Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/62A9A9AC240A11F0A6893962C4F9AE02.roa
File:                     62A9A9AC240A11F0A6893962C4F9AE02.roa (raw, json)
Hash identifier:          u7hN3LaHpP2Ln4sXR3bb/0qJyMn/y5kDAuAzcgYeb9k=
Subject key identifier:   2A:5F:EB:B2:10:1D:41:87:DB:84:F6:35:1D:9D:39:D6:04:27:63:0E
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       0163
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/62A9A9AC240A11F0A6893962C4F9AE02.roa
Signing time:             Mon 28 Apr 2025 08:28:14 +0000
ROA not before:           Mon 28 Apr 2025 08:28:13 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142647
IP address blocks:        103.186.76.0/24 maxlen: 24
                          103.186.76.128/25 maxlen: 25
                          103.186.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 07:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Apr 28 08:28:13 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=680f3c1d-02c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:5f:99:48:2e:c2:79:b6:a1:51:6e:b6:e4:
                    2f:63:8a:dd:25:8e:12:37:80:e0:95:fb:26:9f:73:
                    98:07:d0:b4:b4:5d:ac:15:a9:98:f4:5c:a6:50:62:
                    de:7a:1e:15:82:99:1d:c5:3e:9d:99:43:be:f4:db:
                    00:bd:b1:4d:80:24:ab:df:dd:58:3b:a0:bb:6b:87:
                    3c:ac:fb:fb:19:66:df:7b:eb:17:6b:ef:01:a3:b8:
                    c1:cd:43:14:28:28:32:14:1d:1e:40:9a:99:ce:82:
                    34:42:b1:e9:27:82:e1:b6:8a:6a:ab:aa:f1:af:ba:
                    9d:23:62:f6:b2:5c:9e:d9:7c:64:46:4a:89:16:db:
                    76:7a:6a:6a:00:91:42:98:7a:bc:93:4d:31:53:18:
                    9c:c7:35:6a:48:c1:1f:54:61:66:0f:c2:14:8e:76:
                    bc:0f:52:fd:61:40:99:3c:e3:ef:aa:5a:f6:d5:6c:
                    83:cc:1a:f5:67:20:c1:11:8b:6c:b0:e6:ee:2c:64:
                    7d:e5:f7:70:cf:53:28:16:fd:4f:73:10:7a:f7:80:
                    9e:62:e3:8d:d6:c1:e2:fc:54:10:66:7f:89:c0:f4:
                    c9:08:fe:1a:5e:8c:d3:61:4e:84:d3:a2:a5:52:f7:
                    dd:21:e5:b1:fe:13:0b:ce:b2:6a:3f:02:fd:a8:c2:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:EB:B2:10:1D:41:87:DB:84:F6:35:1D:9D:39:D6:04:27:63:0E
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/62A9A9AC240A11F0A6893962C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:2a:46:cb:cb:db:4c:02:0a:46:84:29:20:ab:d8:0b:5c:
         20:08:30:b8:14:4a:1a:61:da:23:b4:c2:04:50:4d:35:2f:e7:
         ed:43:17:9d:d1:15:f4:8b:f8:70:6c:6e:19:33:0d:52:c7:96:
         39:01:87:10:13:2e:8b:33:66:75:3e:32:12:38:e3:1a:37:d5:
         e1:09:d4:f3:17:fb:a5:e9:e5:67:d0:91:51:76:2d:5c:43:12:
         e9:af:53:76:8d:2c:4f:4b:95:8a:79:d7:d6:21:f7:dc:25:21:
         14:94:e0:15:5d:f8:b1:2e:71:78:cf:ee:53:8b:da:19:71:92:
         2c:66:7f:92:60:5e:73:2e:a6:19:d0:51:8a:c8:d3:8e:46:60:
         78:5c:40:25:de:2d:6d:ef:eb:fa:3f:8f:fa:78:f7:d0:49:0a:
         bc:c6:e8:da:fa:a1:56:a8:e7:cb:9e:b0:b8:72:71:ae:95:88:
         a4:d0:34:be:40:31:6b:7c:fa:92:76:39:ea:85:de:e0:fd:a7:
         17:ec:c3:2a:06:6b:d9:1b:60:6f:eb:b7:5e:0c:a5:52:2a:e4:
         85:23:b8:f8:78:87:1b:29:8a:07:b5:f4:1b:51:20:8d:b3:10:
         6b:7a:5f:b4:50:58:71:97:2d:89:b1:11:cb:44:96:57:60:e5:
         88:2d:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:55:31 2025 by rpki-client on console.sobornost.net