Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/62DD62F6D09111EE87557671C4F9AE02.roa
File:                     62DD62F6D09111EE87557671C4F9AE02.roa (raw, json)
Hash identifier:          tESfigm6uCg6kmhNClp33+JoxDJdMfqtK4LmwCimB8o=
Subject key identifier:   96:03:8F:24:F4:90:BC:E8:F9:77:4D:27:3E:8B:0D:8E:1E:08:35:A4
Certificate issuer:       /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial:       01D1
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/62DD62F6D09111EE87557671C4F9AE02.roa
Signing time:             Sat 27 Sep 2025 03:31:42 +0000
ROA not before:           Sat 27 Sep 2025 03:31:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     64072
IP address blocks:        103.69.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
                          rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
        Validity
            Not Before: Sep 27 03:31:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68d75a9d-370d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:02:d2:59:e9:7b:ef:14:39:4e:77:26:d6:
                    96:3f:b9:88:a1:86:67:d0:66:20:67:90:74:cd:6e:
                    9f:ca:b5:bd:cd:f0:10:0c:b4:a7:28:2c:13:68:b3:
                    4e:8b:44:b6:1f:db:3e:f1:d8:20:b5:a8:96:c2:bc:
                    0f:b6:6a:98:13:ed:dc:a3:0f:2c:00:0f:3b:fa:27:
                    e8:db:cc:f5:2d:9a:64:a5:e0:d4:67:14:57:e8:c3:
                    c0:9e:6b:fc:70:a2:4f:9f:0b:a8:84:a0:c2:4a:0d:
                    9d:4b:a9:cb:1f:db:fd:c2:1f:5d:8c:c9:c3:dd:54:
                    71:93:ee:5f:ce:80:15:a3:8a:34:56:23:cf:fd:07:
                    dd:b2:d5:ab:60:b0:84:8e:36:f7:9a:00:79:2c:50:
                    eb:70:61:f9:cf:8e:d8:99:97:c2:a5:bd:4f:77:de:
                    f9:e8:10:c6:e1:d6:fb:ca:e4:32:e7:1c:e9:4d:75:
                    ce:12:07:c0:13:ed:e6:00:ad:56:9e:c3:d9:24:57:
                    d9:9b:5a:b9:f3:78:97:3d:a9:2c:53:f1:b9:56:9e:
                    df:9b:56:f3:f9:8a:34:7c:70:ea:1e:32:b4:fd:ae:
                    eb:09:b6:94:8e:6d:64:3b:b4:7b:e6:c0:1f:e6:73:
                    57:73:ea:cd:27:72:7a:ea:e8:8b:e2:ee:b3:46:91:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:03:8F:24:F4:90:BC:E8:F9:77:4D:27:3E:8B:0D:8E:1E:08:35:A4
            X509v3 Authority Key Identifier:
                keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/62DD62F6D09111EE87557671C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:02:cb:6b:da:a5:52:b5:1d:0e:05:b7:4b:46:95:45:ef:c3:
         75:05:f2:91:c1:26:d7:fc:c5:a7:4f:c6:8c:13:71:d1:c1:e9:
         30:e4:d6:b6:96:a1:da:7d:d5:58:71:cd:b2:1b:3e:de:a1:8b:
         df:f3:e3:41:ad:c9:c0:17:bb:db:24:28:27:81:5a:06:7d:af:
         e0:85:0d:e7:59:13:92:b3:b9:1b:4c:df:af:9e:64:6a:39:fe:
         81:fa:8b:3c:d1:91:5f:11:7a:a6:42:20:65:e5:a9:e9:c9:73:
         87:81:d5:1c:97:b7:1d:35:44:93:81:2a:8b:0d:49:fa:15:cc:
         9d:75:bc:08:26:27:a3:39:15:ba:f6:08:82:1e:be:71:78:f3:
         f8:b7:89:bb:49:0e:23:3d:e6:37:64:fc:9b:8b:34:58:64:f1:
         2c:63:8b:4f:44:92:91:4b:83:1a:d3:ee:a3:fb:8e:e2:04:0a:
         f5:69:ba:88:d9:94:78:23:9d:d0:5f:b4:1f:ce:69:32:c9:5c:
         8c:0c:41:b5:80:81:48:4d:50:34:b0:95:07:ab:e0:bd:7f:84:
         72:17:ac:90:af:ea:3f:ad:a5:79:24:95:01:77:60:ae:4f:2e:
         6e:ba:24:87:1d:83:22:d7:9b:31:bc:19:dd:47:4b:cb:e7:97:
         0b:06:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:30 2025 by rpki-client