Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
File:                     13BC244C61A311F0A6E3910CC4F9AE02.roa (raw, json)
Hash identifier:          PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=
Subject key identifier:   F5:04:8F:10:F2:EC:DB:84:C0:C6:94:27:F3:07:6E:71:1B:E2:30:3C
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       020F
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
Signing time:             Fri 15 Aug 2025 18:22:01 +0000
ROA not before:           Fri 15 Aug 2025 18:22:01 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150661
IP address blocks:        103.48.162.0/23 maxlen: 23
                          103.48.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 02:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Aug 15 18:22:01 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=689f7ac9-33c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:95:fa:4b:37:f5:b6:2e:57:02:4a:3f:b8:
                    b1:91:ef:fa:f2:d0:70:b3:51:b2:3e:1e:f9:31:82:
                    11:07:05:2c:87:84:ad:38:32:20:c9:a8:96:68:91:
                    1e:8e:7e:e3:8b:7c:22:a2:7e:41:fa:ec:ce:75:43:
                    c2:44:45:4b:24:79:88:b8:5b:82:c2:17:bf:b6:fe:
                    7b:75:9c:b4:77:1b:04:12:43:3c:13:52:c0:51:d7:
                    5a:95:65:58:59:fe:2f:fb:5a:33:b3:db:ee:2f:e1:
                    11:fb:1a:2b:c6:5f:f2:92:82:66:c3:05:08:1c:fb:
                    be:2c:af:29:9d:06:6e:a2:5b:98:13:00:6a:39:a2:
                    d7:c5:cf:b0:1a:99:a2:40:3b:f7:d9:9b:e6:a6:05:
                    ab:f9:6d:b8:e7:52:48:8d:60:1d:23:b5:60:eb:12:
                    85:93:6a:d2:65:6b:7e:e1:74:67:01:74:e2:c3:53:
                    9e:8b:49:64:46:22:4b:39:95:90:0a:60:a1:19:b2:
                    bc:09:8d:d8:a2:bf:78:52:d5:52:db:e8:d8:f7:1e:
                    fc:ec:40:8a:57:b5:17:5e:44:42:27:64:a7:d1:32:
                    35:ed:02:cf:df:47:df:2f:39:6d:e5:2e:bc:40:64:
                    3a:23:05:df:c8:bb:92:e0:19:26:e2:42:71:6d:60:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:8F:10:F2:EC:DB:84:C0:C6:94:27:F3:07:6E:71:1B:E2:30:3C
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:bf:ea:72:48:8b:86:08:df:b0:cb:3e:8d:1d:41:16:01:18:
         48:96:96:24:43:26:33:c2:53:cd:26:40:38:96:10:84:e2:c0:
         56:c9:35:d3:b7:9e:ca:42:21:0f:e9:70:21:23:da:c2:71:b7:
         bf:7e:3b:6f:01:d5:64:31:90:b9:e5:01:55:41:d7:bd:1e:57:
         ae:08:e2:cc:62:31:5d:55:63:9a:ca:4f:14:8f:0f:05:70:d9:
         fe:ac:c7:3d:38:39:95:eb:3f:de:d3:f6:cd:b1:a0:35:5c:5a:
         9b:e0:bb:3a:de:33:40:0b:30:af:6f:fb:40:7b:c1:ae:5c:2c:
         21:f1:4a:57:4d:3e:ea:1a:36:36:ff:51:47:4f:4c:2d:c3:fa:
         d5:f1:b0:ad:4d:e0:64:2c:d2:93:1d:01:a7:6e:0f:3f:f8:ba:
         cb:23:f3:f2:ea:77:ae:54:04:7e:e4:37:b3:24:00:60:61:34:
         b2:af:36:ae:f8:fd:82:8d:a9:3d:ea:cf:96:ed:85:d6:d0:33:
         c9:ee:a6:0c:0f:2c:f0:77:a2:01:74:e4:0a:34:f5:53:cc:23:
         d2:6a:e8:d7:16:6e:47:a7:9a:2e:ea:b6:97:f9:45:ca:1c:1b:
         6a:9d:0b:89:69:f3:94:4d:06:38:be:db:b3:8e:8e:87:07:ce:
         de:76:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 18:24:46 2025 by rpki-client