Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
File:                     13BC244C61A311F0A6E3910CC4F9AE02.roa (raw, json)
Hash identifier:          z9OtL7U3CB/5ozZUGwNyYcBSH3P7Z+CB3gp0MBhd67M=
Subject key identifier:   8B:CE:49:72:26:01:CE:68:7B:F5:26:CB:D9:E5:28:4C:C8:D2:AA:1C
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       01FD
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
Signing time:             Tue 15 Jul 2025 17:42:29 +0000
ROA not before:           Tue 15 Jul 2025 17:42:29 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150661
IP address blocks:        103.48.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Jul 15 17:42:29 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68769304-72c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:1c:87:58:43:40:f9:db:4c:70:df:e6:2a:
                    e1:fe:b3:13:23:83:35:41:de:10:b9:8d:57:37:f6:
                    50:9f:a6:6f:8b:88:93:18:3b:73:8e:87:2a:1a:80:
                    ea:eb:31:d8:59:d3:69:fa:30:93:78:85:57:21:30:
                    b2:e6:77:b0:04:d7:8e:db:b7:51:ed:4d:82:09:37:
                    b8:2d:4a:02:85:6d:50:85:a9:99:34:10:74:ff:58:
                    73:f9:d4:cf:93:ae:cf:b0:0f:ed:b3:11:69:39:ea:
                    36:d8:4b:4a:57:72:86:3c:f9:08:86:c1:f4:c3:b4:
                    4b:02:f3:05:14:c5:2a:74:33:5b:33:f6:f1:d8:bb:
                    57:fd:a6:57:51:e2:79:fd:99:2a:11:aa:43:18:93:
                    3b:52:c5:2b:77:5f:87:37:1e:87:65:ba:64:2e:05:
                    90:af:a7:0a:f4:73:a3:82:74:9d:11:8b:f2:c9:2f:
                    46:75:40:7e:03:a5:00:35:07:bd:28:c2:2b:1e:bb:
                    c0:8c:4e:9b:5f:a2:fe:41:c3:f0:ea:d3:d4:be:0f:
                    5e:72:f3:6e:66:5e:bd:86:1d:af:08:e1:f1:2c:40:
                    47:69:25:d5:34:89:ed:b0:c6:45:e8:44:40:ed:d1:
                    92:db:c9:58:70:bd:1e:84:f0:59:2a:41:a9:51:d7:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:49:72:26:01:CE:68:7B:F5:26:CB:D9:E5:28:4C:C8:D2:AA:1C
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:4c:5b:cb:48:f8:96:04:37:e5:43:19:b6:ad:d3:eb:1f:
         20:35:fc:f4:51:ce:0c:1a:f7:c4:9a:90:1f:28:44:c4:15:14:
         b3:12:d2:00:28:84:9c:7a:46:6e:bd:df:56:9a:e4:51:5a:6a:
         52:79:71:36:a3:11:bf:ce:37:9c:0a:0c:f9:60:36:85:88:10:
         33:2b:dd:4e:0f:f5:ec:ae:3a:5a:31:de:e4:66:45:df:a9:37:
         14:f9:9f:24:d6:70:86:ad:79:f6:61:cd:41:7b:63:a2:d6:13:
         54:ce:0b:85:cb:8f:23:77:2a:0f:c8:70:23:0d:83:29:b6:2c:
         6a:80:39:69:04:92:9a:2a:86:a7:c2:09:2f:bf:e7:bb:bd:ff:
         9c:b5:6d:de:66:52:30:96:ec:30:0b:79:41:c7:81:df:d0:a5:
         d3:6a:28:af:da:8a:cf:d0:65:9a:20:c6:19:fd:5c:bf:50:d3:
         d5:81:ea:71:40:5a:3e:fa:b9:ff:7e:dc:f8:c7:7e:de:bf:8f:
         aa:f5:3f:31:c3:f8:4f:9e:88:41:73:de:5e:31:bc:94:6c:46:
         8f:32:7a:02:c5:43:5e:e0:23:2b:4c:42:93:90:96:f0:08:ae:
         d5:5d:39:c7:07:31:96:53:36:a3:9a:c5:c2:28:88:ab:0d:d4:
         3b:87:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:53 2025 by rpki-client