19:a4:41:79:77:da:3c:a9:f9:a6:94:67:d1:a4:4d:
                    ea:5d:0e:6c:17:e1:65:b5:66:c0:4c:8d:66:1f:95:
                    46:75:92:11:d6:ab:f5:0e:45:e3:37:fc:8c:18:d6:
                    be:68:af:5f:af:d5:b9:af:68:ed:2e:20:82:d3:59:
                    a3:b0:8c:b2:fb:65:a0:cd:38:ff:fc:c5:7e:8b:3f:
                    ea:e9:e2:26:7e:23:2b:f0:12:9f:5e:2e:cf:80:36:
                    8b:14:f3:5e:bb:51:49:2f:38:da:84:cc:44:eb:a5:
                    ca:7a:09:26:df:24:3f:ec:76:5f:30:a9:c0:6a:cb:
                    5f:f4:21:5d:bb:1d:c9:63:c7:ab:1f:ca:c7:53:02:
                    3c:3a:20:99:59:0d:9a:85:b8:c2:64:6a:9f:ab:01:
                    bd:be:5a:3b:c4:22:93:9e:67:5e:c8:10:d4:48:2c:
                    f1:ec:da:a0:c8:16:bd:ac:90:5b:51:41:2f:60:be:
                    08:90:ee:a0:9a:c4:bc:66:b8:bc:ee:0f:2e:21:3d:
                    07:70:fe:15:6b:1a:cc:f0:d9:bd:09:90:6e:de:99:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:50:F0:36:E5:6A:A6:D2:00:04:FB:FF:D9:CB:00:84:C1:30:B8
            X509v3 Authority Key Identifier:
                keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.179.0/24
                IPv6:
                  2001:df3:5700::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:dd:b3:7b:fc:21:d9:d6:0e:57:29:91:d2:2b:2b:e9:cd:
         84:d1:95:4f:1e:98:3f:5d:60:6d:9d:b6:2d:7a:a6:f8:32:15:
         55:59:51:54:20:c7:fe:3b:d3:c0:69:49:11:d2:a0:a5:a7:24:
         b1:f5:0e:0e:cc:34:fb:30:19:d9:be:76:e4:49:62:63:57:0c:
         6e:f3:b6:85:47:aa:9f:f4:8f:87:4f:31:a1:25:30:10:4f:35:
         0d:5d:60:d8:c0:c6:e2:1d:78:c6:f0:5b:b1:b8:24:ee:af:e5:
         08:2d:93:da:92:cc:84:3a:4a:7a:2e:a9:c0:ad:14:0e:03:ab:
         92:34:c3:b2:ad:af:2b:79:36:f5:1d:f7:f2:3c:61:16:3c:1a:
         87:08:95:f1:a5:b3:0c:4d:e6:3e:21:83:4d:3d:e0:a1:f5:37:
         db:b2:68:4c:73:cf:12:5d:f1:f0:8b:34:55:d8:bf:19:63:01:
         b7:75:5e:63:01:55:88:f9:2c:a5:6a:8d:d2:ed:76:87:9d:de:
         f5:a4:19:26:dc:d6:b8:9b:be:94:ea:fd:b8:1b:10:89:5f:3b:
         e4:06:80:fd:4c:27:8c:49:44:c3:ba:44:fa:db:e0:bd:6e:98:
         84:9f:66:39:ef:4b:df:54:f1:4d:02:34:06:cf:ed:db:64:2f:
         a9:41:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:49 2025 by rpki-client