Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File:                     F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier:          H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=
Subject key identifier:   46:53:E5:A6:42:34:DA:42:64:00:95:19:BB:7C:75:83:68:42:68:91
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       0471
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 01:07:35 +0000
ROA not before:           Wed 13 Aug 2025 01:07:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139466
IP address blocks:        103.141.199.0/24 maxlen: 24
                          2001:df1:b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 01:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Aug 13 01:07:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689be557-bd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:a1:fc:8f:0e:0b:95:7a:22:e6:99:de:63:
                    5a:2e:f5:89:a0:2c:d1:70:bd:ad:42:9b:a5:22:0e:
                    11:12:9f:7e:1e:73:83:99:c3:63:d8:55:a4:56:40:
                    fa:60:28:cc:02:eb:6c:72:ac:13:e2:f8:f3:6d:27:
                    91:f2:54:70:ee:1e:ad:32:40:5e:3d:67:5e:70:7c:
                    49:01:a4:5f:b8:da:4d:76:e9:c5:16:b6:bd:99:95:
                    30:57:32:7c:88:f4:2a:c3:74:c8:58:28:0d:2a:b1:
                    ed:1f:0d:cb:b0:b4:5a:f1:fd:e5:6a:76:ce:86:f2:
                    c8:2c:24:59:20:3b:90:db:a7:1e:5b:9f:ce:0d:c3:
                    f1:32:68:39:2a:69:a0:d3:4d:70:6c:ba:ed:a1:ca:
                    d3:1a:d9:a2:3d:b8:9b:02:0b:64:ea:57:11:75:c4:
                    2e:37:42:78:d2:39:e7:d2:80:31:db:6f:22:4e:38:
                    1b:c5:a1:d9:9b:7e:42:1c:c5:61:1a:a2:86:41:c5:
                    3b:c3:7f:96:5a:7c:ed:89:42:8d:b9:f1:30:9b:51:
                    3d:c0:b5:2c:a5:5b:ad:b6:a1:1e:0f:e3:66:b9:02:
                    50:d4:4a:1b:a7:00:2b:30:ce:d0:25:c4:a6:14:7f:
                    d5:2f:7b:fa:d6:f4:e7:f3:d9:4e:9f:b1:ff:8d:81:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:E5:A6:42:34:DA:42:64:00:95:19:BB:7C:75:83:68:42:68:91
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.199.0/24
                IPv6:
                  2001:df1:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:fb:46:7f:ec:e2:ea:5b:f8:fe:1a:b9:69:68:90:0c:0b:
         9f:c7:9a:99:90:0b:de:3b:ae:bb:bb:4b:a3:07:1d:a4:59:70:
         bb:0d:5b:ab:a5:2f:27:cb:55:ff:c0:c6:fb:59:e6:32:74:e1:
         d5:5e:a0:ce:71:18:c3:7a:8b:42:56:81:80:97:51:b9:73:97:
         fe:a1:42:84:e6:90:90:df:4c:f8:eb:2d:b7:30:d1:8b:29:14:
         64:6d:76:50:c8:9f:94:60:cb:f0:12:57:fe:05:f3:0d:86:b4:
         da:f1:a2:a1:f3:fd:9b:5b:2a:44:4b:19:46:02:e5:97:01:e2:
         f6:68:b4:b4:87:22:71:f9:24:d7:db:18:20:c6:25:16:4a:09:
         e2:a8:44:8e:36:b0:35:b4:1e:b7:4c:c3:30:38:c7:0c:09:b8:
         8c:b1:b4:5d:3f:da:22:9f:55:16:2d:91:23:f8:4d:4a:05:1a:
         c3:87:21:9b:c3:a8:98:2b:17:83:58:bc:c9:88:e7:6b:d1:b1:
         54:58:e8:9c:11:be:a7:a9:5d:17:1b:ea:8c:e7:ae:a4:e2:f3:
         f9:ab:8f:7d:13:2f:f9:5f:15:6f:af:50:ac:b7:6f:bd:dd:35:
         f7:79:14:b6:5a:7d:9d:8b:c1:52:36:85:29:c5:73:4b:f1:39:
         07:74:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:53 2025 by rpki-client