Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/442D6434B14411EAB852C134C4F9AE02.roa
File:                     442D6434B14411EAB852C134C4F9AE02.roa (raw, json)
Hash identifier:          dVnV0yH7vHgJph4GIsitDhFnvlBBTZGa61SDpLL66Po=
Subject key identifier:   D4:9F:D8:9D:85:CF:2F:9E:55:B5:FE:FA:E9:BE:DC:2C:6F:6C:21:E8
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       08F8
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/442D6434B14411EAB852C134C4F9AE02.roa
Signing time:             Tue 22 Jul 2025 21:00:36 +0000
ROA not before:           Tue 22 Jul 2025 21:00:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139054
IP address blocks:        103.151.180.0/23 maxlen: 23
                          2001:df3:f980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 20:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Jul 22 21:00:36 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=687ffbf4-3d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:7b:6a:7b:d4:10:49:4a:d4:46:2b:af:00:
                    e7:c2:f4:d0:96:2f:a2:90:8f:10:30:50:9f:af:9e:
                    fd:58:d1:89:22:0f:36:37:e5:7c:8b:3f:91:4b:1e:
                    6a:68:07:d5:ae:69:22:d6:99:90:70:47:a3:e5:2c:
                    60:72:bf:1a:60:d9:14:77:28:ca:07:d5:d5:9c:65:
                    81:9f:e8:38:94:bf:7e:9b:40:a1:4d:e4:6b:ea:65:
                    47:7a:70:bf:8b:40:76:15:07:d4:f7:5d:d4:18:6c:
                    52:ac:f5:0b:5b:0e:0a:c0:32:78:af:5f:41:d9:72:
                    5d:86:59:bf:f2:2b:1a:29:d4:f2:59:95:06:07:46:
                    3e:34:0d:38:76:ef:cc:e0:ba:21:99:02:d9:64:b0:
                    e8:05:d7:57:4e:8c:f3:f2:b2:81:52:ea:a5:0a:1e:
                    42:3c:c4:41:22:0b:f5:b8:b8:e6:9c:9d:b2:48:45:
                    3f:19:25:be:aa:46:17:b0:f7:a4:de:cf:3d:18:db:
                    a4:b0:f1:b3:04:36:33:89:43:b2:70:dc:ca:45:81:
                    9a:96:14:97:6d:18:a5:2c:9d:af:e4:9e:e1:39:2e:
                    73:5f:b7:41:19:86:58:c5:1b:38:d8:58:dd:71:7c:
                    b5:c8:e3:7c:8d:c5:bf:3e:47:7d:b3:a5:54:c7:18:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:D8:9D:85:CF:2F:9E:55:B5:FE:FA:E9:BE:DC:2C:6F:6C:21:E8
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/442D6434B14411EAB852C134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.180.0/23
                IPv6:
                  2001:df3:f980::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:07:91:dc:8f:d6:35:e4:8a:b2:84:b2:ac:fd:e9:b7:b3:0b:
         cf:c0:e3:2d:0b:f8:dc:0d:79:7f:1a:8e:76:4b:f5:63:77:39:
         fe:0b:77:eb:50:29:ab:7f:2c:cf:23:36:86:e5:24:73:f2:23:
         ae:80:24:1e:3b:46:70:35:3c:d2:0d:a1:85:49:ac:94:fc:10:
         7f:76:5a:15:45:af:0c:b1:b2:21:c9:36:e7:f7:4b:bf:9d:db:
         b7:4c:de:55:a0:96:04:3c:20:b6:a0:af:56:e0:18:d2:73:98:
         64:01:c0:da:33:5d:46:9e:2c:e9:69:66:08:e4:32:71:d5:b7:
         48:0a:fc:0b:ce:33:ef:8b:44:31:a1:74:6e:97:95:b3:c0:7d:
         01:ec:e2:ee:79:94:c0:e5:2c:5b:f3:93:01:86:c5:d4:b9:6e:
         47:69:7a:86:58:ba:0f:ee:9a:b8:1f:68:5d:9e:54:86:42:e6:
         d5:c2:b0:b9:bc:8e:98:56:b2:0e:aa:0c:f7:47:18:38:d3:bb:
         e4:ba:a9:3b:7a:f6:f7:cb:3b:28:98:3b:05:cd:75:a3:a0:f4:
         db:2a:6c:0f:07:84:4b:a6:cb:47:f2:97:1a:8b:79:bb:c8:65:
         42:0d:75:56:18:16:26:e0:4a:17:ca:15:a8:a6:b3:c7:20:ac:
         a2:a3:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:57:21 2025 by rpki-client