Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/402AE4B4685111F0A688505EC4F9AE02.roa
File:                     402AE4B4685111F0A688505EC4F9AE02.roa (raw, json)
Hash identifier:          dyKQZQJFWOlaLCos4pICmePW3GQtvzVk28wWqQnX6xA=
Subject key identifier:   6B:62:C4:DE:6D:74:54:28:37:BB:E8:B0:97:9C:1F:D7:63:E9:3A:9E
Certificate issuer:       /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial:       1CF5
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/402AE4B4685111F0A688505EC4F9AE02.roa
Signing time:             Thu 24 Jul 2025 05:44:23 +0000
ROA not before:           Thu 24 Jul 2025 05:44:23 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        103.81.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7413 (0x1cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
        Validity
            Not Before: Jul 24 05:44:23 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6881c836-e08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:d2:cf:38:c7:ce:7a:a6:33:40:34:ba:38:
                    f7:5c:de:3e:bb:0b:61:ec:ae:81:36:40:83:9d:56:
                    ba:22:1b:1b:50:c2:8e:6a:80:f9:d5:f6:27:19:3f:
                    92:a1:8d:01:6f:52:03:ac:99:f3:c4:84:8d:c6:c9:
                    e0:35:39:90:f3:a8:48:5b:10:97:8f:b6:67:c5:97:
                    51:ac:e7:64:6f:b8:00:ec:ff:1f:ab:b6:8e:c7:24:
                    16:cd:c1:09:ef:d9:ce:0e:6e:fc:79:50:dd:fa:aa:
                    10:e7:2b:19:e0:a6:d4:11:9b:49:19:93:57:49:b7:
                    d0:9d:ac:b6:57:ce:10:a5:46:26:f6:a9:18:74:9d:
                    eb:c1:dc:56:06:dc:df:63:00:d4:da:f4:08:e6:54:
                    1b:77:8f:ea:42:09:a1:73:76:7b:5d:f9:30:23:85:
                    e0:03:cd:b0:1d:62:76:ee:8d:8b:84:18:7f:bd:27:
                    61:dd:49:e9:0b:29:19:62:51:93:eb:d3:88:1d:63:
                    6d:d4:7a:71:30:88:e1:95:f9:73:8e:2c:cb:e3:2d:
                    5e:20:7b:89:69:83:18:9b:b1:0b:2d:d4:12:e4:f7:
                    ae:7f:d2:d8:a2:fa:ce:30:ef:15:e6:f7:1b:de:29:
                    d2:00:3c:de:5a:87:0e:e0:9c:bb:bb:23:72:e2:e7:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:C4:DE:6D:74:54:28:37:BB:E8:B0:97:9C:1F:D7:63:E9:3A:9E
            X509v3 Authority Key Identifier:
                keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/402AE4B4685111F0A688505EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:11:42:6c:78:66:dc:a6:0d:46:f9:4b:a1:b7:38:fc:7d:
         a8:0a:56:1c:44:57:94:2b:8a:9d:7e:06:05:43:b3:38:47:0f:
         13:9f:38:b6:8d:6a:43:85:69:d0:4b:5d:49:3b:c0:8c:0c:7c:
         f2:f5:e0:cd:0f:c6:17:aa:27:cc:34:ed:b4:b8:ca:ae:df:43:
         80:9a:95:b9:84:de:64:a7:2c:d1:3f:cc:69:e5:f0:c1:1d:dc:
         5f:a8:a3:7f:a8:93:7f:20:1f:12:73:1a:dd:8a:3d:4a:7e:c7:
         7d:46:77:1c:c4:2d:fe:83:9e:dc:18:2e:00:cf:18:f3:e4:a8:
         dd:fc:5c:13:96:bd:a5:a5:18:80:c3:d6:50:4c:ab:92:e5:a4:
         3b:e9:df:9b:a5:b7:1e:a9:1b:77:83:b5:8e:37:5a:9d:fc:c8:
         2c:35:b3:b4:0a:85:d7:a4:7c:87:20:a5:f8:d4:5b:3c:8f:d8:
         16:a0:06:58:a3:7d:dd:aa:2f:df:1b:bd:cc:9a:11:82:1d:7f:
         40:9d:41:0a:9f:f3:03:4f:39:86:02:ce:9a:d4:b0:ab:32:67:
         17:8d:b5:41:95:20:46:13:6c:2e:46:2f:87:8a:c6:49:20:2b:
         b4:3e:4f:30:0b:7e:38:14:18:be:87:71:c1:a0:cb:21:6a:1b:
         f8:bb:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:12 2025 by rpki-client