Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa
File:                     47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (raw, json)
Hash identifier:          nOK4DMRRD7EMHW1vygJSaZC/Q2N8Vn6fopdd1X9izD0=
Subject key identifier:   8F:C8:94:47:25:C6:C2:46:B3:90:E5:78:60:F1:EB:C2:45:7E:37:75
Certificate issuer:       /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial:       06C7
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 22:12:06 +0000
ROA not before:           Sun 02 Nov 2025 22:12:06 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138977
IP address blocks:        103.137.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
                          rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
        Validity
            Not Before: Nov  2 22:12:06 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6907d736-dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:18:24:7f:30:91:fc:72:77:e8:f9:d0:ae:
                    f4:4d:92:a0:4e:03:dc:04:b9:f8:44:4a:2e:ea:dc:
                    c1:f4:a6:42:85:bb:f0:c7:0c:2c:ee:b3:59:9c:47:
                    5d:01:94:37:c7:55:1a:59:d8:f9:bb:ba:d9:db:ad:
                    c9:f2:a3:05:33:01:60:65:39:32:87:bd:25:3f:7e:
                    50:b5:09:b0:b2:d8:da:59:f5:65:40:ae:5f:66:77:
                    ec:62:ae:8d:9b:42:b9:90:93:7d:2d:c3:8a:d0:5e:
                    89:63:9f:5d:3d:0a:19:4c:e1:91:90:bb:ff:ea:b1:
                    6f:c3:0a:15:f8:4e:31:7a:cf:50:8f:0d:e7:32:c7:
                    43:9a:79:21:b3:29:84:81:0f:3d:16:fb:0b:b6:35:
                    ed:c6:80:ae:79:b4:45:f8:43:75:1f:fb:72:9a:ac:
                    f0:96:b9:a3:7e:d0:6f:31:a2:89:31:6a:0a:65:b5:
                    3a:25:1c:19:e4:20:6d:f0:b7:76:4f:d7:5e:63:53:
                    7a:5a:84:e7:3c:c5:0c:75:8e:a7:99:7f:7e:73:df:
                    71:77:d0:76:21:63:00:dc:60:4f:1b:7a:b7:70:6a:
                    c1:54:a0:50:ed:8c:93:59:7b:d0:46:12:d5:22:93:
                    ce:62:2f:56:90:4d:d6:2c:a0:58:8b:8c:a7:62:24:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C8:94:47:25:C6:C2:46:B3:90:E5:78:60:F1:EB:C2:45:7E:37:75
            X509v3 Authority Key Identifier:
                keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/47249F9E7D7D11EBA5FADA5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:92:92:a0:1e:81:f2:4a:aa:48:6a:46:9e:f5:43:7f:64:
         e0:96:75:4a:23:ab:9c:de:19:9a:a9:a4:16:15:b6:0c:63:27:
         f5:51:28:17:80:f4:9b:e4:14:57:95:3f:5f:8b:58:5d:7c:74:
         f5:d0:dd:26:b0:64:c1:2d:95:eb:da:a3:87:fa:ed:45:0a:1f:
         b9:bc:f3:69:70:4c:32:7d:df:91:12:03:25:81:c0:8f:15:57:
         21:04:2f:67:d1:b8:74:ab:46:b1:66:21:c7:66:d8:8e:b2:1b:
         c0:b2:16:df:ae:1c:95:f0:7f:32:41:80:e6:df:f6:13:4d:59:
         4b:a8:f6:09:29:48:95:98:8e:2a:ac:24:3c:fe:fb:d2:be:15:
         98:89:77:5d:9c:bc:0f:1b:ab:da:a6:b7:9c:3a:fe:50:59:85:
         e5:e0:28:a2:29:8a:cf:48:78:a8:c8:88:9c:05:4a:63:4f:9c:
         a4:66:b4:59:36:bb:d5:a0:95:75:d5:3f:8a:27:be:e4:87:7a:
         7a:9e:c6:eb:6e:8a:6e:17:64:d2:27:cf:d0:30:c2:48:e6:e7:
         7f:af:0f:42:3e:e5:ff:0a:4b:f5:57:03:7d:8f:bd:99:b8:9f:
         e6:a1:9d:aa:a1:e5:6c:87:df:39:ab:2b:fa:48:85:9b:57:63:
         55:7d:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:21 2025 by rpki-client