Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa
File:                     E48C805A9A7D11EF99ECF636C4F9AE02.roa (raw, json)
Hash identifier:          8gjKsYz7WG4pNJyUO7HEfsSkLwblJAwHtH8OBbO9vkU=
Subject key identifier:   07:E3:AF:9B:5B:15:FC:AC:FC:5C:F7:62:53:02:6C:C5:9C:65:89:E1
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       13AB
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 17:38:22 +0000
ROA not before:           Wed 18 Jun 2025 17:38:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     395793
IP address blocks:        103.116.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5035 (0x13ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jun 18 17:38:22 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6852f98e-e214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:46:37:d7:cf:21:08:10:b4:0c:99:b5:75:
                    db:9f:fc:53:b8:6b:dd:20:96:8a:6f:30:3d:c6:6c:
                    48:fe:32:d1:e6:a5:cc:b7:14:cf:0d:d4:07:01:be:
                    a8:ce:d1:14:b8:99:bf:ec:0a:6e:b0:dd:88:03:f4:
                    8a:1c:40:c1:98:e7:bd:5b:5a:f9:bf:c6:be:aa:20:
                    0a:93:d7:12:e8:d6:a2:7d:75:15:b8:5c:9b:c9:40:
                    0c:0e:87:a3:41:6f:2d:65:cd:b1:4b:b7:07:f7:71:
                    c9:bf:33:f6:01:75:08:c1:2d:59:1c:53:39:f7:7c:
                    a5:92:bb:5f:97:0f:08:f7:17:6b:8b:5e:36:72:36:
                    6d:0a:b1:45:8d:c5:41:d6:f7:be:9b:e0:90:32:b7:
                    bd:c2:30:a4:32:e4:c8:f2:85:bc:dd:6e:6b:4a:01:
                    b8:82:da:b6:e5:ba:cd:96:1b:33:fb:46:39:44:8e:
                    f6:19:b1:18:ad:23:aa:0f:82:72:17:2a:16:0a:c7:
                    e5:a9:78:a7:41:93:58:1d:35:de:bc:31:fa:27:2a:
                    fa:0f:8c:e5:b1:ce:34:f0:e3:af:84:8b:70:67:e7:
                    d1:a4:a5:9f:41:e0:40:28:db:ca:dd:88:92:b2:25:
                    49:85:35:b9:14:4f:ff:97:32:85:ef:c0:25:63:a8:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:AF:9B:5B:15:FC:AC:FC:5C:F7:62:53:02:6C:C5:9C:65:89:E1
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:24:09:8f:6e:f0:48:f7:c5:5c:e8:86:ab:98:c4:87:d5:
         e4:d7:21:e2:7e:4b:c2:19:76:99:79:6b:a6:69:f9:49:55:07:
         b2:63:f0:7d:14:cd:04:0e:35:f6:13:a2:ee:f1:da:81:e2:67:
         c7:bd:5e:a2:cd:e6:2d:83:50:05:6c:78:e4:b2:6d:e4:73:98:
         99:9f:be:3c:2c:66:4a:b0:5c:e6:0b:4e:0a:16:ee:b1:e4:17:
         42:ec:6b:2b:09:a2:fe:ae:06:35:9d:75:b6:3b:de:4f:0a:b0:
         1e:e1:ca:2f:6f:24:d5:4a:f5:b2:78:9a:5a:fe:17:31:4f:ea:
         20:a7:b6:52:73:b1:da:62:ca:df:0d:67:ee:8d:9b:37:31:60:
         be:e5:7e:bf:ba:04:be:a1:f6:2c:2b:57:1f:6b:bd:26:bd:f7:
         7f:d4:27:d0:a3:ba:2e:19:a3:8d:80:a3:17:dc:6d:e2:ae:fc:
         dc:19:7a:37:99:49:ab:72:37:e0:01:13:55:05:f9:ae:dc:62:
         d3:66:38:a1:8e:f4:c9:a8:23:b5:c3:30:c8:e0:8b:c0:e5:37:
         83:7e:fb:5b:72:57:83:2f:a3:05:ad:90:a9:99:b0:e7:e9:b5:
         f6:71:15:ba:89:6f:78:96:64:41:ef:59:52:9d:ef:25:32:17:
         1e:48:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:13:02 2025 by rpki-client