Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/46090834705811F099A0C739C4F9AE02.roa
File:                     46090834705811F099A0C739C4F9AE02.roa (raw, json)
Hash identifier:          q4sIWsLWu93GK3GQp4d8mpOI7uP+zQCsKrY4ov8COCE=
Subject key identifier:   F5:49:82:F8:27:72:8E:64:B0:26:09:60:18:05:78:5F:1C:E0:E9:CE
Certificate issuer:       /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial:       45
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/46090834705811F099A0C739C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 10:54:48 +0000
ROA not before:           Sun 03 Aug 2025 10:54:48 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153523
IP address blocks:        103.77.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
        Validity
            Not Before: Aug  3 10:54:48 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=688f3ff8-38cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:12:0f:76:3f:44:92:49:73:48:6e:65:77:
                    62:e7:21:35:68:00:4a:1f:7f:d7:32:d2:58:a0:1b:
                    84:be:b4:71:af:89:8b:0d:7f:ce:e6:95:ef:c7:a2:
                    b4:c0:fd:f2:8c:ce:67:22:bb:73:ad:19:ca:f1:ee:
                    82:5a:f9:5e:71:f4:aa:f1:5f:bf:d2:89:94:69:c5:
                    93:62:6f:e8:db:44:4a:a9:02:c3:ce:72:18:00:e6:
                    6e:f5:1c:36:ed:14:f6:dc:49:a4:90:29:1c:46:b0:
                    43:2a:71:46:e5:0a:78:c6:17:bf:5a:08:11:53:5c:
                    b8:05:4e:7d:b2:7d:ae:37:15:83:c7:b4:2d:53:e9:
                    7c:98:62:d1:39:f1:19:55:10:6a:a9:17:a6:5d:0f:
                    ff:2f:90:60:36:6d:b8:4a:0c:32:5f:56:b3:95:c4:
                    11:5c:d4:b5:c3:d5:72:73:e1:69:29:06:30:44:b4:
                    f3:33:4d:3a:9d:73:b7:ed:a8:22:dc:93:e1:b2:dd:
                    89:e5:07:ba:ef:26:f8:19:e2:b6:43:35:43:a2:5d:
                    b9:16:0a:54:92:93:32:4a:02:63:ef:7c:58:04:b1:
                    6a:10:d8:c7:c9:62:0a:dd:77:fe:67:5b:bf:d8:5a:
                    c4:b2:d3:81:82:23:38:52:ec:de:f1:5c:b2:f7:26:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:82:F8:27:72:8E:64:B0:26:09:60:18:05:78:5F:1C:E0:E9:CE
            X509v3 Authority Key Identifier:
                keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/46090834705811F099A0C739C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d1:7a:6a:0c:de:b9:80:cb:0f:7b:9a:96:56:8f:00:ed:f8:
         08:f8:09:3f:13:46:93:ca:53:9d:0b:e5:e3:c3:66:fe:39:fe:
         50:a3:8c:0e:78:b1:f0:65:d6:1f:05:70:a9:53:00:2e:25:90:
         45:61:e9:0c:57:d1:37:ee:0b:11:b4:07:1d:9c:aa:be:e1:ea:
         56:69:cc:8b:39:8b:d0:a0:6a:76:b0:e8:5f:ba:51:7b:d2:fe:
         c1:a9:ec:81:24:d8:c0:ec:af:61:b0:57:d3:b7:f9:5f:ed:b9:
         e3:5c:3f:18:6c:6f:7a:a5:81:26:fb:83:0b:b6:c5:e6:45:b2:
         57:69:46:92:6e:e8:68:af:f0:ec:0e:3a:82:15:d7:0f:27:2b:
         9a:75:dd:12:af:f0:55:90:02:cb:63:62:16:d8:23:7a:60:bb:
         0c:27:e4:e0:64:4f:e8:4f:a6:75:18:e0:1f:4d:f9:3c:88:39:
         ee:5c:e0:ec:c4:e6:28:30:36:8b:74:87:3b:50:80:82:fb:46:
         7b:41:29:2e:2a:66:11:24:5d:c0:67:c4:39:d1:3a:1d:5a:0e:
         61:48:19:2e:c8:8b:63:b8:0a:c3:35:08:7e:e2:76:ed:86:0c:
         97:bc:c4:9e:16:07:1e:2a:bb:b6:3e:7d:2e:10:11:a2:04:51:
         49:32:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:28 2025 by rpki-client