Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
File:                     3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (raw, json)
Hash identifier:          Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=
Subject key identifier:   6B:3E:92:4C:95:A3:F6:30:33:CC:2C:44:6B:CC:5F:93:36:BD:E4:53
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       0656
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
Signing time:             Mon 04 Aug 2025 23:35:22 +0000
ROA not before:           Mon 04 Aug 2025 23:35:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.117.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 23:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Aug  4 23:35:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689143ba-3b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:f2:37:7a:15:3f:25:03:6f:a0:60:5d:b7:
                    c0:cc:80:45:94:0a:5c:1b:53:05:a9:3a:cb:31:3f:
                    35:25:7a:ed:01:36:43:55:ac:06:fd:f9:ac:6b:2d:
                    cd:82:26:97:a0:78:23:d9:d5:94:c5:06:54:b0:c7:
                    d3:5e:92:4d:37:ad:82:8f:e7:dd:6c:f5:7d:a3:63:
                    78:fb:e7:73:87:b6:e6:96:f9:b6:78:e0:42:87:74:
                    de:34:64:d5:90:6b:04:e2:66:50:a3:d7:25:07:b2:
                    23:8e:7d:6f:98:7f:82:39:66:17:ad:aa:79:20:ce:
                    1b:42:38:67:98:ba:e5:51:8a:c9:81:fe:e1:ff:9c:
                    58:10:fc:8e:50:9d:6a:76:50:0e:0f:3d:8c:8a:29:
                    e7:50:69:a2:1a:ed:99:09:68:4f:d4:39:4d:0d:dd:
                    51:a0:84:b2:da:10:41:c8:0a:ee:92:ef:75:b6:b3:
                    90:a0:5d:28:a5:cc:fc:21:d5:25:9c:d6:ee:45:42:
                    ba:52:ae:f9:e1:5d:6f:16:e8:05:d4:96:01:2b:59:
                    98:40:9e:bd:b9:17:0c:18:b9:c7:3b:8f:ce:3b:73:
                    0e:6c:fb:f9:2e:5c:74:51:20:a2:d6:05:2f:14:99:
                    42:ca:2d:83:12:83:3c:4a:9a:92:4c:31:73:66:37:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3E:92:4C:95:A3:F6:30:33:CC:2C:44:6B:CC:5F:93:36:BD:E4:53
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:0c:5c:48:1b:43:19:a2:ce:28:57:ac:ed:92:01:dc:9a:8c:
         3a:32:dc:cc:f1:aa:37:95:be:8f:23:95:c0:4a:8c:c9:9f:87:
         e5:7b:83:b0:b8:10:5d:31:59:22:00:09:28:b0:82:f7:1f:96:
         c2:69:cb:3b:41:f9:cc:00:65:be:9a:46:64:77:90:3c:2b:82:
         64:67:25:e6:fe:1d:8a:b3:b4:37:c0:17:30:2e:5a:5a:53:78:
         41:0e:d5:e3:2c:51:57:6e:39:c9:00:94:33:7a:f3:04:b7:a3:
         6f:73:82:77:32:98:1c:9e:ee:3d:c4:65:f5:d5:22:2e:53:79:
         a9:6a:d7:d4:2b:33:9a:e4:82:a0:0a:c2:c6:6c:3b:17:6e:ea:
         b7:35:78:cd:c8:77:fe:f9:cb:aa:90:7e:82:9f:51:9a:ea:b7:
         e0:08:6c:16:84:af:89:50:bf:0d:37:58:12:a1:b6:16:84:1c:
         ff:ba:61:a0:a1:65:f3:e3:2f:69:47:88:0f:73:68:18:d2:10:
         da:41:4b:b9:28:28:38:8f:48:51:c9:88:04:39:b6:f1:2c:ca:
         6b:54:22:48:9f:24:fd:36:2f:f2:69:57:d2:f3:5f:5a:85:2e:
         f7:fa:4e:d9:b1:94:1d:4a:a0:92:16:45:ca:92:82:27:d8:20:
         6e:40:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:50 2025 by rpki-client