Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa
File:                     B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (raw, json)
Hash identifier:          k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=
Subject key identifier:   C7:E9:41:81:A6:28:AB:86:2F:31:65:85:D0:84:F2:A8:A5:90:9B:43
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       0653
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa
Signing time:             Mon 04 Aug 2025 23:35:20 +0000
ROA not before:           Mon 04 Aug 2025 23:35:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134365
IP address blocks:        103.117.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Aug  4 23:35:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689143b8-661d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:67:34:18:ef:93:d8:48:38:a6:0f:7c:25:
                    30:5c:c1:b8:8f:60:0d:50:e6:27:a8:d0:f4:21:e9:
                    ce:b0:a8:a1:30:65:81:1e:91:95:51:ad:3e:80:7e:
                    54:43:74:4a:9d:b7:52:bb:6f:d0:08:16:10:1a:2d:
                    f8:35:e6:17:29:2f:99:83:9c:fa:1c:6d:3f:5c:4d:
                    b1:4c:50:2e:d3:1f:ff:f6:da:18:14:d3:36:38:99:
                    c8:68:ff:0b:38:97:67:17:66:cc:0f:5b:07:0d:0b:
                    96:dc:93:4f:9e:30:af:ee:1f:13:3f:9c:f1:64:37:
                    80:f6:79:c2:b7:90:99:6b:7a:35:1d:7c:fb:b2:b2:
                    31:12:a9:5d:36:38:ce:0c:57:77:d7:ac:80:7e:79:
                    fe:ed:15:3b:ab:d5:37:db:8a:92:98:04:22:e0:45:
                    fa:79:fa:86:ab:14:c5:86:31:e3:3c:24:c3:1b:23:
                    9a:3d:74:32:02:26:53:45:d3:e3:ce:60:8e:21:94:
                    8f:0b:60:76:76:01:81:49:41:47:c9:3c:c3:5e:7f:
                    6a:3c:f2:b0:9a:95:87:c7:4d:fa:b1:fa:49:3a:ff:
                    e7:11:3c:7b:40:51:15:1b:fa:8f:f4:72:ab:5d:a3:
                    a4:ab:b0:04:79:29:d6:16:02:62:df:8d:ac:ac:99:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:41:81:A6:28:AB:86:2F:31:65:85:D0:84:F2:A8:A5:90:9B:43
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:5f:bb:bb:3b:b5:b8:6c:48:57:9b:0b:2e:8e:62:da:40:
         ea:e0:60:c9:fe:20:98:eb:05:a2:fb:c1:75:dc:09:f0:39:7c:
         16:0a:54:99:61:ba:fd:c1:40:e1:f9:6e:27:ab:b9:d1:ec:fb:
         da:6a:be:94:c3:b4:d8:19:82:d3:cc:db:44:d1:4a:b6:bb:a5:
         dc:66:48:fc:3c:99:48:38:6f:d5:8b:ea:39:c8:fa:ac:aa:92:
         16:76:2c:e1:36:2c:29:e2:23:6c:28:9a:b1:13:fe:2f:29:61:
         86:fd:1e:2b:22:b2:99:3d:7a:24:eb:af:df:61:83:17:59:26:
         55:6c:eb:90:ca:61:d5:ad:3b:a7:32:db:78:24:32:70:75:5b:
         3a:6b:cc:d0:da:29:45:65:dd:3c:0b:15:56:c6:ec:f5:1b:ba:
         92:e8:33:c6:63:4e:53:1b:01:76:53:88:22:59:50:a9:d7:4c:
         41:03:33:35:d6:97:f7:22:1a:eb:10:5b:7f:50:fa:d3:07:5b:
         80:af:27:b7:22:26:e8:60:f8:cd:92:83:9e:2b:e3:ad:0f:26:
         8f:71:ba:19:9d:ef:22:5b:0f:7c:4e:0a:89:f5:c5:39:c2:be:
         7b:86:12:53:b1:fd:ba:f7:44:8e:73:78:bc:87:fb:cf:6a:d2:
         bd:d9:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:44:43 2025 by rpki-client