Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/9D7ED59A954711EF9830412DC4F9AE02.roa
File:                     9D7ED59A954711EF9830412DC4F9AE02.roa (raw, json)
Hash identifier:          ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=
Subject key identifier:   33:B6:BD:E2:9C:1B:E3:97:F1:D5:00:A0:D3:81:15:2D:C0:5F:1A:80
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       8D
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/9D7ED59A954711EF9830412DC4F9AE02.roa
Signing time:             Sat 19 Jul 2025 07:12:51 +0000
ROA not before:           Sat 19 Jul 2025 07:12:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     147303
IP address blocks:        103.252.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Jul 19 07:12:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=687b4573-40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:22:20:cc:ba:96:99:e2:dc:35:74:fb:4f:
                    08:58:32:69:8f:16:0c:94:94:18:d5:81:49:c9:c6:
                    38:27:8a:9d:4a:55:c5:07:58:a3:c6:da:b7:c9:6b:
                    46:f8:8d:61:76:36:82:8d:55:7c:2c:a3:44:8c:44:
                    1b:19:cf:b0:65:0c:c3:20:c1:36:0f:b7:ce:07:26:
                    ae:fd:ca:11:20:f5:be:0c:3b:a2:da:5e:4f:e8:ef:
                    81:17:10:a4:a1:7b:dc:57:d4:16:6c:81:f8:8a:3c:
                    f4:58:a0:91:4f:69:5c:84:7f:7f:89:3d:bd:72:97:
                    65:00:04:34:cb:6e:0d:14:6b:6f:9a:5f:b7:b7:88:
                    ec:83:f3:6f:d0:14:d7:1f:11:84:17:a2:c5:61:eb:
                    33:2f:13:74:65:f5:a7:14:b7:3f:af:88:53:7b:aa:
                    e4:27:9f:17:5e:ee:56:61:ef:63:53:46:18:d1:e0:
                    67:a4:97:83:c5:41:32:8f:3c:03:cd:a4:18:17:e2:
                    ee:7e:b4:36:d5:50:bf:87:e9:26:7b:3d:77:76:bd:
                    b7:78:48:ed:98:f0:df:41:39:ac:c4:dc:ca:8c:76:
                    b7:53:02:40:5b:b9:f7:48:9e:c0:df:2d:21:93:2a:
                    46:fe:0b:af:1a:b5:72:be:0a:01:35:6f:8d:e1:71:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:BD:E2:9C:1B:E3:97:F1:D5:00:A0:D3:81:15:2D:C0:5F:1A:80
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/9D7ED59A954711EF9830412DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:9d:ec:75:c2:41:dd:ca:fe:8b:11:74:de:02:48:0d:f5:
         62:e7:57:12:f7:63:b3:a8:ed:83:58:bd:31:27:55:b8:bb:52:
         a3:5a:96:b3:4c:e7:cb:c0:37:ab:10:73:13:88:f0:0a:4c:dc:
         90:c2:f5:df:80:04:c0:58:9a:f5:4d:05:2d:7f:58:f7:d1:5b:
         28:f4:29:01:88:d8:43:8f:87:24:fa:0f:e8:13:82:30:ac:58:
         85:f0:f8:45:ee:a8:20:c2:65:fc:c8:b3:e0:49:19:25:ac:44:
         3a:c0:7b:bb:59:6d:58:40:89:99:79:9e:82:08:75:e2:0d:59:
         34:80:06:ef:9a:ad:76:a0:62:e7:9b:ce:5e:40:27:ca:57:8c:
         42:8a:2c:bc:e6:da:6c:c3:24:c3:e4:96:00:cf:6b:d8:dd:55:
         c5:78:eb:75:a2:62:67:b2:4b:73:1a:bc:9e:b6:fb:9e:40:f5:
         79:9b:13:7c:32:e5:e7:33:33:18:95:b0:cc:96:e3:87:c8:87:
         1b:14:7c:e2:3b:a4:fa:9b:09:77:27:2a:56:61:69:58:4d:eb:
         37:96:e4:f0:7b:16:64:c0:67:be:83:96:f6:bb:4a:af:05:6b:
         9e:c9:a6:6e:75:04:0a:43:6d:29:21:60:f4:83:03:f3:c6:f0:
         16:ae:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:05:01 2025 by rpki-client