Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
File:                     7452F54C7D7D11F09C982A7CC4F9AE02.roa (raw, json)
Hash identifier:          fSo3LQThSu3zM+wgt7BUnbtQ2wqM3uaigVctUk+6+W0=
Subject key identifier:   4A:69:2F:AB:65:D8:E1:71:88:2B:8C:5C:73:E8:81:AC:F5:6A:64:DE
Certificate issuer:       /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial:       02
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
Signing time:             Wed 20 Aug 2025 04:23:42 +0000
ROA not before:           Wed 20 Aug 2025 04:23:42 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     132430
IP address blocks:        103.80.251.0/24 maxlen: 24
                          103.189.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
                          rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 08:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
        Validity
            Not Before: Aug 20 04:23:42 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68a54dce-239b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:d6:ca:43:f4:d6:40:34:27:cc:59:26:af:
                    18:84:a1:7b:20:dd:39:49:ab:3a:d6:d4:1b:a2:d8:
                    ec:1a:1f:50:af:41:09:39:46:5b:4c:5d:97:5a:c1:
                    5f:a1:0f:26:d9:57:88:26:64:47:da:fc:24:82:e6:
                    c9:81:03:fd:a4:3b:ec:72:cf:48:f0:a4:75:d7:09:
                    e1:a8:22:8b:4a:63:ae:92:02:a2:8d:ac:84:53:0b:
                    89:56:06:db:74:67:b7:57:0d:eb:27:9c:71:e2:06:
                    93:4c:d8:ba:d9:89:0a:46:94:99:b6:b6:b5:04:81:
                    93:99:88:2e:04:bc:67:bb:f5:f7:96:27:c0:2e:f6:
                    cc:a0:84:e9:a6:f7:ca:35:d6:e4:2f:b1:f4:98:63:
                    81:01:95:52:03:99:56:4b:cc:42:9d:98:30:2b:7b:
                    9c:34:c4:50:65:57:63:44:6a:fd:f5:bb:a4:48:2f:
                    ad:48:7d:81:70:4e:c9:db:c9:b0:6d:28:b7:b6:2c:
                    1e:a9:ec:0c:91:b2:3b:10:88:82:d9:95:63:32:90:
                    51:e6:b1:ff:38:00:a2:e1:75:7d:06:43:c8:bc:4c:
                    f6:de:c4:15:ce:fc:54:f5:6d:96:c2:b1:82:5c:a9:
                    b2:fa:de:ca:07:f1:45:b3:63:2a:65:52:a4:5f:ec:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:2F:AB:65:D8:E1:71:88:2B:8C:5C:73:E8:81:AC:F5:6A:64:DE
            X509v3 Authority Key Identifier:
                keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.251.0/24
                  103.189.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:53:10:ff:87:7e:88:f4:62:0b:42:83:51:be:f5:41:ef:
         fb:e8:aa:89:98:e4:93:43:d9:3b:9c:0b:cc:06:93:d4:9a:03:
         50:d2:3d:72:bf:15:7e:4e:83:e3:5d:19:5f:18:b4:be:d6:82:
         f5:01:6f:f5:a4:e6:1f:13:f6:e7:75:3a:99:24:80:b5:2e:ca:
         fb:fc:cc:9e:23:28:50:b0:59:c5:53:ca:e1:60:00:f6:28:78:
         21:15:88:0f:67:64:a5:7d:43:e4:23:13:7c:74:ca:3e:b8:35:
         fa:aa:3f:14:9b:29:72:a8:57:78:71:f6:5d:a2:d3:43:75:2c:
         df:dc:4a:99:2a:51:8a:3e:6d:45:f5:e6:48:bb:8e:35:c1:df:
         f9:de:36:e7:ba:63:02:6b:d7:1f:76:a9:4d:4a:3f:eb:f6:4d:
         a9:0e:a0:3c:2a:44:ac:50:8d:a8:3b:aa:25:7d:f5:3e:76:62:
         54:e5:66:5e:fb:76:54:23:fe:10:36:a2:60:8e:a1:4a:00:13:
         a7:1f:c3:7f:c4:64:eb:67:8b:2e:fc:e4:75:06:5c:5b:1e:63:
         40:b7:4a:94:6a:70:6c:b1:92:86:61:d7:33:5d:07:08:43:be:
         a5:e5:8b:3c:bf:1c:2a:34:d5:50:df:df:75:c0:3b:43:c8:b8:
         2e:32:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 19:02:35 2025 by rpki-client