Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
File:                     81764BC4235511EC976AC464C4F9AE02.roa (raw, json)
Hash identifier:          Rcq5Nuqy/+xp1XYE1j9Q0LkOQi0P9qH6hEu8LNDUE2U=
Subject key identifier:   03:49:60:D7:FB:60:B4:57:13:46:EE:CF:16:C9:86:6D:B4:0F:FD:4E
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       04EE
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 00:35:47 +0000
ROA not before:           Tue 29 Jul 2025 00:35:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136751
IP address blocks:        103.95.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Jul 29 00:35:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68881762-c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:7e:99:c1:38:82:f5:2f:34:04:8e:e7:1e:
                    70:ca:aa:45:a1:3e:c9:d3:8a:25:75:da:cc:fc:f9:
                    e3:a0:fa:73:bc:ac:45:36:99:32:15:2a:d1:5e:7c:
                    c2:47:0a:4c:6d:79:4e:61:b7:fe:ee:15:3c:b1:cf:
                    ce:5b:a9:8d:c5:b4:f4:ff:c6:1f:7e:fc:c8:19:ac:
                    a0:4a:b6:4a:57:39:35:31:e8:a2:f5:56:e9:d5:8d:
                    4d:51:93:a7:4c:d3:fc:60:bb:58:e0:71:fe:08:07:
                    3f:9e:1c:cb:21:fe:2b:d6:59:89:5a:71:6e:48:f0:
                    7f:3c:0b:27:ab:b3:da:3f:78:e9:0a:2e:76:fd:3d:
                    f2:9c:34:82:17:93:eb:07:39:39:9e:4e:b6:77:75:
                    c3:ae:94:76:c1:1b:d4:34:d3:ae:b3:eb:e0:04:e3:
                    a6:2d:8e:24:06:14:04:85:57:01:fd:66:d4:ba:11:
                    76:34:38:a3:c9:1c:91:ec:df:06:c2:3c:b3:d0:42:
                    46:7e:f3:a5:72:6a:6f:57:28:5d:c9:c3:68:b8:5d:
                    03:16:ad:8b:7e:fb:3d:5a:23:37:19:11:72:a4:85:
                    7d:f6:0d:a3:26:6a:af:a6:bf:d3:86:30:86:50:86:
                    98:5f:9e:f9:b9:ba:4b:bb:b1:5b:e7:b5:11:3f:4e:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:60:D7:FB:60:B4:57:13:46:EE:CF:16:C9:86:6D:B4:0F:FD:4E
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:03:16:f8:20:67:28:d3:56:b0:4c:c3:01:ac:4b:dd:c6:63:
         a4:64:f3:8a:99:04:b6:ef:c1:f4:43:02:97:a9:3e:47:67:11:
         a8:e8:c3:1a:83:21:31:d2:f2:62:7f:b1:2d:4c:a0:0d:99:a0:
         37:d5:31:1b:a9:01:48:c2:84:e0:c3:3b:47:b9:bd:2a:d2:7a:
         12:8d:b1:eb:6a:91:83:90:29:c8:a4:7a:80:52:89:02:1c:44:
         8f:98:26:e5:10:ae:db:5c:9a:ac:39:f1:00:23:7f:4e:60:4a:
         ad:38:c3:a1:80:b3:c6:d0:fc:0a:60:df:36:cb:fa:ad:96:e6:
         d5:ac:06:7b:91:11:3a:b9:f6:30:da:e3:fa:23:7b:a9:95:be:
         26:d0:67:49:51:af:0b:ff:0b:b9:16:dd:da:4d:5b:a4:44:09:
         a6:10:69:00:dd:1f:a7:7c:80:27:bf:a5:82:e0:f2:fe:ac:39:
         42:b8:cd:ae:86:ac:dd:4e:1a:cd:7f:7f:69:09:a4:57:db:a7:
         bb:bb:c9:18:f5:b3:4a:f3:bd:0a:f6:14:a9:7a:2b:3b:8b:d0:
         29:17:ec:40:99:14:de:76:08:04:c7:90:0c:c6:d8:94:fd:2d:
         58:37:20:fa:98:18:d5:cf:25:67:b4:b8:ec:7c:8a:52:71:89:
         fd:e5:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:28:56 2025 by rpki-client