Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
File:                     F3ABAB8E67B811F0976F6A50C4F9AE02.roa (raw, json)
Hash identifier:          uRR/m+p39oHAi/sHNgk1sFfUujjCt9edvKbA8+8v5fk=
Subject key identifier:   78:3D:27:6D:F2:97:C4:CD:C1:9E:49:E7:1A:AD:67:00:DB:3F:D5:7F
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       0666
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
Signing time:             Wed 23 Jul 2025 11:34:11 +0000
ROA not before:           Wed 23 Jul 2025 11:34:11 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     48024
IP address blocks:        103.197.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Jul 23 11:34:11 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6880c8b3-1d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:4e:12:b9:18:b7:63:2e:59:13:ba:d6:4e:
                    1d:e5:76:20:16:5c:c6:7c:81:f2:d6:c8:b8:57:d9:
                    05:f4:a7:17:50:66:03:29:6a:87:6f:78:bb:52:fe:
                    4d:fe:67:27:06:bb:ec:4b:41:b3:aa:d6:37:9e:2e:
                    59:8b:5b:fd:c5:b3:07:a1:82:43:fa:ca:f4:cf:75:
                    ab:d4:fc:06:16:b5:05:5e:fc:f6:3b:20:74:72:be:
                    be:d4:fb:9f:17:3b:b2:f2:18:78:c2:dc:03:43:11:
                    dd:e2:b3:03:7e:34:90:e1:f8:51:34:ea:05:00:fc:
                    21:3c:a3:b7:a8:be:17:47:ec:5d:f6:e2:e9:f3:2c:
                    4e:84:34:9d:21:47:c5:a3:b5:54:fe:d7:aa:ea:55:
                    e7:95:4c:cf:6d:9e:3c:88:97:67:bf:b9:fc:51:4d:
                    51:4e:3a:17:01:d5:62:92:9b:23:4d:c5:05:d2:d8:
                    ee:82:0b:3e:35:26:b3:f0:f4:e8:0b:85:c9:86:1b:
                    56:11:d6:71:94:a6:bb:b5:4d:03:c7:25:d5:d4:c6:
                    00:6f:b0:84:c4:21:37:c0:b9:80:eb:e5:ad:cc:2b:
                    d0:be:bb:07:85:9b:93:e1:17:e2:71:7c:83:a2:32:
                    03:3a:ae:05:87:f8:47:6a:44:99:a2:82:d1:f1:d5:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3D:27:6D:F2:97:C4:CD:C1:9E:49:E7:1A:AD:67:00:DB:3F:D5:7F
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:38:ec:8e:8d:51:54:29:d0:07:c4:cf:75:ad:b5:f5:46:89:
         80:61:db:a0:9e:9b:f9:5b:34:ea:98:d5:f3:1a:44:3c:c2:b1:
         1d:99:ec:32:ba:2f:50:91:2e:31:aa:65:b0:08:b6:04:06:b0:
         e8:4c:ba:19:92:a5:2b:81:7a:58:71:5f:92:06:c7:ae:72:69:
         eb:a5:70:5e:c3:4a:12:74:ca:3e:f8:34:70:9d:1f:a2:f4:d7:
         7d:16:42:42:18:99:83:2f:a3:08:a2:97:bf:db:b5:88:10:9a:
         a3:45:42:2c:64:2f:98:1e:e9:4a:ff:04:ef:69:56:f8:7d:8e:
         9a:0e:36:4c:b1:84:d9:f2:3e:ef:75:ba:ef:7e:3d:f0:79:17:
         22:4e:65:e9:bc:a2:0b:2f:0c:6b:8e:00:d1:1f:d9:84:8f:85:
         44:57:33:9a:7a:87:8a:74:10:b7:24:af:8a:8c:10:c4:fb:0f:
         ff:f1:2b:2f:81:ed:e9:ac:39:09:8e:4a:b3:35:8a:e4:32:c1:
         be:e4:41:6d:c4:80:1e:76:79:f8:b4:a0:42:d8:8b:7d:b4:48:
         e9:2b:35:d5:35:9b:13:8c:37:ce:1b:e7:91:b9:30:c3:92:b2:
         2f:2e:47:6f:6b:81:9e:ce:2d:26:1b:9b:99:c9:70:9a:cc:81:
         94:b2:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:59 2025 by rpki-client