Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
File:                     679A6FA4E53A11EB8197AD70C4F9AE02.roa (raw, json)
Hash identifier:          cpEsjV03pQHsVjR1FwtppeHQdTtgrIUVyZ08K7ajurs=
Subject key identifier:   BF:84:F5:E8:8F:C0:9A:CE:AD:34:83:B9:25:06:76:BB:A2:4C:BD:7B
Certificate issuer:       /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial:       058D
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
Signing time:             Sat 09 Aug 2025 00:05:14 +0000
ROA not before:           Sat 09 Aug 2025 00:05:14 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142555
IP address blocks:        103.169.68.0/23 maxlen: 23
                          2001:df6:ed80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
                          rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
        Validity
            Not Before: Aug  9 00:05:14 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689690ba-36ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:6a:4b:73:bb:ab:0f:65:6a:90:32:63:70:
                    f6:fa:5e:01:0b:3d:93:b5:1a:c1:93:f9:27:20:e5:
                    fc:61:a2:25:36:65:ed:fb:47:b6:c3:3b:c0:53:1a:
                    85:4c:f2:43:43:07:b5:90:c9:59:64:9c:ed:a8:73:
                    eb:05:1e:22:09:e7:61:47:c0:7f:52:c9:b5:00:f2:
                    72:36:27:d1:ec:a4:10:7c:21:ce:b5:4b:fc:3d:ce:
                    28:9d:3c:b9:b7:bb:51:79:b2:e0:a1:21:cd:9e:3f:
                    9e:6c:d1:be:73:af:25:d2:31:67:88:86:90:18:f8:
                    57:03:48:b1:04:47:6e:34:2b:eb:a8:56:f0:cb:3b:
                    2a:28:98:08:5d:57:ec:4c:0e:8c:29:15:cf:6a:81:
                    b4:6a:db:2a:38:6a:93:c2:00:57:c5:ee:95:d2:8c:
                    99:c4:b8:1a:f3:3f:91:4a:1c:70:d5:aa:60:e7:b6:
                    09:b8:60:7e:5c:67:d5:17:bf:28:f8:6a:73:fa:ae:
                    8b:f1:c6:ab:d4:fc:b3:36:ed:7d:28:34:32:66:6d:
                    d8:e9:86:29:f4:43:d2:45:06:c7:16:9f:88:1c:21:
                    d7:4d:8e:6e:64:f0:6b:6b:00:fa:09:b5:6f:da:d4:
                    59:00:fe:85:07:a9:de:c7:04:7f:13:da:6a:b6:c4:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:F5:E8:8F:C0:9A:CE:AD:34:83:B9:25:06:76:BB:A2:4C:BD:7B
            X509v3 Authority Key Identifier:
                keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.68.0/23
                IPv6:
                  2001:df6:ed80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:c2:0f:6b:7d:00:fc:74:74:e5:73:e4:2e:71:ad:19:c9:
         27:10:24:63:dc:1b:e1:42:77:9b:6a:78:e5:78:c9:17:f6:24:
         55:8a:74:f8:60:08:31:07:28:6f:2c:72:d0:c2:d5:10:fc:d0:
         a4:ed:ec:14:de:0b:8b:fb:95:0d:2d:06:c1:62:3a:e1:eb:5f:
         b7:1f:a7:c2:1b:db:39:9e:f9:dc:fc:37:35:52:6c:db:c7:ba:
         b3:a8:8b:d6:76:78:7c:f1:9e:d0:9b:2e:ad:78:46:32:bc:bd:
         24:9b:e5:02:e0:33:02:25:1e:48:c3:aa:49:9b:c0:80:83:74:
         bf:f5:87:52:ee:68:de:5a:ba:3f:4e:9c:20:cb:9c:f5:2c:f1:
         ad:39:5d:c3:ef:83:28:5b:10:50:3e:40:26:10:18:64:e9:2c:
         7c:be:f2:fc:55:38:83:0a:45:9e:75:8a:c3:6c:3b:65:50:69:
         d3:59:4a:cc:62:43:cd:fe:15:44:ac:ca:35:84:78:98:cd:5b:
         3d:0b:d1:de:1c:a5:81:63:7c:f4:f6:83:4b:b0:62:da:80:a7:
         d4:74:31:9c:f9:83:5d:ba:70:ce:89:f0:22:17:8c:13:a8:50:
         bd:4d:ad:8a:99:b5:7a:86:59:e4:20:68:2b:65:c5:8b:e7:e1:
         15:5d:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:31:03 2025 by rpki-client