Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
File:                     A16CA728B9EA11EFACF35552C4F9AE02.roa (raw, json)
Hash identifier:          Il/g0HxoiMWM5qTW5HJgcyomv0xWgk1G/hwjG0Ua8NI=
Subject key identifier:   F3:2D:19:0A:94:E6:41:1A:F4:10:59:FC:C6:41:38:53:85:5F:66:9E
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       019C
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 04:22:29 +0000
ROA not before:           Sun 31 Aug 2025 04:22:29 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139660
IP address blocks:        103.135.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Aug 31 04:22:29 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b3ce05-d534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:fe:a2:89:79:27:ba:44:18:34:0f:5b:78:
                    b1:1e:d5:74:ff:c6:0e:ba:4d:21:a5:34:2e:9d:60:
                    9e:55:a7:e0:bc:ee:b8:12:99:12:b9:db:d2:fb:ef:
                    62:71:4a:a2:fe:f8:0d:68:83:5b:e9:99:62:44:62:
                    b4:0a:aa:06:57:dc:20:8c:81:64:79:31:1e:12:78:
                    f3:13:82:d3:98:82:c8:1f:19:1d:40:c1:ee:05:5f:
                    f8:97:bb:69:53:b1:45:f6:c6:b5:a9:9d:a9:cf:eb:
                    76:a3:b7:a1:bc:13:ef:93:cd:3f:d7:31:91:01:16:
                    f4:c8:27:f7:c7:aa:36:11:9b:3c:5a:a7:dc:89:9d:
                    90:88:cd:0f:a1:5d:9c:64:e9:13:8c:69:1a:0a:a4:
                    16:be:de:d4:d2:41:e3:a8:ea:fc:e1:cc:13:17:31:
                    ce:d1:b7:0f:c3:ce:e3:05:5b:06:e8:7f:e3:a9:89:
                    bd:81:d7:a8:f3:6f:41:dc:b7:99:8b:20:58:ee:d4:
                    f9:9d:62:20:d0:80:83:69:6f:63:5e:18:bd:d6:a9:
                    24:19:36:fb:47:bc:b5:e5:1c:ba:2e:ba:6c:c3:28:
                    a0:55:7a:4e:c0:ff:dd:88:84:aa:c6:28:fb:6c:e1:
                    85:0e:3e:e5:09:15:0c:4a:15:6c:36:b8:dc:f1:b8:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2D:19:0A:94:E6:41:1A:F4:10:59:FC:C6:41:38:53:85:5F:66:9E
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:f8:23:f2:bc:ee:8b:f7:d5:70:3c:13:ed:d8:7b:d7:3f:
         5b:b7:ec:2f:64:7e:1e:43:5b:f2:f6:1a:13:3f:4d:94:af:c9:
         6f:4b:74:d9:b4:df:c8:64:e4:f1:94:2d:47:27:e0:60:b7:3b:
         3f:1d:40:3b:33:35:23:c1:4a:61:8a:3d:50:f3:82:54:e9:dc:
         6d:7d:8f:1b:b3:eb:6e:e8:dd:66:42:cd:e1:76:cd:ee:9e:8e:
         ce:24:58:fb:3c:47:e0:b6:6a:60:d2:cd:4e:00:66:eb:07:b0:
         89:4e:05:10:23:51:d7:49:f4:9f:01:b5:1f:cd:5c:9f:14:81:
         bc:b0:b6:30:41:37:93:c0:f6:1a:0e:ab:95:7e:c2:7f:f2:e2:
         6d:29:de:0d:a4:c7:79:71:78:f6:39:84:d2:61:40:53:d7:b2:
         3b:14:b4:84:61:a9:01:22:9c:c5:e0:ba:ae:b5:00:21:e2:6c:
         0e:4a:74:71:23:09:1f:91:95:0a:e1:df:28:fa:6d:6e:f9:b3:
         dd:54:b1:27:b1:e3:44:3f:73:3b:f5:61:5b:25:ab:48:71:af:
         cb:dd:a7:8d:c4:66:17:20:f6:c8:b3:92:c4:2e:bc:8f:ab:a1:
         aa:d4:5b:92:b1:70:45:b1:01:a3:3f:40:fe:ba:c4:e5:41:c6:
         9c:af:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:00:13 2025 by rpki-client