Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
File:                     1BE631B0668C11F092BB0479C4F9AE02.roa (raw, json)
Hash identifier:          889zGZBsMfgV1bTIc5AsOgt3rk6bmVAUBCLPcamrp9o=
Subject key identifier:   15:12:00:7B:07:A4:60:5C:AF:C7:B0:D6:43:B3:D4:78:96:70:41:5D
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       61
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
Signing time:             Mon 21 Jul 2025 23:40:40 +0000
ROA not before:           Mon 21 Jul 2025 23:40:40 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     63917
IP address blocks:        103.44.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Jul 21 23:40:40 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=687ecff8-62a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:20:9f:dd:94:ff:d4:1b:8c:1c:dd:27:c1:
                    47:de:9b:66:62:b9:d1:3f:c2:1c:16:f7:8c:e2:1b:
                    ca:59:bc:af:78:41:59:53:47:12:73:dd:ae:70:03:
                    8a:37:9c:33:37:7d:08:65:b8:e5:30:f4:f5:04:cf:
                    29:cb:43:65:d2:b0:a9:b8:4a:c9:c7:e7:05:fa:92:
                    7c:1d:9d:8b:f0:2b:ae:89:bd:73:90:df:b0:87:37:
                    65:a2:9e:50:0a:3a:f6:4e:0a:4d:72:a3:ae:67:08:
                    be:ff:de:e6:8b:18:c3:9d:db:a3:c6:f0:e1:0d:51:
                    c9:c6:b7:75:d8:01:eb:36:82:e1:42:21:4e:14:87:
                    69:19:4c:c7:20:00:15:36:26:aa:fb:77:1f:dc:6a:
                    6e:49:67:81:53:ce:22:be:5f:c6:0d:a0:0d:2d:94:
                    83:5e:34:83:30:97:c2:5a:36:50:82:e4:1b:c9:4d:
                    bd:ff:30:26:f6:be:53:2a:f8:14:83:4e:90:13:1d:
                    c3:cc:f5:65:ee:0d:20:6c:cc:5d:70:29:0c:a8:71:
                    05:eb:55:f4:ed:1f:e1:5a:11:e2:65:59:bf:ca:c7:
                    f6:77:d9:97:5d:d7:fb:37:57:b9:45:11:b6:d7:2e:
                    ff:fe:3b:d1:c3:5e:e2:65:3c:22:9c:18:f6:14:e7:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:00:7B:07:A4:60:5C:AF:C7:B0:D6:43:B3:D4:78:96:70:41:5D
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:1b:cd:3a:c2:5e:d9:e7:2e:f9:1d:24:cf:6b:81:85:1a:
         0b:a1:24:d5:5b:3f:e1:e0:a2:d1:98:e4:3b:a7:8a:0e:2d:cb:
         a5:f5:cf:51:34:ad:c2:57:a1:b5:87:75:cf:e1:d0:3f:b1:dd:
         29:0f:e7:e3:49:b6:5b:f4:9d:36:21:e4:0e:53:8e:75:53:82:
         65:c9:e1:98:09:45:0a:81:ee:d8:d3:00:06:3f:54:a3:41:00:
         e6:81:35:81:ec:14:cb:d4:df:72:fb:90:a6:38:2e:81:07:9e:
         2b:ee:a9:d1:9a:92:50:9f:41:6f:62:9d:21:28:62:0f:b3:73:
         a2:cf:9e:47:b5:bf:cc:d6:ec:f4:33:e9:63:9e:70:cb:6a:6a:
         df:1b:65:08:15:a8:5c:e7:41:61:a2:a9:1d:f8:e9:66:20:4b:
         dd:a5:b8:be:35:7f:ae:81:8d:db:36:0b:86:ab:69:74:e4:f5:
         d4:a8:97:4b:85:2a:84:72:bb:c5:dc:f7:68:db:03:64:66:28:
         25:62:ab:8a:01:1c:3e:91:ac:0d:c2:38:60:c1:f2:d5:3d:ea:
         28:fd:8a:ed:9d:2d:5d:88:c7:31:a1:a3:51:6c:06:4d:16:2e:
         dd:0f:0f:78:05:54:f5:59:e9:c9:3d:15:0c:85:3a:6a:05:89:
         6a:06:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:10:29 2025 by rpki-client