Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
File:                     E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (raw, json)
Hash identifier:          wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=
Subject key identifier:   F2:A3:52:93:70:90:CF:D0:44:2C:3F:2C:10:1B:59:88:33:87:AA:5A
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0E39
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 18:27:43 +0000
ROA not before:           Wed 06 Aug 2025 18:27:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140629
IP address blocks:        103.117.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3641 (0xe39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Aug  6 18:27:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68939e9e-e4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:12:c8:29:27:3a:42:40:5f:29:cc:dd:0e:
                    e6:15:5b:79:34:d8:96:ea:0c:63:00:d1:89:7d:b0:
                    6e:28:00:98:a2:84:06:e4:40:36:26:4e:14:b1:80:
                    d9:1c:32:cd:0e:b1:82:a3:b0:8c:da:e1:8d:7c:30:
                    9f:74:e9:b5:1f:76:25:dd:08:57:cc:9b:da:50:ca:
                    6a:ee:a8:c0:0b:58:cb:51:af:b5:68:42:ea:63:85:
                    2a:45:3a:ef:67:db:d9:99:93:85:d6:e6:c0:ee:ea:
                    5e:81:19:e9:3e:c3:18:d5:e5:66:8a:cb:c0:1f:af:
                    44:dc:14:10:82:0a:c4:bf:62:25:d0:9f:8d:d4:e4:
                    31:09:81:c6:78:d0:25:b7:37:85:f1:07:bd:b4:4a:
                    e2:a8:6e:29:aa:e0:aa:f3:fb:bc:d2:83:c7:12:b8:
                    09:74:c5:0b:50:b1:dc:9a:10:d4:e2:4c:1c:ce:3e:
                    04:c9:38:56:5b:e1:a8:49:73:b8:0b:f4:4f:fd:f7:
                    f2:dd:77:10:7f:4f:91:9c:ed:34:58:ff:e5:e3:9f:
                    d5:31:c3:a5:8f:53:af:a7:94:28:66:37:e4:84:8b:
                    58:bd:99:44:d4:0b:ef:68:fb:9b:42:dd:12:88:46:
                    f3:a3:9b:25:8c:d0:45:9a:08:00:f7:61:98:3d:3b:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A3:52:93:70:90:CF:D0:44:2C:3F:2C:10:1B:59:88:33:87:AA:5A
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/E7DFF7B8CA1D11EE8037E217C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:4e:bb:76:3a:01:1e:2b:0a:69:6b:d6:20:d0:8e:11:95:
         1b:16:5b:19:ee:f8:ca:85:6c:42:be:be:9b:1c:b6:a8:ea:47:
         8f:52:85:82:16:37:73:44:6d:03:57:1b:05:e4:53:9d:9f:a6:
         60:ff:e6:82:8b:1b:9d:01:b4:4a:ef:37:42:76:18:2b:d7:cf:
         bf:b3:94:00:d8:b0:09:14:88:69:c4:00:b2:7a:85:22:26:d8:
         1a:95:b2:c1:d5:56:6e:4b:2b:12:e3:78:43:bd:c2:fe:9c:3b:
         c3:9f:b2:4a:ec:3c:cb:dc:6a:ca:79:1b:82:2c:52:98:5d:5b:
         47:bd:a5:02:84:b1:50:cb:5d:f9:fa:6b:8e:53:93:5e:8a:df:
         4e:07:d9:5b:22:de:b8:95:21:42:36:a3:43:d8:6d:95:25:7e:
         a1:d9:91:1a:4d:75:d3:ae:69:4a:20:62:35:8b:fe:4e:da:ac:
         31:c3:1c:b9:4f:4f:db:38:62:55:42:d0:b0:18:f6:54:5c:8c:
         d1:47:2b:18:44:af:a2:e2:65:57:aa:23:39:10:9b:2b:e7:c4:
         59:f2:98:f4:94:0f:29:3e:a6:e6:c2:33:eb:32:5a:1e:00:1a:
         5d:50:f4:b7:a5:5e:99:9f:3c:71:a7:58:c9:17:0d:46:b1:4b:
         6f:ec:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:04 2025 by rpki-client