Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
File:                     B69382D2CCC911EBB3A3513CC4F9AE02.roa (raw, json)
Hash identifier:          HE6I/F13bN4XohmVDBqxBCGNwt3v/V2iNwzXes290uY=
Subject key identifier:   87:83:1B:C9:CA:7E:81:F0:C1:6F:4A:4F:BF:8B:25:A5:AB:4F:1D:94
Certificate issuer:       /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial:       05DC
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
Signing time:             Mon 28 Jul 2025 23:35:31 +0000
ROA not before:           Mon 28 Jul 2025 23:35:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55567
IP address blocks:        103.1.7.0/24 maxlen: 24
                          103.231.159.0/24 maxlen: 24
                          103.231.168.0/23 maxlen: 24
                          202.61.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
                          rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
        Validity
            Not Before: Jul 28 23:35:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68880943-4049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:25:98:63:84:6f:63:9a:a8:dc:cf:78:39:
                    ee:4c:4b:be:45:af:2a:f3:5d:ca:ea:e4:0d:ea:24:
                    9b:29:63:21:56:03:ee:a3:47:90:f0:1a:56:8c:08:
                    85:ba:9a:53:e0:6b:89:1e:2b:b7:f9:47:55:6e:68:
                    1b:3b:6f:ee:51:46:50:e3:33:63:a2:9e:35:4e:36:
                    2f:e0:49:92:f2:57:b3:64:4e:bd:73:ee:50:85:a3:
                    0b:8d:80:00:0a:77:41:fe:f6:7c:a6:98:d9:f4:74:
                    d9:d2:be:02:14:b2:57:53:19:25:8f:d2:1c:dd:cf:
                    63:48:51:ab:a3:2d:f3:59:40:75:8e:d0:69:a2:16:
                    d1:50:df:29:3a:a9:81:71:3c:a6:ff:e6:86:0b:c9:
                    f3:69:15:fd:a4:90:c9:ce:74:f4:ec:ec:6e:e3:71:
                    3b:75:3e:ec:f4:d5:70:86:66:bc:81:2a:16:80:14:
                    7c:6b:30:49:f2:41:9c:4e:61:42:f7:62:00:97:01:
                    8c:61:e0:ae:a2:10:05:54:3f:f1:25:02:46:c0:78:
                    52:9b:01:eb:49:db:32:96:17:b3:ae:32:0f:b2:b0:
                    42:98:f4:6c:2a:76:68:ca:93:a0:ff:06:36:60:c8:
                    d8:7b:d4:d0:85:d8:fb:f5:f6:60:9b:12:99:60:c6:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:1B:C9:CA:7E:81:F0:C1:6F:4A:4F:BF:8B:25:A5:AB:4F:1D:94
            X509v3 Authority Key Identifier:
                keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.7.0/24
                  103.231.159.0/24
                  103.231.168.0/23
                  202.61.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:e8:35:38:a1:28:11:9a:51:cd:87:b7:27:31:2f:bf:62:
         03:fc:89:a4:71:1d:84:90:9f:19:0e:02:2b:b3:a7:6f:d9:71:
         0e:13:c0:77:8e:89:3a:2c:f6:3a:18:35:8c:0a:a1:42:a2:29:
         74:28:27:95:25:1a:29:59:04:58:9b:50:ca:43:13:0c:8e:9c:
         80:38:a1:14:bb:dd:49:7d:c2:8c:08:2b:9b:df:69:19:94:ad:
         07:69:0e:20:8d:57:70:fb:07:5f:4e:0c:ae:ed:ee:46:02:08:
         19:cf:40:8d:16:ca:79:92:68:fd:9e:0c:37:49:7e:3e:20:de:
         34:85:73:94:88:b5:09:0e:fe:63:6c:36:f7:0b:b4:ff:96:a7:
         77:33:80:d0:20:41:09:fc:1e:8b:bd:91:a8:9e:08:f9:3f:42:
         63:ac:ad:06:f9:3b:30:9c:2b:26:50:d6:0c:b7:2c:18:14:d7:
         78:b9:e6:29:17:1c:ef:9c:b8:26:55:94:25:33:a3:f1:f2:91:
         dc:b0:90:17:2e:47:95:17:cd:42:7c:63:52:69:1b:a7:82:89:
         f2:2c:83:aa:e6:97:da:40:e0:e0:9f:d4:66:6a:08:b2:7d:26:
         d9:78:fb:ac:5d:8b:ba:0f:8b:e7:76:e3:e0:43:d2:77:4b:a0:
         23:fa:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:34 2025 by rpki-client