Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/F9BDC484F7B011EB84345029C4F9AE02.roa
File:                     F9BDC484F7B011EB84345029C4F9AE02.roa (raw, json)
Hash identifier:          TISln3OWwFMxrFHBXjhzJmsuAj7ldgpqpKcI/7qFxoU=
Subject key identifier:   3A:CE:7D:74:CD:28:12:00:14:CF:97:F9:DC:18:BE:DC:3D:4D:37:F1
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0E20
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/F9BDC484F7B011EB84345029C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 18:27:53 +0000
ROA not before:           Sat 02 Aug 2025 18:27:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139358
IP address blocks:        103.141.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Aug  2 18:27:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688e58a8-20c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:68:5f:4d:d2:62:a3:18:b8:94:72:82:43:
                    1f:95:72:92:24:d4:8b:4f:e2:f6:da:ba:f4:21:49:
                    47:10:21:74:e8:b4:1f:55:e7:03:54:5b:b3:bf:3f:
                    52:6c:33:d6:a6:24:91:02:c7:e9:ce:1f:05:f3:de:
                    c6:2c:98:f6:05:96:aa:2b:30:52:5c:97:70:a9:08:
                    9c:e5:c3:f3:44:23:d9:a6:3d:fd:25:d5:29:39:55:
                    1b:1b:22:0a:28:4f:39:f0:ba:a3:23:07:3b:a5:a9:
                    6c:89:f2:7c:88:cc:55:04:64:2b:63:e1:6f:a6:c5:
                    3e:6e:a4:ac:0d:43:b4:e2:e8:a4:ac:6d:25:9f:a2:
                    37:33:6e:10:ea:ea:9a:fb:67:4c:ef:b4:d4:be:d3:
                    fe:d6:f8:17:78:90:c3:43:e9:3e:8b:9e:d2:fe:92:
                    56:cb:55:7c:49:7d:76:dd:f5:a0:ef:60:88:df:20:
                    8b:f7:62:9e:bf:2d:47:ee:c2:e6:7d:74:fc:4a:12:
                    d0:7b:cd:57:e1:e3:4b:c6:1b:5f:1e:4d:fd:0d:70:
                    ad:5d:33:49:f4:41:21:86:1a:24:f7:b9:21:68:a4:
                    29:4e:c5:ec:62:ab:7a:65:76:81:6e:a8:2d:e9:02:
                    ad:46:33:90:34:bf:b8:24:7a:5e:57:94:b0:60:1c:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CE:7D:74:CD:28:12:00:14:CF:97:F9:DC:18:BE:DC:3D:4D:37:F1
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/F9BDC484F7B011EB84345029C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:d6:3e:ac:41:d2:3c:7c:9a:b3:4d:14:fb:57:45:d0:81:
         da:17:87:62:26:0c:4d:76:d2:5e:ff:69:99:cb:ce:47:9c:12:
         19:3e:98:03:c0:9f:d0:6b:bb:b1:d5:72:b2:28:04:7a:42:d1:
         3d:8c:2a:50:d6:42:a4:37:cd:af:59:47:77:c6:6c:e3:0e:74:
         59:0e:76:78:3f:b8:94:ce:9e:3b:b1:05:dd:e2:c1:80:f6:d9:
         32:d3:51:46:4e:45:8c:a6:4f:01:5e:ad:61:b0:db:e0:15:dc:
         04:63:15:55:51:0d:f1:cf:76:cc:8d:9f:2e:c2:2c:93:73:26:
         0b:21:c7:3c:dd:c4:7d:41:3a:65:3c:53:5a:dd:aa:95:69:dd:
         67:30:0f:68:2f:0d:17:52:81:2b:c2:48:c4:99:f7:cf:c1:70:
         71:c1:17:a2:f3:be:98:42:5f:19:b5:42:69:1b:c4:1b:da:4d:
         9b:fd:cc:af:a8:e0:1e:7c:ea:f9:1e:20:ce:df:ab:83:a9:ef:
         c0:c2:e0:64:87:95:15:3a:a3:79:24:48:af:4f:3a:16:c7:78:
         9e:36:7d:47:34:ba:dc:8d:6d:ec:f2:46:ec:46:af:20:74:2b:
         69:80:bb:87:d1:8b:47:14:b9:a1:0f:fa:da:15:5c:91:0e:b3:
         c4:96:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:22:38 2025 by rpki-client