Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/E199AC0C34F211EEB22E7C6FC4F9AE02.roa
File:                     E199AC0C34F211EEB22E7C6FC4F9AE02.roa (raw, json)
Hash identifier:          8zqEQWI1w6Acg0Y6GNe0A6jcmkOuB5o9vI1Cd2RhRsE=
Subject key identifier:   40:75:92:EE:C2:E5:F1:9A:8B:1C:05:6A:CE:EE:8E:78:7C:F2:8E:00
Certificate issuer:       /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial:       016A
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/E199AC0C34F211EEB22E7C6FC4F9AE02.roa
Signing time:             Wed 09 Jul 2025 04:40:49 +0000
ROA not before:           Wed 09 Jul 2025 04:40:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141766
IP address blocks:        103.152.24.0/24 maxlen: 24
                          103.152.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
                          rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
        Validity
            Not Before: Jul  9 04:40:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686df2d0-4f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:c1:bb:47:ab:fd:aa:91:74:01:2a:fa:17:
                    b4:d7:f9:a6:77:0b:5b:c6:81:3e:09:ec:06:12:c8:
                    95:1e:5b:9e:eb:34:76:97:8e:6d:ef:f8:88:5e:23:
                    ea:43:0b:04:64:5a:35:e1:d0:33:e8:ba:19:e5:7c:
                    88:9a:85:36:a0:2a:4d:a5:ba:26:ee:99:a2:7d:3b:
                    6c:fc:d3:37:73:36:ab:6d:3d:07:76:b3:bc:4e:2d:
                    1f:75:2b:85:1d:d9:38:90:7b:4c:54:48:33:35:9f:
                    c5:fa:bc:0b:a2:fe:2a:91:82:e9:e5:62:fb:19:08:
                    7d:88:77:0e:05:ba:67:4a:ae:1d:08:27:ab:b6:9c:
                    82:b8:e6:c2:bc:a1:f2:ad:dd:48:51:7c:44:48:29:
                    41:b4:e9:50:b0:22:59:d0:fd:db:09:f9:d5:1d:1a:
                    5d:a5:0f:f9:5a:57:5f:13:84:90:09:af:2f:76:a8:
                    88:fb:13:f4:7a:1d:08:5f:bb:be:6c:f4:d5:9c:59:
                    0a:10:22:70:0e:87:45:30:3f:e1:12:90:8d:db:af:
                    c6:54:a9:d4:f0:68:e7:a1:a5:31:23:85:78:97:5f:
                    e4:c2:a0:06:e3:b4:be:3c:01:b1:5e:7e:a2:dc:e6:
                    08:05:0a:a1:fc:c8:0b:c5:aa:e2:02:60:ac:10:7c:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:92:EE:C2:E5:F1:9A:8B:1C:05:6A:CE:EE:8E:78:7C:F2:8E:00
            X509v3 Authority Key Identifier:
                keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/E199AC0C34F211EEB22E7C6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:d9:bf:b3:eb:a9:07:9f:d3:5c:5a:f7:18:23:84:e8:3c:
         fd:71:23:50:bd:7f:c8:30:f9:d9:1d:db:9e:0a:19:6b:08:19:
         54:b4:04:6f:98:ad:74:f8:cd:e6:91:1e:b4:ce:52:c6:10:ef:
         65:78:a6:d2:e5:a0:5a:6d:c3:85:9d:85:45:a1:40:3e:b5:61:
         58:bf:eb:43:84:4f:6f:55:04:cb:4c:91:b4:c0:f9:3f:f0:8d:
         49:cb:52:67:32:9b:d6:dd:01:a3:39:40:4c:9a:bb:23:96:79:
         b8:7f:4a:dd:3e:9d:51:1e:05:2f:96:1f:4b:77:59:80:3d:82:
         2d:4c:aa:86:12:ab:72:7b:63:c5:4e:47:28:6d:e7:21:9b:60:
         8f:63:e1:bf:a1:fb:79:21:af:ad:72:22:68:d4:7d:29:59:bb:
         25:39:c5:bd:33:b9:23:03:6a:17:28:8e:91:75:87:ae:e5:39:
         ca:70:45:7f:d5:fc:3c:67:2d:55:54:67:39:c8:c1:93:e4:e9:
         c9:b2:d9:03:58:d2:9b:b3:bb:81:f5:b1:3b:80:b1:c0:71:a7:
         4a:82:7f:5e:b9:4f:80:27:59:b0:f2:97:b8:f3:67:8d:12:66:
         a7:7d:13:b7:36:07:01:fd:35:a6:04:b9:ef:45:51:0d:92:be:
         51:25:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:31 2025 by rpki-client