Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
File:                     47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          sX+id3lu89Hjy6wyXn7YJf1vycTYavS1aKnHsZ9N81M=
Subject key identifier:   C6:F5:25:F8:61:BA:2C:BF:D7:ED:E3:CA:96:C4:D3:C3:52:E5:59:6B
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       35DA
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 14:50:36 +0000
ROA not before:           Thu 24 Jul 2025 14:50:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     46079
IP address blocks:        203.107.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13786 (0x35da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6882483b-9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:dc:74:65:db:fc:5e:45:ae:1d:e7:88:2d:
                    09:59:08:53:e0:45:70:1c:dd:52:3f:ce:4d:01:ae:
                    6d:27:ad:87:f1:6a:85:cc:ff:d4:b9:1d:da:ff:b5:
                    ed:3c:ca:4e:3c:60:f9:b9:b7:8d:c8:ee:23:65:ea:
                    1c:da:55:67:e6:95:d5:8b:58:a9:96:f9:5f:9f:f6:
                    55:cf:ae:72:ab:93:d8:bf:03:ac:4d:f6:23:09:ac:
                    77:4e:f1:5b:f8:e3:75:30:32:9f:06:64:2d:db:24:
                    64:ee:ca:3f:b0:5d:2e:3d:6f:97:83:5a:38:ff:9d:
                    de:8a:50:d5:6c:61:08:cb:de:a7:15:d5:1d:ff:58:
                    8c:fd:c7:f4:14:af:b3:36:90:b4:4a:52:6b:8b:19:
                    e8:58:30:95:b5:e6:45:6e:48:4f:2b:16:b2:f0:7d:
                    5e:00:4d:f4:26:61:9c:03:fd:ff:4f:a2:2f:8a:49:
                    8f:f3:95:1e:96:67:e0:d5:61:39:fb:01:d3:6f:69:
                    55:3c:5b:7a:80:fd:eb:9e:c2:f8:71:ae:36:90:48:
                    d1:f8:77:ac:f0:d7:fd:20:8c:7d:0b:66:52:52:e2:
                    69:a7:93:29:78:c1:86:b8:7a:7e:c6:2e:42:57:c7:
                    a9:37:55:17:93:e0:3d:55:a2:15:e7:e7:6b:79:c4:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F5:25:F8:61:BA:2C:BF:D7:ED:E3:CA:96:C4:D3:C3:52:E5:59:6B
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:66:c9:ab:1d:27:e6:47:31:a9:84:02:ec:f8:6b:fb:0b:
         31:8f:66:de:7b:cc:67:f0:56:b9:a7:3e:0d:92:58:30:bc:c1:
         51:ce:3f:eb:80:9a:2b:ec:b7:d2:dc:62:93:ab:a6:7a:72:34:
         85:86:e6:52:6e:45:9f:e4:e7:4e:5c:06:9e:13:45:7c:69:b8:
         4b:c9:41:1d:f8:8b:5c:fb:47:8d:f2:ec:69:d5:04:eb:47:a6:
         9b:ef:cf:8d:8e:eb:aa:31:08:67:fd:c9:7e:cb:91:95:83:c7:
         b1:61:2d:3a:fc:76:c1:81:4c:7d:3c:93:86:59:2a:fb:e7:2a:
         66:dc:07:27:ab:33:ef:c0:97:2f:58:7f:48:19:1d:2a:c3:fb:
         8b:79:36:49:43:39:bf:65:79:22:aa:e0:c3:9f:bd:60:b4:22:
         7b:60:2b:b0:74:69:24:24:9c:b8:74:57:e0:e6:88:28:df:52:
         aa:9e:a2:b5:20:85:a3:bd:77:e1:78:4c:0b:cf:2f:1c:2d:53:
         2c:b8:22:6b:20:e4:4a:46:e1:94:d6:b2:4d:cb:9f:d2:ee:14:
         c6:fb:01:24:b9:b6:1a:6c:36:0c:4f:88:13:d4:6f:69:94:a6:
         66:b9:19:3d:95:2b:5a:00:bd:11:51:73:57:52:e2:1e:e6:eb:
         15:6f:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:36 2025 by rpki-client