Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
File:                     0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json)
Hash identifier:          +vGM/9CgyibDa8IJ1wrnXBZP0xMzNOinRMgn92r9zxY=
Subject key identifier:   13:2C:9F:3A:B6:F7:2F:65:4E:55:20:92:81:16:8E:50:CA:F2:9A:58
Certificate issuer:       /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial:       0490
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
Signing time:             Wed 29 Oct 2025 00:13:54 +0000
ROA not before:           Wed 29 Oct 2025 00:13:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     10021
IP address blocks:        103.173.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
                          rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
        Validity
            Not Before: Oct 29 00:13:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69015c41-6835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:f2:d5:b5:57:b8:70:82:68:6b:54:5f:20:
                    78:6f:5c:21:ba:5c:db:24:4f:39:46:73:f0:7b:c9:
                    16:f1:c2:bc:b4:19:c0:76:26:d1:07:65:d5:15:c2:
                    c5:51:68:08:19:81:c8:1f:df:7e:71:d8:87:f1:71:
                    19:c3:8f:d9:a9:59:e4:2f:ab:49:d6:40:01:47:81:
                    66:10:83:90:4c:1e:f5:d1:49:33:3c:55:14:d0:9a:
                    ca:b7:e3:4e:87:36:3e:1a:e9:f6:be:68:79:db:4c:
                    86:9e:cb:b9:38:c5:9f:26:d0:c2:c5:ac:ca:9d:04:
                    df:43:af:e8:c6:a0:2d:f8:50:7e:d3:57:b8:c0:27:
                    5f:30:c2:76:89:d3:6e:94:09:75:a2:98:0a:9e:ae:
                    a2:b4:c6:70:60:6e:cf:5f:6d:29:db:7e:3b:f6:4a:
                    c3:ef:a7:a8:5c:76:33:3c:22:9f:cf:ad:21:7a:07:
                    da:fd:14:a3:7c:aa:1d:3b:d8:55:84:fc:97:ac:6a:
                    df:5c:9c:24:1f:4f:e6:7e:16:c4:6a:26:67:eb:2b:
                    70:b4:70:a7:0e:09:53:56:fa:3f:61:94:ee:65:01:
                    f1:1c:16:29:76:99:7e:45:95:1a:b4:15:b1:3b:4e:
                    86:40:a0:1f:3f:b2:4e:5a:55:bf:61:43:a0:71:17:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:9F:3A:B6:F7:2F:65:4E:55:20:92:81:16:8E:50:CA:F2:9A:58
            X509v3 Authority Key Identifier:
                keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:48:ce:8b:85:cf:d0:67:ed:5a:45:a4:83:b1:62:0c:12:
         d1:55:86:bd:a8:30:06:1f:25:44:a9:99:56:6b:fe:fc:94:86:
         04:aa:62:31:c9:77:1a:9f:45:89:49:33:ba:95:61:75:33:a0:
         11:aa:b3:4f:35:85:65:08:aa:bb:f5:0b:29:6e:de:10:c1:25:
         fe:3b:73:7e:b9:af:50:99:85:0d:8d:1a:af:f5:64:58:c4:fc:
         6d:1c:30:1b:29:69:eb:d6:d9:df:35:23:db:03:cf:2d:ba:60:
         61:31:0d:fa:50:1a:bb:e9:1d:cd:84:77:e3:b8:80:9a:c9:a5:
         0c:e2:57:27:de:31:2c:2d:81:88:dc:ab:f4:60:75:06:ab:21:
         1e:84:66:61:42:8e:c8:19:15:a1:4d:87:be:af:91:30:1e:da:
         b2:b6:1e:92:11:e8:b8:06:ab:58:1d:64:fd:1d:0a:a0:a2:0b:
         3a:72:35:78:cf:40:a2:1f:34:36:f9:44:5b:30:c3:a8:c5:c7:
         12:ed:1f:00:ba:53:4b:8b:0f:51:ee:85:36:f5:41:85:30:26:
         31:9e:69:8c:3e:80:67:d6:56:1f:3e:b0:99:02:d6:59:b5:41:
         af:dc:78:29:9c:63:b6:7b:65:72:d7:ea:e9:24:dd:a5:d2:66:
         65:6d:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:43 2025 by rpki-client