Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
File:                     2541D62A7F9811ED93508538C4F9AE02.roa (raw, json)
Hash identifier:          U9zRAtnK+rMFnlnfGAU4KvzYtOXqBm7qFzqLf0N4GqM=
Subject key identifier:   68:58:9E:24:B7:A6:60:0D:F9:BF:C2:D4:C9:69:25:09:7C:6A:2A:41
Certificate issuer:       /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial:       029C
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
Signing time:             Sat 09 Aug 2025 02:39:10 +0000
ROA not before:           Sat 09 Aug 2025 02:39:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132561
IP address blocks:        103.58.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
                          rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 01:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
        Validity
            Not Before: Aug  9 02:39:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6896b4ce-c621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:fa:c2:d9:ec:b5:6f:59:f3:66:cc:cf:05:
                    42:2b:93:81:23:9a:88:e1:ce:e8:dd:23:f6:7d:ca:
                    bc:30:cc:6f:69:a7:2c:88:8d:1f:30:ba:fd:c1:e9:
                    0c:c2:86:4a:a7:c2:1d:3f:05:75:f8:e9:3b:aa:7d:
                    dc:ee:ef:91:e8:9f:c5:5e:7a:b4:5a:80:43:62:84:
                    f7:6b:a1:24:ba:64:49:1c:b0:dc:f6:b7:99:d4:cd:
                    ea:12:83:e7:b7:dc:50:e1:4b:2d:1c:6d:33:15:d1:
                    c3:d9:86:14:db:da:aa:3f:81:4b:4d:17:9d:fe:60:
                    23:da:d8:00:66:17:6c:b6:ae:09:ba:ae:27:ff:f4:
                    58:3a:0b:8b:3f:c0:06:a4:25:57:38:5e:f7:38:ac:
                    5b:b7:6a:3c:e7:01:9f:8b:90:b0:18:91:2f:9c:85:
                    92:38:ce:fb:c6:ae:b5:7b:0d:a0:53:eb:af:86:6a:
                    e0:73:c6:de:9b:36:62:fd:8c:37:07:d7:55:86:6d:
                    72:71:0f:51:84:07:78:e1:7d:b2:8e:17:82:b0:0f:
                    d4:7e:ca:72:cb:08:e1:34:17:a6:7a:e0:a7:be:ca:
                    11:f7:aa:9d:a2:1b:58:f5:df:45:34:a9:c3:9c:8d:
                    fb:80:94:7d:7e:2e:df:b8:49:98:f3:08:44:8a:81:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:9E:24:B7:A6:60:0D:F9:BF:C2:D4:C9:69:25:09:7C:6A:2A:41
            X509v3 Authority Key Identifier:
                keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:cf:3d:de:b0:60:6e:7d:6f:df:19:30:e5:19:b7:0c:3f:
         75:34:e2:6d:b8:87:bc:6e:0c:a6:6e:25:8a:ed:73:cb:d7:7b:
         94:44:40:3d:78:e9:dc:3f:be:0f:ca:7b:e5:3e:74:64:a0:8d:
         8c:cd:90:de:fd:53:fd:2b:c1:35:38:fb:71:bb:85:fd:d4:b3:
         8c:93:ca:5b:b2:77:c1:7f:35:d4:3b:95:cb:74:51:52:0a:4d:
         25:0a:cd:9a:57:83:c4:c0:55:b6:be:61:08:08:15:16:e0:8c:
         cf:a6:98:d0:9e:5b:93:9f:83:de:63:b0:d9:c6:5f:a2:6d:c6:
         ef:3d:76:5e:c0:be:d2:c8:5f:b2:0c:e1:c3:74:51:10:cf:00:
         f3:3c:90:be:6b:b3:9b:e1:01:49:4e:3f:44:f8:d2:76:26:99:
         bd:ba:01:bf:58:89:a3:d4:6a:68:fb:3b:67:bc:cb:47:0f:de:
         2d:c6:d1:7b:ca:86:37:9e:a3:37:a1:76:cd:e0:bc:6f:af:eb:
         76:6b:88:02:20:5c:1b:a7:8c:cb:9e:10:7c:cc:7a:db:5b:c2:
         d5:92:11:12:94:05:8e:c1:a1:7b:bb:b3:89:c6:49:02:2a:96:
         9e:ca:46:c5:e3:c4:16:0d:1e:3a:4f:7d:67:bc:85:0b:98:93:
         51:3b:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:18 2025 by rpki-client