Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa
File:                     B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (raw, json)
Hash identifier:          3B4/3AAyZ28QeeGH+anThU9lLQ63dUv2fBzc3BmfNS0=
Subject key identifier:   76:1D:B4:D1:6B:99:73:18:DD:88:D7:2B:73:E4:AB:3D:C9:FC:90:5E
Certificate issuer:       /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691
Certificate serial:       05D6
Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa
Signing time:             Wed 16 Jul 2025 23:34:27 +0000
ROA not before:           Wed 16 Jul 2025 23:34:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132339
IP address blocks:        103.12.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl
                          rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 23:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691
        Validity
            Not Before: Jul 16 23:34:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68783703-de27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:ce:3e:b7:1b:cf:2a:de:39:6e:4c:4a:47:
                    df:18:37:4f:9f:ec:bc:ea:b0:f7:28:a0:7b:6a:cf:
                    ef:75:b4:ad:2d:f6:95:00:45:0b:6b:26:b5:f1:af:
                    43:10:31:3a:75:6b:0e:fd:1c:5e:7f:71:d6:4a:b7:
                    68:a9:e5:f7:42:ef:b2:d0:72:08:88:bf:05:28:38:
                    05:41:7f:ef:f5:89:57:ba:4f:26:bc:89:40:4f:1d:
                    24:4c:a5:7a:4c:9f:04:97:7d:c8:5b:66:5f:93:e3:
                    c3:6b:7d:b0:46:bf:28:0f:67:f4:10:59:e6:5f:a5:
                    d6:71:6e:27:61:5b:c2:93:27:e3:20:6e:1c:80:24:
                    a4:f4:2a:d7:3f:d2:8b:b4:f9:70:3f:66:ad:37:af:
                    81:2e:08:0b:2c:cf:f2:62:f4:c9:81:8e:8e:7e:d8:
                    d1:79:3d:ee:b4:a3:6c:ed:0f:56:ac:54:ec:c1:23:
                    fb:8b:15:24:59:f3:9f:2f:c8:0c:64:77:25:64:30:
                    55:39:0f:58:46:d8:8f:10:fe:8b:ab:4b:8c:74:3d:
                    39:4e:ed:dd:0c:d6:7e:49:10:95:a1:f2:ca:ee:ef:
                    8e:24:80:da:a6:e5:59:72:12:c5:1e:e6:f8:eb:04:
                    f9:d4:95:24:53:e6:3d:a4:46:06:e5:6d:6f:69:3a:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:B4:D1:6B:99:73:18:DD:88:D7:2B:73:E4:AB:3D:C9:FC:90:5E
            X509v3 Authority Key Identifier:
                keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:af:e1:a7:ab:cb:95:00:2c:44:d2:f3:3f:79:e2:72:31:
         88:3b:1d:ef:40:03:aa:15:7a:5d:cc:78:9b:66:02:d0:e3:12:
         31:89:39:3f:00:9b:45:71:f8:b7:82:8f:1d:bc:7a:8b:8e:1d:
         09:a2:b1:8f:4a:6a:6b:4f:af:1f:9a:de:72:8f:b3:c9:69:62:
         c0:40:74:a9:32:c9:65:fd:46:e1:5f:a8:99:84:7c:d5:cc:8d:
         a1:d5:9e:5f:cb:e6:e9:f4:b0:90:4c:64:4f:42:b4:d8:b4:53:
         7b:ad:57:61:24:66:6f:fe:1e:c3:8e:d5:b3:35:1f:31:df:54:
         c2:f7:c0:4b:57:d6:e5:9f:e1:5a:fc:8a:62:e9:4a:b6:e9:88:
         a8:c1:8e:5a:e8:e5:a0:39:be:27:16:30:74:ca:27:36:d0:ed:
         30:94:08:c6:b2:92:a8:ee:88:7f:53:b3:11:a3:29:d0:d0:37:
         71:cf:c5:9a:43:92:7c:c0:2e:49:67:30:15:b1:1a:63:61:69:
         f0:d6:c8:f3:78:d0:71:95:18:4d:7e:c6:2d:f3:f1:6d:e3:e4:
         6c:4a:28:42:9c:16:5e:b7:c9:36:03:6c:80:8e:6b:01:97:8e:
         98:28:4b:0d:c4:16:ec:e6:28:40:f8:0f:77:10:d4:25:2e:a5:
         85:1e:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:15 2025 by rpki-client