Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
File:                     4F153D60719511F0A684963CC4F9AE02.roa (raw, json)
Hash identifier:          4gYAUnZaCoe3Qlid6S3QmUoJ7RBfvEPZol27rumogJ8=
Subject key identifier:   C0:43:1E:71:9F:4F:82:D6:AC:89:61:92:BE:9A:5D:59:8C:75:C6:0A
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0B56
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 00:44:14 +0000
ROA not before:           Tue 05 Aug 2025 00:44:14 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     132827
IP address blocks:        103.11.6.0/24 maxlen: 24
                          103.11.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2902 (0xb56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Aug  5 00:44:14 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=689153de-d7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:40:79:0f:c3:b5:e4:aa:53:c5:8f:cb:be:
                    a7:22:4f:d9:c6:dc:d0:f5:90:ff:7a:e3:a8:24:66:
                    b0:76:3c:0d:d4:bd:7e:f5:7f:51:0f:c1:2a:eb:2a:
                    d1:60:6c:60:15:f0:d3:f1:e3:5d:7a:be:2b:fe:2f:
                    e0:7e:78:40:3e:99:b4:a6:44:6d:0a:a5:75:fa:15:
                    7a:93:bd:26:25:53:76:76:14:47:76:c0:05:af:a2:
                    59:7f:ca:f5:62:41:4b:ed:15:98:78:34:4a:c9:45:
                    55:de:1c:63:68:6e:84:86:76:e1:2d:51:9f:ad:47:
                    75:2b:05:a1:68:e5:3e:d3:db:da:46:28:b9:dc:4a:
                    d4:e2:f4:41:91:83:d4:22:0e:69:f3:d6:82:95:3e:
                    0a:14:6e:aa:f8:b1:b4:49:b3:d2:08:2c:28:0d:6d:
                    fd:71:6d:95:29:ff:a1:f9:a6:7b:32:22:4c:16:be:
                    5a:07:ed:0a:51:64:78:4f:6f:26:40:2f:e7:e8:af:
                    7c:63:84:7a:f5:a4:f5:30:c0:20:b6:d4:c5:cc:8a:
                    8d:45:fd:4d:28:07:68:48:00:95:95:48:d1:87:7c:
                    d1:49:49:27:ca:0d:d1:1c:2c:f2:85:d8:4b:98:0a:
                    20:55:9b:7d:1c:33:34:fa:1a:22:ff:d0:0d:88:52:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:1E:71:9F:4F:82:D6:AC:89:61:92:BE:9A:5D:59:8C:75:C6:0A
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/4F153D60719511F0A684963CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:5d:68:28:37:3e:44:e5:03:5a:de:6b:2c:ea:94:d7:9e:
         7e:25:1a:ea:1d:07:ee:98:10:43:c1:2a:7f:aa:63:ae:85:99:
         41:18:cd:06:ec:b7:6d:5c:41:f4:36:21:44:9a:d0:56:3d:a0:
         d0:9d:05:c7:cd:13:df:02:9f:c3:11:98:18:65:08:8e:32:0e:
         31:3d:c8:2e:e0:7d:3b:c5:ed:36:07:be:fa:bd:f6:ba:60:0e:
         c0:9c:61:ec:c5:37:14:27:de:40:3d:c9:86:76:77:22:d3:2e:
         3a:4d:cd:80:e1:97:82:e6:2f:16:f4:86:22:45:60:5c:fb:6f:
         32:63:68:c7:46:d6:42:0a:57:73:6a:73:ac:95:f5:42:d6:46:
         61:e1:84:5b:90:3b:3b:8c:0c:b7:88:fc:ed:b8:67:ef:e2:f4:
         86:b6:13:97:f0:52:56:3c:f2:b0:51:11:1a:5e:6f:03:17:e2:
         3b:f9:90:9b:7c:24:7a:f6:2b:6c:04:ad:bc:cc:3b:6a:18:44:
         c7:cf:bb:3f:b4:37:a6:2f:3f:70:34:2f:68:2e:6a:9f:9c:b4:
         6b:14:b4:46:9a:3f:a2:9a:1b:9a:21:ea:49:9c:49:ec:cc:36:
         a8:f8:ee:86:3c:5d:4d:3c:a3:30:4a:b7:31:bf:e3:6c:60:2f:
         77:5d:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:59 2025 by rpki-client