Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
File:                     28BC5490487F11EAB8C7545FC4F9AE02.roa (raw, json)
Hash identifier:          S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=
Subject key identifier:   A9:C7:C9:6F:84:D6:58:6A:96:E8:4B:DB:C3:11:3C:C5:28:70:04:A9
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E37
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
Signing time:             Sat 02 Aug 2025 18:27:35 +0000
ROA not before:           Sat 02 Aug 2025 18:27:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.141.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3639 (0xe37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Aug  2 18:27:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688e5897-543c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:66:0d:6f:ca:5a:bc:4f:0f:3c:46:e3:d3:
                    ca:6b:f8:6c:c6:ce:ce:87:2f:4e:85:d8:0f:27:df:
                    6d:b6:cf:85:b0:19:d3:bc:9a:05:70:22:ee:65:02:
                    95:10:24:b6:15:c7:f7:57:b2:59:6a:7b:2e:24:90:
                    7a:84:3f:a7:18:bc:12:60:76:1d:2c:45:ba:99:af:
                    29:5f:be:3f:0f:d3:97:d2:0d:7c:c3:d5:75:e5:1b:
                    c3:b4:27:13:cc:8d:81:95:a5:75:b6:05:4c:ff:4b:
                    6e:27:e8:5e:51:d5:e8:b6:27:51:54:88:28:9f:6b:
                    0c:13:79:2e:96:e7:4b:59:2e:fc:61:34:11:64:26:
                    93:e2:ff:35:15:6b:8f:8b:37:b2:5f:5e:64:59:ec:
                    fc:9f:b1:8c:ec:8d:9c:d9:a6:03:c6:2d:63:1f:c1:
                    ce:58:be:15:e3:02:16:a3:75:39:cd:2f:bb:f2:4c:
                    06:fc:df:64:be:b0:22:1a:5a:07:49:f3:d5:f8:b3:
                    87:0f:ed:cc:1d:df:05:8b:85:4c:dc:f3:e9:8f:73:
                    a7:d7:cd:75:69:bc:bd:70:ef:93:0c:bd:13:5a:8d:
                    0b:96:6f:be:ec:80:7b:91:5c:28:4f:b6:ba:ec:8a:
                    71:11:90:7a:09:70:60:03:cd:88:ed:cc:4e:30:48:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:C9:6F:84:D6:58:6A:96:E8:4B:DB:C3:11:3C:C5:28:70:04:A9
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:eb:28:5a:71:f6:c7:0b:7a:01:6e:62:80:37:1f:17:71:
         d2:ad:e2:a5:53:3b:6d:5e:8e:9a:3a:08:a1:e0:e4:00:ce:53:
         5a:8f:5d:45:a9:44:b8:eb:a8:b8:9b:78:5c:54:b8:13:7d:3a:
         d0:6e:eb:72:63:db:ab:5f:47:14:b1:f9:ef:7d:91:1c:b3:77:
         a9:33:2b:2d:3b:27:a0:ef:de:8c:cc:72:7e:13:e3:03:b0:75:
         38:ba:69:d4:1c:2d:b1:f5:f0:4a:a4:35:68:45:d0:c9:6c:6e:
         a9:93:25:f0:dd:1c:62:81:ec:bc:15:12:e6:3b:21:3d:21:09:
         ba:6c:a0:83:21:df:63:c8:7f:2c:25:86:13:d4:e4:47:49:d0:
         c2:41:7d:43:4c:2d:51:c9:c9:7c:6c:99:c6:52:4a:07:e3:0f:
         0b:7b:26:e2:0b:70:19:15:24:30:e3:53:0c:7f:3e:f7:da:c1:
         ff:c6:3f:58:27:20:14:05:d6:96:0f:aa:16:6a:39:2a:69:4e:
         f9:5a:58:84:cc:f9:45:13:36:26:b8:2b:b5:21:42:9d:35:77:
         c6:73:36:36:42:e3:bf:2d:51:ae:b2:fe:91:d9:1e:dd:16:f7:
         16:e1:92:ab:7f:33:22:92:bd:67:06:5b:5f:22:af:18:97:e6:
         75:d8:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:57 2025 by rpki-client