Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
File:                     BB682E3E81F711EF9D066A30C4F9AE02.roa (raw, json)
Hash identifier:          YHTE5QYQ4ZxchKvHk6Tg5vyK0QNcF3tQixzNTie8Jug=
Subject key identifier:   03:BC:5F:50:57:BD:CB:BE:78:C0:3A:7D:63:16:3B:0A:A1:57:2F:64
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       050E
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 00:05:18 +0000
ROA not before:           Thu 31 Jul 2025 00:05:18 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     135512
IP address blocks:        103.131.42.0/24 maxlen: 24
                          103.131.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Jul 31 00:05:18 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=688ab33e-72c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3d:2e:00:b2:63:6e:24:52:c5:77:77:1a:c6:
                    a3:e8:bd:b3:48:15:1a:33:14:61:46:b1:8e:03:13:
                    00:fd:fd:23:5c:16:4f:ef:40:3c:0c:aa:7b:eb:cb:
                    38:57:d6:e8:1d:df:f0:d7:4c:5d:01:b8:4c:96:ec:
                    0a:8a:7e:65:e2:8c:a3:e0:b6:2b:ae:da:f8:21:f6:
                    49:b2:54:bf:49:20:ba:fe:9d:97:df:04:0d:15:68:
                    79:f3:e1:53:a4:0a:28:e6:00:71:e9:e7:7f:29:c1:
                    76:d6:78:fc:aa:c7:a8:73:d6:fd:46:1a:db:3a:df:
                    64:ff:8a:b7:2a:8f:ac:82:2f:9d:17:ba:0b:1a:8a:
                    fd:49:2b:d7:1a:14:44:45:c8:49:dd:4b:3a:c1:c9:
                    72:8d:63:ca:93:ef:27:e6:83:43:c8:a3:09:e1:3c:
                    6c:bc:f9:a6:14:88:a3:9d:8e:47:8e:46:93:c9:0b:
                    f3:8b:f8:7f:bb:49:3e:b7:e6:9c:e1:51:04:3c:da:
                    f7:20:b1:52:41:be:44:75:94:b7:c1:3c:80:16:c0:
                    94:78:fa:5c:c4:c5:9e:98:fe:c5:84:35:69:9d:7a:
                    64:ca:03:59:43:89:40:58:54:a3:26:4f:79:b2:de:
                    10:a5:58:54:76:95:24:c3:8f:6d:59:3a:66:45:31:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:5F:50:57:BD:CB:BE:78:C0:3A:7D:63:16:3B:0A:A1:57:2F:64
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:06:9b:a8:4d:0c:d2:28:ab:e2:bd:66:79:c9:b5:04:7b:
         24:6b:6b:ae:b8:67:2a:da:3d:e3:75:79:66:74:9d:92:aa:cb:
         bf:5f:17:a0:89:8a:67:5e:21:71:1f:fb:7e:c7:6f:08:52:cd:
         e5:ca:64:64:97:fc:75:c0:32:3f:8b:49:9a:18:bd:1a:37:14:
         56:80:54:80:00:cd:19:1d:25:62:5e:5d:02:2c:ca:44:9c:99:
         b1:d3:75:37:36:71:4f:7b:c5:82:0f:c5:df:42:b7:5d:15:f8:
         94:6a:78:94:e2:02:e5:51:db:e8:af:1a:d1:5f:b3:a0:9d:e0:
         be:b8:f4:df:d4:92:7c:5e:f1:8c:60:80:d5:41:f3:86:64:49:
         cb:df:e9:5a:1d:71:0c:84:bb:1c:4a:b0:eb:82:d6:42:f5:ff:
         d8:17:97:33:5b:5c:11:0c:bf:e8:df:6b:4e:f2:c8:bf:61:02:
         50:eb:ce:94:6e:de:08:3d:11:0d:4f:b8:8d:08:db:56:99:7b:
         6d:14:15:34:4e:af:00:ad:fc:aa:19:4f:1a:72:93:17:88:62:
         b4:19:4f:0f:9d:23:fc:fc:10:20:12:de:52:cf:4e:74:4a:05:
         a1:62:2a:25:6a:bf:4a:02:2c:82:66:81:de:20:e2:5c:e9:b3:
         4c:f3:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:50:51 2025 by rpki-client