Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa
File:                     B054EA98BBF511ECAA816D52C4F9AE02.roa (raw, json)
Hash identifier:          q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=
Subject key identifier:   61:0C:33:66:23:9A:28:2D:FC:8F:4D:B5:E3:09:50:E9:49:6E:A5:8D
Certificate issuer:       /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial:       34E9
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 15:20:57 +0000
ROA not before:           Thu 31 Jul 2025 15:20:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     63922
IP address blocks:        103.44.40.0/22 maxlen: 24
                          103.74.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
                          rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 15:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13545 (0x34e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
        Validity
            Not Before: Jul 31 15:20:57 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=688b89d9-7d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:c3:de:12:45:41:56:34:0f:88:f1:27:d9:
                    ae:bc:8f:0c:6e:e0:3b:8f:33:10:6e:2a:27:89:f0:
                    56:2e:63:c2:eb:e7:a9:d7:5a:ed:f4:71:58:0a:d1:
                    54:bf:df:9f:8a:9f:4c:59:ff:76:74:f9:69:b1:05:
                    53:17:1e:dd:19:0c:49:75:8f:4d:5c:b1:11:e3:b4:
                    52:ff:4e:12:43:ff:0e:65:96:ff:53:7a:d0:13:8c:
                    13:34:a1:d2:4b:26:20:30:39:0b:35:a3:82:8a:54:
                    ec:0d:54:a9:cc:62:ec:18:53:40:93:55:39:bc:37:
                    b2:e0:ff:20:b1:00:13:d7:7b:16:24:e4:e7:b2:7c:
                    32:d6:76:18:74:aa:64:94:d6:f9:2b:7b:5b:00:cc:
                    18:ba:84:c3:41:f5:d6:f2:f6:51:20:11:0f:c3:3f:
                    3f:22:fa:bd:0c:a7:b7:9a:2f:d3:c5:f0:ad:56:85:
                    9c:19:12:9f:e3:0c:3d:63:37:d7:e6:c0:22:8b:69:
                    2c:01:fb:d8:0e:d4:5f:3a:ba:fb:8f:5b:83:b6:bd:
                    b3:c9:97:4f:eb:be:b9:36:67:33:5f:a6:e3:67:fd:
                    aa:a5:f0:f0:57:2e:ab:e8:96:32:a1:5a:ef:bd:30:
                    8f:ea:48:1d:8b:e4:39:79:76:14:64:4a:c3:a0:ac:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0C:33:66:23:9A:28:2D:FC:8F:4D:B5:E3:09:50:E9:49:6E:A5:8D
            X509v3 Authority Key Identifier:
                keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/B054EA98BBF511ECAA816D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.40.0/22
                  103.74.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:63:6a:4f:6c:83:65:ba:e5:ea:9e:fd:b9:38:d2:2f:9a:0b:
         93:7c:f3:20:c9:b8:11:b6:85:4e:04:c1:81:8a:e1:7f:f1:24:
         16:75:4e:3a:ed:29:b6:4f:6c:a1:b2:bf:c3:93:db:ec:13:fa:
         ad:35:84:b0:9a:4c:95:b9:31:c1:2d:ae:00:c6:05:26:73:8b:
         a7:6b:47:5b:3d:cf:6e:a7:67:2e:cb:f7:99:d9:de:1d:60:31:
         76:15:b7:fd:91:f8:13:f9:aa:b2:4e:83:ff:6b:03:3a:96:55:
         68:c5:31:91:f5:c4:9a:ea:0d:22:8f:d4:d8:fb:8c:f6:a8:41:
         93:30:47:9e:54:b8:21:0c:cd:9b:d9:c7:df:33:3f:a2:01:27:
         11:b5:bf:44:81:e6:99:8c:6a:f7:b7:10:27:d4:b9:a9:55:ab:
         cb:17:60:d8:df:26:a4:c1:ad:51:dc:e5:fe:29:08:1f:55:34:
         5c:55:37:c8:3c:be:08:15:a5:55:59:1e:13:eb:03:c6:af:7f:
         ee:62:b8:e2:81:a8:03:b3:18:10:63:a3:ab:c2:44:4e:c2:62:
         4c:aa:40:d5:07:68:2e:3c:61:9b:3e:ec:e3:57:40:61:6f:4f:
         23:ef:e0:1f:50:18:b0:c4:2a:c5:58:eb:1d:89:4f:4e:29:7f:
         8a:0a:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:23 2025 by rpki-client