Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
File:                     C53629FEEACE11EEA8513D34C4F9AE02.roa (raw, json)
Hash identifier:          rs8L3xzWNeMTaODdfG7gScPAqvq7Bu7zItiDdkrEqpw=
Subject key identifier:   29:AE:6F:B5:F6:AD:5E:30:84:9C:11:18:34:0E:3C:58:A5:C4:B9:1B
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0B78
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 19:59:49 +0000
ROA not before:           Thu 31 Jul 2025 19:59:49 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141351
IP address blocks:        103.116.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2936 (0xb78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jul 31 19:59:49 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688bcb35-6e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:1b:99:8b:f2:c8:08:66:e8:26:23:d6:27:
                    44:e9:bd:a7:41:d4:bf:0c:81:4e:2d:f5:94:b9:df:
                    0a:df:51:21:58:18:79:aa:df:d0:dc:56:54:28:ee:
                    c8:b7:18:37:9c:23:e3:38:f9:bf:92:11:b5:ba:41:
                    6f:4b:66:d1:47:5b:91:8a:af:36:d9:21:d7:bc:f4:
                    b8:60:e7:52:5b:ea:f4:42:bb:32:4a:8d:a8:7a:81:
                    62:aa:73:33:5a:3e:65:0d:77:f1:4e:2b:91:f5:25:
                    12:86:27:10:be:bb:73:09:e0:ff:c7:21:b8:3b:0c:
                    6e:ea:0e:3c:11:4c:6d:25:01:c6:9d:8a:6a:34:fd:
                    01:9b:98:6a:96:dc:29:2d:27:4f:d2:7d:07:6d:42:
                    07:4f:d4:c4:17:b2:28:74:f4:a4:68:86:5e:b7:b5:
                    98:37:b3:2e:bb:f5:cb:36:8f:37:4c:c3:61:31:23:
                    5a:2d:bf:24:6e:e5:92:82:3b:56:6a:10:57:98:51:
                    79:bb:6f:97:a0:94:7c:88:39:b4:37:06:1c:14:f0:
                    79:a9:6a:1d:46:92:e0:49:28:63:51:09:10:a4:ea:
                    43:0b:c1:11:51:94:be:4b:a5:8b:a1:03:cd:55:ab:
                    a1:54:b5:29:b5:bd:f2:e8:32:31:a0:6e:4c:f9:1f:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:6F:B5:F6:AD:5E:30:84:9C:11:18:34:0E:3C:58:A5:C4:B9:1B
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/C53629FEEACE11EEA8513D34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:6d:6a:a1:ae:da:3c:dc:1a:d1:99:f9:b2:21:04:44:a2:
         db:2a:01:7a:7f:cc:48:a8:e6:8d:7e:8f:a6:18:09:f5:82:0a:
         9e:f4:e7:42:29:31:d6:b4:40:44:78:7d:30:aa:b8:3b:86:ae:
         4d:3d:f5:a7:eb:e3:6f:8f:db:1d:9e:1c:d8:9b:71:41:a6:a9:
         04:0f:fc:0e:37:7c:91:2f:70:e3:bc:e5:af:8b:65:8d:04:e2:
         02:8c:73:c0:54:08:41:79:bd:21:22:d6:39:64:4b:8c:b0:9d:
         e4:6c:ca:9c:43:2a:f0:ad:aa:71:9a:32:1d:a5:23:86:17:b0:
         e1:4f:3d:24:80:76:aa:16:2f:04:a2:f8:29:48:3e:24:7a:f5:
         e3:c6:1f:fb:9d:28:df:5f:7b:95:83:40:40:da:ca:13:28:9c:
         d9:99:49:13:eb:7f:8a:45:c1:8a:58:cc:0c:9a:71:d5:6c:e2:
         ee:5a:7f:62:8a:01:a7:31:4f:90:44:16:d4:7b:fc:17:a1:73:
         33:4d:fa:71:35:5d:a5:98:23:aa:f5:89:a6:bb:8d:2b:ae:dc:
         2b:6f:c4:d0:d0:4b:98:b1:fc:ec:1e:eb:05:af:e9:49:e1:4e:
         f4:49:97:10:17:b0:b4:d4:05:d0:39:f0:6c:80:b7:ca:e3:0a:
         b9:6a:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:51:43 2025 by rpki-client