Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa
File:                     042F9468894511F0A3D3DD77C4F9AE02.roa (raw, json)
Hash identifier:          iL2u7PWGntzb8mknqIxBo4fR8AMs0WJNnTO8rfNzYpY=
Subject key identifier:   39:8C:EB:40:05:01:59:2B:D3:30:2E:EA:02:E7:1F:B0:B5:06:6B:4C
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       026B
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa
Signing time:             Thu 04 Sep 2025 04:09:56 +0000
ROA not before:           Thu 04 Sep 2025 04:09:56 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153371
IP address blocks:        103.1.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Sep  4 04:09:56 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b91114-8aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:c9:0d:3e:5f:40:23:d8:26:bb:72:62:a9:
                    bc:d7:ce:83:06:1e:a3:dd:04:47:87:f3:d0:7d:80:
                    13:56:a7:57:99:4d:a0:dc:93:86:a0:b3:29:3c:62:
                    9e:a1:ea:ae:5f:b2:0d:8f:a0:d9:79:83:c7:b4:38:
                    b5:1c:ac:b2:74:06:ae:ea:09:81:b2:09:73:13:96:
                    36:75:41:68:6e:58:2e:08:cb:46:f4:ea:ad:2a:98:
                    9a:33:20:34:33:2a:7f:42:a0:82:61:96:6b:2b:c8:
                    0a:4d:18:47:cc:1d:27:da:bb:1c:33:3b:cd:88:d0:
                    7f:74:99:8b:bd:d9:1c:53:d7:15:3a:b8:4c:19:ad:
                    22:08:2c:45:18:03:a1:0c:b5:a2:73:13:bb:6b:53:
                    30:9f:a3:10:f8:3c:6e:f5:31:bf:d8:4e:32:e7:c7:
                    7a:07:3f:4c:f6:50:3a:2a:cd:f5:58:e9:40:fc:8e:
                    2b:5d:d7:9e:d2:d8:52:a6:ac:78:6e:ef:a0:fe:ef:
                    62:14:3c:88:81:be:b4:cd:a1:f5:5f:65:f1:8e:d3:
                    86:56:a6:28:3a:e3:b5:74:09:25:a5:db:d9:09:0a:
                    b3:e8:3c:10:55:77:a5:0a:35:c9:90:f2:32:14:d3:
                    b7:27:99:49:01:6d:5f:57:7a:8e:d1:1f:ec:d3:a0:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8C:EB:40:05:01:59:2B:D3:30:2E:EA:02:E7:1F:B0:B5:06:6B:4C
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:b1:bc:d2:0a:d4:57:12:07:4f:62:56:bf:d0:cb:f4:2b:
         26:f5:c9:7c:c6:c9:b8:6a:93:dd:db:61:9a:43:7d:bf:2e:69:
         57:03:93:f9:e9:b0:81:48:f3:a6:44:5d:88:f4:38:ac:5f:4a:
         71:61:2e:b9:a1:1e:33:82:43:c1:f2:8c:2e:ba:f8:65:4f:8d:
         62:81:df:5a:32:1d:7d:69:31:44:11:3a:08:6f:84:e9:55:79:
         55:47:3a:ff:e7:c2:1a:ca:da:56:4f:59:12:fd:32:c6:ed:ce:
         4f:8f:bc:3a:cf:b7:2d:1c:4b:10:f5:4c:37:06:e0:27:3c:90:
         25:b7:03:65:72:9d:07:18:f8:e5:56:19:b3:73:ab:9f:ff:7e:
         b9:34:c7:c1:46:7b:ae:59:45:36:74:fb:6b:af:b0:06:22:81:
         0a:1e:c3:3e:ef:8a:89:46:fa:fc:e5:98:01:a2:8b:2d:41:c6:
         31:30:12:f7:2b:8d:02:a9:40:63:80:b9:dd:16:c1:04:75:a8:
         7b:01:0e:d8:01:33:49:92:bd:26:a1:98:15:3e:5d:d2:7e:ce:
         88:49:55:b0:60:42:50:ca:18:99:aa:5a:c9:cb:8f:38:d0:f9:
         8e:ba:10:b5:b6:21:67:0f:4a:fd:91:68:09:de:52:2f:1d:76:
         27:91:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:03:16 2025 by rpki-client