Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
File:                     F45C79E262F711EC8184F344C4F9AE02.roa (raw, json)
Hash identifier:          wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=
Subject key identifier:   1F:A8:AF:4C:86:FD:D5:EA:BF:A8:11:B9:06:5F:DB:4B:75:29:9E:7E
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       044F
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
Signing time:             Wed 23 Jul 2025 01:06:37 +0000
ROA not before:           Wed 23 Jul 2025 01:06:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139616
IP address blocks:        103.142.142.0/23 maxlen: 24
                          2001:df1:4680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Jul 23 01:06:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6880359d-f266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:5b:1b:37:e7:79:51:e4:2a:82:c8:a6:28:
                    47:40:9c:7b:13:da:29:99:28:b5:f1:23:d9:3e:18:
                    de:57:5e:a8:71:37:2f:4d:95:15:f4:a0:c9:cc:ad:
                    ad:91:3a:67:ee:05:6e:1d:2f:6c:00:0f:53:23:c6:
                    5a:c3:8a:6c:ee:57:cb:2e:d3:ff:60:a1:92:ed:06:
                    26:d5:41:a9:68:da:f8:df:1b:da:32:30:d6:ab:47:
                    09:80:6b:1e:79:75:dc:49:78:3d:e6:ca:1f:6e:91:
                    69:85:13:87:86:5b:95:3e:65:fd:f5:51:92:eb:2e:
                    ad:de:90:65:21:44:ae:f9:05:6a:03:ca:1c:ec:b2:
                    3a:da:ff:28:b7:35:b5:dd:93:00:69:25:57:dc:f5:
                    0d:d5:82:69:94:fd:72:b7:b4:66:cc:e7:78:54:4b:
                    70:20:e4:e1:c0:b7:ac:2b:34:1e:12:31:14:4c:75:
                    b4:f4:e6:74:a3:26:84:a9:46:1d:1d:2c:7d:f4:65:
                    09:62:27:1e:97:7c:30:a6:78:38:23:3d:fb:6a:fd:
                    0d:a5:b0:ac:4a:b9:d6:f9:a2:fd:c6:6d:57:aa:76:
                    3b:70:53:b2:1c:9c:a3:b3:39:b3:28:c9:d4:56:9d:
                    87:dc:1b:9a:6f:eb:d9:d1:95:68:17:2a:ff:bd:84:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:AF:4C:86:FD:D5:EA:BF:A8:11:B9:06:5F:DB:4B:75:29:9E:7E
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/F45C79E262F711EC8184F344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.142.0/23
                IPv6:
                  2001:df1:4680::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:7d:f3:14:6d:5b:6c:11:8a:f1:ef:6e:80:fd:1d:70:94:7d:
         55:79:d0:48:7c:16:79:8f:84:cc:94:66:f7:5e:73:b4:17:cd:
         1b:f9:c8:ee:31:57:91:bf:d6:46:ba:0b:16:2a:ad:99:75:66:
         ca:f6:f8:ea:44:ca:e0:83:af:ad:82:68:28:a3:2f:02:6f:c7:
         3b:4b:dc:7b:6b:8d:80:6f:c9:08:a0:eb:fb:51:66:96:b3:15:
         60:4e:9d:da:56:41:6a:97:d2:ae:11:cd:39:17:a4:47:ab:cf:
         36:eb:81:87:32:74:a1:01:3e:d8:b2:d2:43:c6:1a:88:07:e7:
         15:b7:90:32:52:fc:30:35:ff:1c:b9:70:42:ad:74:27:76:32:
         93:35:56:3a:6c:2d:bb:de:94:5c:56:7c:4e:80:f8:fc:cc:2b:
         76:e2:21:2e:c6:66:8b:99:17:f6:32:31:72:1b:f9:b0:59:ca:
         4f:ba:59:a9:bb:29:d0:d1:61:b7:99:fb:1a:79:20:c6:8a:4a:
         72:4e:e4:09:de:c2:2b:5d:79:0a:52:7f:1f:44:ba:34:c5:51:
         8a:ff:3b:a8:f9:06:98:63:85:e4:2f:b0:b6:5f:16:1b:de:85:
         78:00:bf:c6:2b:e1:60:8f:fc:97:04:f2:1f:93:43:92:8d:27:
         11:c3:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:31 2025 by rpki-client