Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
File:                     170BFAA6995211EA9CF98C52C4F9AE02.roa (raw, json)
Hash identifier:          EL9+YDLeW1dfYW9FtCHbupSHr1vCnqD1Nb1zNlJNZRs=
Subject key identifier:   B7:F9:C4:FF:2D:82:1B:7B:0F:09:BB:54:DF:71:FF:D4:36:5F:6D:D5
Certificate issuer:       /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
Certificate serial:       096F
Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:30:31 +0000
ROA not before:           Wed 02 Jul 2025 20:30:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140643
IP address blocks:        103.151.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
        Validity
            Not Before: Jul  2 20:30:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686596e7-dd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:65:7b:f6:0d:b7:9a:14:9a:be:cb:0e:23:
                    af:0f:07:2c:af:83:7e:79:f7:be:d7:75:c2:d8:35:
                    b2:b1:92:5e:37:f7:de:a1:9b:2a:71:53:44:fb:59:
                    84:96:c8:60:c5:38:4d:21:b7:8a:33:40:83:18:ef:
                    1d:f2:ef:b5:6c:db:2e:5b:52:5a:ae:6c:8e:2e:98:
                    53:83:cb:a2:73:18:b7:f8:f4:2c:38:79:70:5a:dc:
                    71:88:5c:d5:c9:4c:41:47:6c:6d:b0:4b:37:43:73:
                    94:2d:26:dd:84:29:8a:e3:ea:4b:c5:f6:b0:36:c5:
                    72:9e:2e:b3:e3:92:b5:4d:4b:d4:9e:87:68:16:b8:
                    52:49:a1:49:a5:ee:0d:55:90:c1:2d:80:5f:44:c9:
                    5c:b3:a2:2d:35:f2:3d:68:d4:ca:8d:76:78:a2:27:
                    8b:dc:6b:b8:ea:dd:9e:1f:f5:91:a5:40:1c:a7:af:
                    07:51:7d:9d:d8:fc:46:13:b8:57:dc:60:ee:e2:cb:
                    38:94:a5:82:8e:91:1f:28:0b:da:66:fe:1c:69:6b:
                    b4:d3:b2:cd:64:ee:9a:61:02:da:1f:5e:16:88:f6:
                    cd:55:ad:61:04:2a:b2:bd:33:82:1a:19:ab:39:db:
                    c3:b4:e0:2e:b9:32:dd:1c:19:70:f2:07:75:25:96:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F9:C4:FF:2D:82:1B:7B:0F:09:BB:54:DF:71:FF:D4:36:5F:6D:D5
            X509v3 Authority Key Identifier:
                keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:19:a2:4c:7c:08:ea:a8:4a:f5:a7:44:4c:6a:f8:84:01:72:
         8d:ca:fc:f3:7c:23:13:1d:8d:1a:7d:7e:50:ce:2d:f1:f2:0e:
         db:2f:3d:0d:f6:64:e6:04:22:cc:ad:f3:f9:41:30:7d:d7:e9:
         a5:aa:42:59:ce:0f:96:20:c1:b4:c8:db:97:e9:2b:3d:12:de:
         a7:b8:00:d6:ed:96:41:6d:57:f5:3b:8d:83:6b:82:4b:02:53:
         4f:7a:39:27:65:95:f8:3a:39:e1:0f:a3:c1:e0:42:06:9f:97:
         c4:37:1d:a7:18:8b:0c:a2:4e:03:c4:ed:37:0a:31:35:0e:d5:
         f2:57:f2:2a:6e:7f:eb:f9:fe:68:7c:c2:ba:f1:22:cc:d1:c4:
         51:37:2b:38:61:d4:f1:51:34:4c:fe:a4:7f:e1:57:d9:f0:3c:
         30:c4:1a:dc:77:74:42:35:63:48:73:f9:37:8b:96:d8:11:f8:
         11:c4:7f:ce:6a:0e:06:93:3d:68:0d:a2:b9:f2:65:98:b0:ad:
         83:59:05:29:3c:46:de:4d:e0:8b:63:05:c8:a5:ff:83:e8:25:
         b9:bd:73:ec:37:ff:d3:2d:f4:eb:0b:7a:62:41:5c:93:f8:b7:
         bf:19:0b:03:e1:aa:e8:06:f6:64:a1:d0:3f:73:9e:70:9e:6b:
         ac:e1:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:23 2025 by rpki-client