Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
File:                     B2602B2820EC11EF964FFE2CC4F9AE02.roa (raw, json)
Hash identifier:          m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=
Subject key identifier:   FA:4F:A7:AF:21:04:64:69:64:58:37:6B:61:70:A6:F6:B0:79:4A:46
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       0655
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
Signing time:             Mon 04 Aug 2025 23:35:22 +0000
ROA not before:           Mon 04 Aug 2025 23:35:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152705
IP address blocks:        103.117.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Aug  4 23:35:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689143b9-4ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:4b:30:2c:87:51:c1:60:0c:97:9b:40:b1:
                    b5:f6:d9:f3:08:f2:f3:b4:7f:a0:03:43:0e:2c:17:
                    d3:5c:90:7c:1a:25:30:a9:1f:ce:7b:0f:09:cf:35:
                    df:84:24:e7:77:af:17:db:31:fe:d7:89:d4:24:86:
                    19:4a:3d:7d:e0:1e:e3:6c:d6:f5:10:be:2d:3d:f6:
                    d2:c7:63:51:48:ca:7d:e6:3a:f0:3c:f5:06:e5:fb:
                    19:22:72:f7:38:3d:d4:b5:a6:a6:67:3a:08:2a:5f:
                    71:df:26:9b:05:ca:af:93:69:45:2f:ab:e0:2e:99:
                    79:c0:f9:a3:75:07:29:d0:f0:02:92:9e:1b:c8:91:
                    71:55:87:2c:c4:3b:c0:cb:a8:47:17:ab:c1:69:75:
                    b7:c5:af:42:14:be:f8:a2:a0:e0:a9:cd:6d:cb:5d:
                    dc:0a:a7:05:ab:4b:65:db:b3:1b:53:05:15:ed:16:
                    9d:98:bd:26:e9:c6:87:5a:93:6b:84:1a:fe:e3:db:
                    89:0b:13:cd:0f:07:46:a3:62:55:30:f1:e5:99:91:
                    b8:e8:20:82:c3:2d:4f:52:ea:9c:71:fe:ec:01:b3:
                    39:fa:92:45:9d:0d:54:62:f8:90:37:eb:9e:c0:b7:
                    23:b5:01:9d:0a:4d:2b:8c:50:34:9f:db:ce:53:ca:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:A7:AF:21:04:64:69:64:58:37:6B:61:70:A6:F6:B0:79:4A:46
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B2602B2820EC11EF964FFE2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:98:bf:a6:54:ab:7a:24:a5:36:ce:41:02:7f:31:35:62:d6:
         c6:b8:92:7e:79:56:cf:99:6f:92:68:8a:6e:60:0d:54:b3:68:
         0f:5b:6d:3e:c4:85:66:7f:e4:52:c4:47:0c:6a:2d:4f:2c:0f:
         5b:ab:d6:fb:96:c2:07:da:a3:3e:47:47:94:d7:26:9d:88:88:
         a2:aa:f6:a4:ea:25:84:f5:e6:0e:6e:d0:68:ae:9e:9f:31:7c:
         2a:eb:8c:ca:1d:b5:b2:45:c8:27:dc:af:a9:ca:d0:00:b1:1d:
         e7:81:8c:94:33:1b:60:e0:12:f2:6b:28:80:3a:11:b0:66:84:
         61:fc:38:5b:af:c9:c7:2f:91:41:c4:52:d1:1e:b0:e6:b4:bc:
         23:4d:91:e1:19:9c:53:82:da:77:a5:5b:26:43:99:5e:d7:a2:
         85:83:f3:43:e1:8d:72:2e:42:5c:44:c1:f5:3f:62:98:96:26:
         cc:8e:24:f0:53:d5:3a:3b:cd:95:26:a8:21:e4:81:20:7b:1a:
         2c:ec:fb:44:3f:66:cc:24:4d:02:9b:77:a4:6f:f7:15:db:a1:
         ef:ac:31:73:2c:80:37:1b:4d:da:d2:74:be:52:37:02:3b:0a:
         72:07:c7:22:11:b8:60:30:02:df:39:e8:30:bd:b7:76:ee:9a:
         b0:ca:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:54:11 2025 by rpki-client