Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
File:                     62C1F5587ACD11E9AC0A867BC4F9AE02.roa (raw, json)
Hash identifier:          zJtFuv9ERKF2VcP0kXnp4PcKZFEJbjxQnX3bWZEEZas=
Subject key identifier:   D5:54:BC:EB:E3:C1:44:70:9A:89:E4:63:D8:B6:97:5D:AA:96:93:FF
Certificate issuer:       /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial:       0F2C
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
Signing time:             Wed 14 May 2025 18:30:23 +0000
ROA not before:           Wed 14 May 2025 18:30:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139024
IP address blocks:        103.138.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
                          rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 18:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3884 (0xf2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
        Validity
            Not Before: May 14 18:30:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6824e13f-9239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:3b:fd:03:dd:a2:8a:2f:fd:3f:74:76:2e:
                    53:c0:a2:fb:15:14:af:07:b4:3b:e4:39:f6:cb:3c:
                    34:b7:ca:b5:1f:ed:13:ff:7d:bb:3d:ed:72:f8:45:
                    54:78:56:2e:52:aa:f7:20:2b:ab:80:0c:08:19:68:
                    02:88:1c:ad:d9:83:fe:07:9f:3e:10:70:cd:3c:6d:
                    db:ab:58:cf:eb:d7:e9:25:9e:ec:c8:22:ae:11:4a:
                    b7:30:c4:a2:2e:12:f1:d2:ce:53:db:95:ea:d2:5b:
                    3f:88:f0:50:89:ea:d2:8b:7e:cd:45:d7:a4:1f:94:
                    3e:90:39:51:80:b2:d6:9a:55:7c:7b:f3:4c:3d:be:
                    b0:d9:71:e6:cb:a4:b4:2d:bb:ee:4b:35:91:62:09:
                    62:47:1a:36:d2:c3:2e:b4:e4:51:25:4d:99:62:b4:
                    f0:5d:3c:e2:e0:a4:8e:e7:85:fa:1b:8e:1c:73:88:
                    ef:86:79:8c:69:97:1f:75:e9:dd:3e:b5:2f:81:3c:
                    cb:37:27:33:8c:24:63:c3:4e:2f:41:36:eb:5c:ca:
                    a6:ed:fb:d1:5f:b3:1d:7f:1f:7b:a7:e8:80:09:cd:
                    0c:65:81:f5:8e:5b:77:7a:e6:a4:06:0e:3c:c1:70:
                    c6:8a:bb:39:db:c9:49:b7:87:94:6c:9e:b8:5c:dc:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:BC:EB:E3:C1:44:70:9A:89:E4:63:D8:B6:97:5D:AA:96:93:FF
            X509v3 Authority Key Identifier:
                keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/62C1F5587ACD11E9AC0A867BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:95:25:44:87:a5:fd:a9:f9:31:20:07:28:9c:56:1e:1e:ac:
         de:27:81:5e:a8:c9:dd:67:55:85:58:f2:1c:3c:c2:80:87:18:
         e5:24:20:7a:f1:e1:b2:42:c6:64:a9:74:87:cf:70:69:b0:c2:
         fa:eb:40:3d:e2:70:cc:af:80:c1:e5:9a:e8:1e:1c:b7:74:da:
         a8:05:30:32:a8:c4:df:45:e3:eb:8d:ad:e3:a5:04:e0:b2:90:
         75:dd:a2:29:a0:e2:20:5f:71:e9:84:30:39:c2:32:f4:97:33:
         c4:1e:62:7e:40:26:8e:d7:f7:10:7c:fb:3f:76:55:33:c0:6c:
         6c:1f:2b:72:4f:12:1b:0f:7b:38:c3:a0:4b:aa:3f:de:a4:fb:
         9c:6b:f3:56:c3:6d:5f:f3:96:d4:8f:d5:7c:84:ef:29:69:23:
         15:e6:49:12:b1:08:30:d6:63:d3:5a:a4:3d:71:88:e8:cb:4b:
         29:0a:28:0d:f3:24:f4:dc:b8:8f:b8:fa:23:7c:45:e6:b3:68:
         04:cf:1d:81:a9:d3:95:7a:25:2b:8e:3b:3e:9b:3d:1e:ed:4d:
         b3:e9:b4:eb:61:15:d7:78:6c:cd:da:2b:1c:77:17:b6:43:4d:
         f3:6c:ee:fb:e2:ab:b5:29:8e:2c:d3:72:bc:eb:44:e3:8a:7e:
         a1:26:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:04:02 2025 by rpki-client