Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/E1A91004624811F098E5B95AC4F9AE02.roa
File:                     E1A91004624811F098E5B95AC4F9AE02.roa (raw, json)
Hash identifier:          1N1Nu5pcKDFIroX+rvuJL8XDBkDXCgLTCUyWTqRqaG0=
Subject key identifier:   1B:EB:94:8D:33:73:F4:CF:8D:30:51:58:ED:B9:D3:91:13:03:45:BB
Certificate issuer:       /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial:       03
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/E1A91004624811F098E5B95AC4F9AE02.roa
Signing time:             Wed 16 Jul 2025 13:29:21 +0000
ROA not before:           Wed 16 Jul 2025 13:29:21 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135022
IP address blocks:        103.107.122.0/24 maxlen: 24
                          103.110.5.0/24 maxlen: 24
                          103.114.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
                          rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
        Validity
            Not Before: Jul 16 13:29:21 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6877a931-6234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:e3:7e:a8:69:04:d7:80:05:7e:31:b9:b6:
                    43:6c:fd:89:72:37:c3:4a:f7:26:eb:0e:0d:c9:aa:
                    e2:8f:6c:c5:e7:5f:3b:17:83:b0:b1:93:eb:9c:47:
                    8b:a5:5d:d1:be:d9:d6:01:d2:c9:65:3c:d2:3a:a0:
                    38:e8:66:25:0a:31:19:84:d0:87:bd:0f:39:84:7a:
                    b7:0f:5f:75:7d:32:a1:76:5f:d0:ec:da:8e:10:fa:
                    5d:da:55:6b:47:3c:07:68:fa:6e:65:39:47:72:40:
                    93:33:26:25:94:92:01:0f:78:d3:c9:04:8a:47:69:
                    95:89:27:3f:a2:5b:82:8d:f1:f8:4b:fe:33:0e:a6:
                    c9:28:1b:f7:ee:1b:15:23:9c:67:fb:04:97:30:15:
                    68:2d:54:bf:2a:aa:28:05:15:b9:03:f1:56:09:56:
                    47:4c:eb:64:f4:00:b3:7b:b9:bd:63:1a:6e:62:a3:
                    02:70:e4:06:c9:20:08:0d:08:77:64:72:51:3a:dc:
                    45:72:c7:6a:b8:b9:37:29:cb:d4:32:b9:71:fd:7f:
                    a5:8c:8d:13:fd:71:1d:8e:82:5f:2b:06:28:36:26:
                    96:f3:64:e6:39:a2:3a:8a:ea:70:07:2f:c3:e7:57:
                    34:46:a3:62:db:6f:65:9f:38:f2:47:1d:69:f5:cb:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:94:8D:33:73:F4:CF:8D:30:51:58:ED:B9:D3:91:13:03:45:BB
            X509v3 Authority Key Identifier:
                keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/E1A91004624811F098E5B95AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.122.0/24
                  103.110.5.0/24
                  103.114.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4f:77:c4:1c:22:ce:be:f9:04:c7:cc:fb:3e:22:2a:a2:22:
         11:9c:2a:34:60:84:6a:dd:58:42:ae:14:5b:93:1e:7d:7a:55:
         e4:d2:6f:9d:b9:92:a9:6c:15:b2:58:cc:9a:26:0b:9c:02:7a:
         7d:da:43:4a:fd:89:f0:26:bc:97:61:ba:67:b7:d3:2b:27:8a:
         af:ab:05:f4:b9:05:6a:3f:a8:97:33:2a:1f:4d:37:df:54:f6:
         7f:9e:77:23:70:03:52:38:0b:7e:9c:15:10:18:0e:b6:8b:45:
         b3:81:2d:94:4c:e3:67:3a:e8:cd:a8:d3:89:a0:85:fe:e8:5f:
         c1:35:85:1c:ad:c5:1e:48:0c:ee:bb:2e:fa:1c:4e:1c:4d:a3:
         b4:59:e6:17:3a:e9:1e:d2:2b:9b:6a:91:10:9a:c5:7b:50:b2:
         76:34:e6:e5:34:b9:eb:56:59:9f:58:69:08:e3:f8:b4:72:91:
         11:ff:62:a7:0c:83:68:9e:30:8a:1a:69:10:64:cc:af:27:13:
         24:57:0c:c9:0d:65:f9:21:f1:b3:8a:03:32:65:86:6b:11:02:
         1e:89:66:6c:6d:6c:d7:4e:ea:85:86:5e:47:ed:1b:ea:18:c3:
         50:d2:15:0a:27:57:62:56:d3:7a:e6:65:de:d7:35:c6:4a:65:
         4e:4d:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:33:21 2025 by rpki-client