Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/49467E2251BB11EEA3C7487DC4F9AE02.roa
File:                     49467E2251BB11EEA3C7487DC4F9AE02.roa (raw, json)
Hash identifier:          F6++iy8cEbKQfe1Q/Aey0VLsmUU4uYp21N+gDBYbdrs=
Subject key identifier:   70:E9:19:46:03:DD:AC:75:FF:0E:AA:6B:7B:4A:F2:6E:85:4D:E5:0E
Certificate issuer:       /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73
Certificate serial:       0163
Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/49467E2251BB11EEA3C7487DC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 05:42:29 +0000
ROA not before:           Fri 01 Aug 2025 05:42:29 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     136390
IP address blocks:        103.187.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl
                          rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73
        Validity
            Not Before: Aug  1 05:42:29 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688c53c5-e9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:e3:95:38:73:0a:ae:6d:c0:da:7f:e3:5c:
                    c6:3c:82:02:8e:fb:5b:fd:c2:c7:e2:3b:5d:f0:03:
                    0a:66:f5:4b:be:ca:0e:60:52:b9:ef:be:64:52:63:
                    b8:8e:f5:68:e4:36:7d:7d:a2:2c:f5:e2:dc:da:d6:
                    3e:ea:b9:48:7d:65:9f:8e:61:df:26:f3:7c:a3:d3:
                    10:05:32:4a:6d:74:46:21:09:ba:a2:5f:ab:73:36:
                    f1:ae:6d:4c:50:92:cc:d1:6c:eb:3f:f7:6a:99:8c:
                    50:ac:5a:5d:2e:2d:4b:8e:a1:60:25:51:7e:2b:85:
                    9f:fc:31:b8:2b:40:97:1c:b9:a3:bf:00:26:ba:1c:
                    46:d0:fa:4d:56:16:44:d8:ac:ae:f2:71:2d:cb:45:
                    d7:f5:f7:f4:41:ef:24:01:d4:62:1f:9d:56:28:84:
                    8e:6b:20:13:51:df:34:13:9d:67:a5:2d:da:2f:d9:
                    0a:22:50:23:c3:12:9a:9b:71:1a:e6:de:b5:40:f2:
                    e2:7c:6d:bf:91:9a:25:4f:a2:6c:a7:a2:40:53:6a:
                    d4:64:c4:00:6b:5c:07:64:62:3f:69:7e:9c:34:93:
                    ea:1c:aa:80:cd:b0:35:4a:a9:1c:46:40:44:40:ad:
                    d9:38:27:b2:73:72:75:8f:fc:59:72:bb:32:6d:68:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:19:46:03:DD:AC:75:FF:0E:AA:6B:7B:4A:F2:6E:85:4D:E5:0E
            X509v3 Authority Key Identifier:
                keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/49467E2251BB11EEA3C7487DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:f9:40:f1:fa:79:46:39:f8:41:cb:c1:2b:a1:97:55:dc:
         a1:62:e0:30:36:70:15:73:15:e9:91:5b:82:6e:77:f5:c5:36:
         21:8c:61:95:bf:36:56:92:ea:94:75:bf:b9:94:69:98:d0:18:
         54:b9:2f:68:dd:b0:da:e2:d3:d4:13:e4:cc:1d:d0:e0:cb:2e:
         c8:80:a4:35:df:a4:a6:09:cf:00:b3:6a:ae:06:83:7f:3e:07:
         6f:c9:f8:5c:7f:9d:88:f1:2f:4f:e7:1f:e2:bd:77:f8:fc:95:
         77:ed:72:9d:df:65:58:30:33:f2:cc:b4:cf:36:ad:22:a5:88:
         1a:f1:22:98:7b:55:a7:1d:e5:a1:83:f9:1b:80:de:5f:5a:ca:
         cc:29:fe:6c:43:7b:83:a1:7b:fa:79:6a:91:9d:c1:59:1a:9b:
         b3:05:61:50:ad:61:08:a8:d9:e5:c4:b4:0b:f1:62:3b:cf:e5:
         20:6e:95:48:fc:cf:fa:28:6f:32:81:de:64:b2:2e:99:b6:80:
         77:36:36:be:3f:ca:e5:8c:16:43:da:30:74:5d:8c:a6:89:ab:
         d7:38:1e:92:63:2f:15:50:a2:70:2b:7e:50:94:f4:e9:ab:ca:
         fa:ee:5c:fc:32:12:47:92:94:2e:e3:b0:0d:f8:28:d6:d1:35:
         76:de:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:35 2025 by rpki-client