Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa
File:                     1445557CC6C011EC9D09EF1DC4F9AE02.roa (raw, json)
Hash identifier:          xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=
Subject key identifier:   49:01:64:C2:76:98:4F:27:A7:35:8D:95:01:4C:C7:86:AC:6E:F6:3D
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       0355
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 01:38:43 +0000
ROA not before:           Tue 05 Aug 2025 01:38:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        45.122.132.0/22 maxlen: 24
                          103.63.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Aug  5 01:38:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689160a3-37be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:0c:67:7b:ae:91:8d:ba:fe:c5:8a:58:ef:
                    60:35:94:b3:ed:2c:ac:d7:1a:ba:cf:0a:3e:43:2c:
                    2b:b0:eb:54:21:08:e1:12:89:29:50:2f:4b:9d:d3:
                    a3:da:5b:59:d0:e3:d2:0a:59:a0:f5:3e:7d:2c:57:
                    a7:68:28:52:13:00:52:d7:2a:de:d4:84:64:9c:d1:
                    0c:b3:fb:16:35:b5:e5:b8:fe:d3:f5:a2:3e:ca:52:
                    93:e3:43:7b:ed:c4:ea:29:42:b3:ae:e9:91:45:b5:
                    b1:9d:ff:24:71:ef:1a:f5:a9:47:60:b0:29:3e:5a:
                    f2:b0:16:3d:d0:9d:c2:2d:86:b1:cd:90:c8:11:67:
                    8c:09:a3:00:67:55:1c:e8:30:c8:54:39:f0:b4:2f:
                    3f:87:4d:40:43:b5:ca:d8:88:72:82:bc:f1:de:79:
                    35:f9:6c:89:78:66:33:da:b8:46:6a:23:85:c8:a3:
                    6a:bd:14:6b:6b:68:bf:a4:48:b3:c1:e0:88:15:09:
                    dc:c7:d9:0e:75:a7:2b:8e:6d:0f:4a:01:e4:a4:0a:
                    c8:91:0b:7f:3d:03:6e:88:84:f5:ff:49:22:68:b5:
                    3f:1d:55:85:d1:e2:c6:e2:2a:83:c0:4f:73:74:3b:
                    76:53:de:a7:99:bc:a0:3a:00:c2:20:ec:24:7a:10:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:64:C2:76:98:4F:27:A7:35:8D:95:01:4C:C7:86:AC:6E:F6:3D
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.122.132.0/22
                  103.63.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:25:ca:a8:45:a5:1c:f5:99:fe:d4:01:26:8f:7e:44:d4:95:
         66:2f:47:c4:8c:2a:24:3b:63:44:3d:81:8e:cb:59:f9:34:b5:
         80:33:07:bb:b9:90:9d:f0:81:b7:ee:8b:8a:1a:2f:ea:45:89:
         2c:c3:85:d5:69:52:4f:25:58:1c:61:00:69:9e:b3:cd:2c:a1:
         a0:d4:c1:00:9f:f3:c5:18:a0:99:f8:68:80:d3:af:49:4b:f7:
         1b:e1:15:4f:30:2c:5b:3f:97:87:1f:6e:98:47:ee:8f:42:d8:
         c4:6d:1b:2a:3e:77:28:55:7f:b3:61:28:38:bd:89:ba:0d:db:
         cd:8c:77:e3:47:39:9b:23:d4:5d:c8:26:78:d6:c6:83:64:a9:
         10:be:56:87:14:33:a3:1c:25:79:25:04:92:60:5a:01:9e:dd:
         49:af:fd:53:c9:fd:9a:fd:4a:3a:0a:5d:98:4e:3e:02:eb:b7:
         85:bd:f9:56:db:0b:56:4b:fd:dc:f6:c2:12:cf:1c:4b:25:76:
         ec:bb:c3:41:26:3c:a1:24:9e:7c:b1:44:ab:1f:fd:c7:64:af:
         aa:ab:fc:98:d8:27:33:f0:c1:30:3e:90:ae:c6:75:f2:0c:5c:
         d8:00:a4:d6:cc:ba:d2:e7:b5:66:cf:2b:f1:1e:52:05:db:3a:
         48:34:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:32 2025 by rpki-client