Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/83407C26744C11F0B13EF277C4F9AE02.roa
File:                     83407C26744C11F0B13EF277C4F9AE02.roa (raw, json)
Hash identifier:          sBHRf7Y2YfQS2HZYHc29+HH/hIPL3+9cJ6TB9Y9RHC0=
Subject key identifier:   5B:34:B5:53:57:27:A1:3D:42:30:2C:1F:EC:3E:DD:8B:E4:B0:59:52
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0B79
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/83407C26744C11F0B13EF277C4F9AE02.roa
Signing time:             Fri 08 Aug 2025 11:40:42 +0000
ROA not before:           Fri 08 Aug 2025 11:40:42 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     47690
IP address blocks:        103.101.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2937 (0xb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Aug  8 11:40:42 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6895e239-d2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:7e:46:53:25:f9:62:f2:c6:86:b7:7a:2f:
                    18:60:31:cc:a8:0a:04:8a:63:dd:02:22:ed:a5:3c:
                    5d:31:40:7d:5b:f6:07:bb:2b:68:bf:6e:e1:ce:9d:
                    b9:58:93:e0:2d:94:1d:42:40:3e:a1:fc:02:e9:31:
                    4c:c3:04:d2:59:9f:d2:ed:b1:d5:f8:83:9d:99:e3:
                    86:83:bb:76:d4:66:ff:45:d6:4e:58:72:fb:36:5f:
                    a7:07:4f:c8:55:5c:51:d9:05:6a:d7:1a:8e:f1:0b:
                    65:be:93:c2:2d:60:16:e0:3a:1d:bf:b0:2a:ff:42:
                    6f:ee:3f:66:8a:2e:f8:f5:bc:17:a6:65:b9:9c:e2:
                    61:fb:d1:47:93:5d:53:55:df:2e:7c:42:6c:e5:d9:
                    53:e7:e3:d6:ea:9f:c9:77:a0:34:c3:d0:d1:c5:13:
                    f8:e8:07:0c:ec:52:7d:51:b6:bf:b8:7b:eb:0a:75:
                    e7:4e:e3:80:94:fc:26:94:e3:2d:66:32:1c:33:62:
                    78:ce:52:73:e6:b3:fc:2c:6e:98:d4:82:49:78:a7:
                    7d:66:92:f6:46:fb:3f:4f:a9:bf:0c:43:8b:96:a3:
                    75:c5:b0:95:e5:4e:e7:0d:0b:1e:f0:a5:74:a5:8e:
                    0e:19:3a:da:e3:4c:b5:79:5f:3a:58:ad:6e:99:22:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:B5:53:57:27:A1:3D:42:30:2C:1F:EC:3E:DD:8B:E4:B0:59:52
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/83407C26744C11F0B13EF277C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:46:6a:0f:b3:d3:d7:62:51:0e:3f:38:b8:f7:82:7f:13:
         5e:e3:96:5c:15:78:5e:bd:db:21:15:79:73:db:60:79:23:54:
         52:5d:0f:66:66:22:32:07:04:6f:51:86:b7:c0:c5:30:b6:5e:
         ab:bb:a6:76:31:32:0f:c6:31:aa:0f:bf:f8:b1:12:7f:0a:14:
         4a:03:1d:43:5c:bb:57:f3:00:06:56:2d:71:39:75:5b:bd:68:
         d5:f2:c3:f8:d3:0e:21:e4:d0:e2:56:07:89:ee:5c:2c:7e:63:
         96:ec:8d:a8:0c:09:5e:87:cb:ec:a7:de:6c:34:d4:8e:cf:2f:
         fb:ad:8c:44:71:44:7f:68:87:a9:d7:ef:b6:c0:65:ad:d3:14:
         3d:e4:2c:7e:4a:88:11:04:40:f8:3b:a7:0f:2f:9b:79:0c:e7:
         57:f6:e4:36:dc:11:f6:a4:2a:d3:6f:fd:e9:33:d4:0a:32:28:
         08:0b:ed:d8:96:eb:9c:4f:21:3c:92:1f:d8:28:48:6f:80:b1:
         74:8e:1b:8b:2e:9e:5e:55:38:17:b1:14:30:ff:01:6b:2f:cd:
         32:3a:c0:92:ab:5b:78:f6:b5:0d:48:5e:19:23:d7:36:f6:35:
         85:b9:98:54:97:29:78:d3:45:3d:7e:32:4f:f8:42:88:2b:83:
         98:81:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:05 2025 by rpki-client