Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
File:                     74EAEAC41ED211EFA618AB5EC4F9AE02.roa (raw, json)
Hash identifier:          1J51ZpI72sPWoJA17ZGr8Mh62y9YiWnJwY4VlFUvLxU=
Subject key identifier:   4D:87:9D:E9:E5:6B:14:DE:CB:8A:9A:62:94:CD:D3:F5:3D:40:DD:0D
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       E8
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 06:14:22 +0000
ROA not before:           Tue 05 Aug 2025 06:14:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     148968
IP address blocks:        103.118.161.0/24 maxlen: 24
                          2001:df5:d500::/48 maxlen: 48
                          2001:df5:d501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
                          rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
        Validity
            Not Before: Aug  5 06:14:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6891a13e-3847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:de:8e:38:37:3d:68:84:b7:8d:7f:4f:45:
                    99:2c:be:46:5e:a9:93:90:37:65:4d:e5:f7:37:a2:
                    4a:54:d6:a1:07:42:7c:d9:42:39:54:62:2e:97:33:
                    a2:1c:5b:ed:2f:09:58:bb:29:b0:d3:f1:b4:71:2a:
                    93:22:6d:b8:d3:17:55:30:17:01:d6:42:c0:d9:01:
                    f5:a8:ba:0c:a1:f0:46:a8:1b:1a:55:13:f5:7c:09:
                    a6:d8:0a:73:fe:b0:cf:77:08:c7:31:9c:8e:71:03:
                    68:da:f7:1b:23:54:06:ce:b3:be:cf:0d:70:9a:94:
                    4d:8d:4e:f4:4b:5b:15:27:08:fb:71:a7:ff:ea:83:
                    bc:03:41:23:1d:de:4f:73:f6:bf:9f:1d:83:27:7b:
                    54:6a:c7:f5:76:ff:d7:9c:9a:77:5b:8f:81:eb:0e:
                    39:b6:b7:b1:30:95:64:0c:78:f2:da:b8:ce:1f:c6:
                    47:26:f0:9a:b1:e4:7d:c4:10:65:32:ac:fa:95:1f:
                    b2:8d:8f:8c:3d:94:d2:b4:53:76:a2:a0:fe:2f:73:
                    eb:df:d9:f9:3e:f3:a9:d9:6c:a2:f4:7d:73:9f:68:
                    ae:bc:11:b9:07:cc:de:84:19:3b:64:0d:78:2a:11:
                    75:9f:08:6a:f1:ae:4f:ba:d2:96:88:25:eb:41:43:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:87:9D:E9:E5:6B:14:DE:CB:8A:9A:62:94:CD:D3:F5:3D:40:DD:0D
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.161.0/24
                IPv6:
                  2001:df5:d500::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:14:22:e1:0f:7b:12:95:8f:07:2e:a6:5a:51:99:af:60:
         6e:d6:71:7c:27:ab:2a:2e:45:cc:10:42:71:ad:14:67:b7:d5:
         45:30:ea:aa:1d:30:eb:71:b3:27:b1:f6:7d:bb:69:7d:20:b0:
         23:d1:bd:87:68:6f:d2:e2:23:8c:d3:5b:cc:3b:8f:35:f4:ae:
         2f:be:8b:72:64:8f:d3:63:f9:20:7d:e7:ac:6b:81:ee:47:cd:
         48:17:17:19:d5:31:90:ee:de:b6:1b:72:41:91:90:ed:7b:0f:
         2c:08:8d:9d:32:fe:15:97:4c:38:9f:9d:c6:82:91:e3:5f:af:
         55:0d:ac:02:72:fe:1b:ea:25:d8:b5:77:b2:5d:bd:4a:0a:67:
         4d:58:9d:e8:f7:7f:bf:42:08:b6:71:a1:13:ac:d6:9c:08:f2:
         de:7a:7c:48:ba:d9:fe:94:b2:d7:4f:fb:22:e3:12:b8:dd:c8:
         1e:d9:bd:6f:b6:59:f9:72:e5:f8:16:86:db:e0:a7:2d:3d:6f:
         65:61:fd:e0:62:ee:e8:41:d2:ab:c1:cb:b7:89:42:c1:b7:2b:
         56:68:cd:4b:fd:ee:e4:b2:ce:2f:55:b6:82:c3:a2:52:1b:f8:
         23:b6:85:df:d4:75:92:3f:8d:76:8b:82:06:3b:8b:e8:9e:5a:
         4a:1b:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:16 2025 by rpki-client