Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/1110B336733A11F0A50CB40BC4F9AE02.roa
File:                     1110B336733A11F0A50CB40BC4F9AE02.roa (raw, json)
Hash identifier:          krjsbGchHznXD9xE+7coZ2q4Y50tByhAIOZ2Cdtlbl4=
Subject key identifier:   F7:A1:73:FC:1B:53:A3:8B:87:55:D8:70:DA:BD:C2:70:67:D2:EA:B7
Certificate issuer:       /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial:       07
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/1110B336733A11F0A50CB40BC4F9AE02.roa
Signing time:             Thu 07 Aug 2025 02:56:08 +0000
ROA not before:           Thu 07 Aug 2025 02:56:08 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        103.17.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
                          rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
        Validity
            Not Before: Aug  7 02:56:08 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=689415c8-24b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:49:f6:5d:f7:64:4c:05:2b:81:37:6f:08:
                    62:e5:4e:2b:03:bd:dd:ef:bf:aa:89:f3:5a:55:a1:
                    a2:8a:87:f2:29:67:af:60:1c:0d:5a:54:23:c0:c6:
                    67:40:99:2c:df:0f:5a:59:1a:52:3b:af:0a:f8:0a:
                    c5:59:aa:fe:5a:64:6e:dc:47:66:6b:2f:91:2e:89:
                    57:53:d2:c0:02:10:db:d3:b8:db:ca:5d:14:7d:46:
                    c0:76:c5:fb:61:4e:3b:4b:92:3c:30:f4:36:bb:57:
                    55:47:e8:79:32:8d:c7:a3:83:d9:ed:50:59:00:75:
                    97:b1:f0:6f:b9:63:38:e2:5f:88:10:dd:c8:aa:02:
                    3c:ca:4b:8d:45:d3:10:95:e6:8a:33:6b:37:9e:fb:
                    b2:35:e6:17:96:2c:cc:f8:93:e3:3b:d2:43:e1:57:
                    41:ec:88:22:bd:78:41:2a:dc:ab:39:d3:03:aa:9e:
                    20:6d:c8:cb:a7:c0:3e:86:c0:79:87:90:95:c7:1f:
                    5d:85:d1:21:65:9f:30:2d:a6:6f:71:e9:5d:28:15:
                    73:d2:38:30:7b:0a:e8:c4:b4:b0:68:38:c3:ca:fe:
                    5a:a1:ac:1f:af:45:ac:c9:90:a1:2a:1e:02:0b:65:
                    76:25:73:c3:2d:d7:86:2e:72:e5:17:96:44:d9:a5:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A1:73:FC:1B:53:A3:8B:87:55:D8:70:DA:BD:C2:70:67:D2:EA:B7
            X509v3 Authority Key Identifier:
                keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/1110B336733A11F0A50CB40BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:78:dd:5c:79:46:93:8b:ef:f9:03:16:78:21:e8:e2:ba:
         db:c6:96:e3:cb:64:ac:17:fa:3f:4d:df:48:04:9b:c4:91:82:
         52:af:0e:9b:dc:c8:84:5a:a2:07:27:2b:cf:9a:da:ad:11:35:
         5e:39:18:1d:5b:cf:77:1a:0f:93:98:0e:c8:64:86:4c:80:2a:
         17:02:80:ed:9b:1f:65:a4:e8:89:53:9c:22:9d:75:85:69:b4:
         b1:4d:78:db:83:c5:cd:5b:3c:cf:7f:41:48:42:7f:8d:0a:d8:
         3f:e9:e3:56:07:f0:cd:a8:4c:07:7f:8e:b1:de:6d:95:64:59:
         92:e3:e8:ab:85:27:9a:65:e0:07:4f:3f:9a:52:9c:ea:ea:57:
         e2:93:97:46:6e:09:6c:d9:37:45:2c:c1:2f:1d:9c:5b:36:81:
         f2:6c:dd:a9:dd:d9:ca:2e:b8:f6:de:55:04:7e:54:85:4e:70:
         4d:53:d3:2e:cb:92:ea:16:f0:a0:44:58:6d:bc:9f:e9:e1:21:
         02:04:ec:ce:a2:75:f1:f3:32:63:1a:63:88:93:a5:c1:cf:37:
         83:05:69:90:30:36:80:ca:12:08:cf:4c:00:90:db:31:00:32:
         a1:6c:d3:92:23:78:89:0e:03:af:77:81:ca:be:14:4e:1f:12:
         b7:d1:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:54:59 2025 by rpki-client