Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
File:                     03D4EC14D82F11EBA454B918C4F9AE02.roa (raw, json)
Hash identifier:          Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=
Subject key identifier:   20:E9:01:F6:65:DD:EE:5B:C5:77:1A:2B:C2:59:52:E6:11:94:47:5B
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0CA2
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
Signing time:             Thu 22 May 2025 18:22:20 +0000
ROA not before:           Thu 22 May 2025 18:22:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139282
IP address blocks:        103.113.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 18:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: May 22 18:22:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f6b5b-0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:c8:0a:e1:57:5d:b0:95:25:a7:d1:a0:a8:
                    36:2e:f0:51:49:eb:ac:69:92:78:fe:8b:68:bd:27:
                    3d:5e:76:dd:1a:a0:67:ee:00:07:5f:04:5b:20:06:
                    8b:b3:0e:d4:0e:5a:6a:24:9c:11:3c:14:b1:4b:65:
                    07:f9:4e:e1:77:6b:f0:35:56:8a:91:d5:55:21:13:
                    a3:08:b1:53:c8:28:54:33:aa:42:48:95:a2:5c:5b:
                    d6:a5:dc:aa:7d:ae:47:7b:9b:98:75:0e:a8:38:62:
                    69:a9:dc:81:d1:c6:e7:dc:88:6a:d5:be:80:f1:f6:
                    3f:32:3d:6b:85:6f:90:b2:27:fc:3b:38:54:8b:76:
                    67:7d:77:c8:9a:71:4f:83:13:de:59:51:6b:40:a3:
                    1d:a1:54:68:50:94:6d:09:8d:1b:8e:ea:79:7e:70:
                    45:93:cf:74:66:21:04:a9:49:e3:de:61:3a:18:a3:
                    9a:e5:95:46:2c:5f:84:ed:84:67:70:e6:16:e2:ac:
                    45:26:3a:31:ba:a6:45:37:e6:83:4c:ce:80:02:a3:
                    21:09:da:7a:0b:a3:19:03:80:77:af:fb:12:9e:75:
                    28:ab:10:28:5c:02:d0:5f:ae:82:0b:d8:eb:e7:bc:
                    7c:51:99:17:f2:0d:e6:c7:0e:7f:e8:8d:d1:a6:d8:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E9:01:F6:65:DD:EE:5B:C5:77:1A:2B:C2:59:52:E6:11:94:47:5B
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:af:e3:01:39:83:11:bc:38:c1:89:07:d9:f7:da:25:db:
         00:af:1e:02:00:ac:81:43:8b:58:89:a9:a4:d7:3c:6b:fd:cd:
         70:e9:04:14:a4:2c:a3:ef:41:db:13:f1:13:10:b9:6e:9d:db:
         f6:0b:2d:27:bd:84:9f:71:a1:2c:d0:1e:d4:65:0d:fb:97:9c:
         3c:b6:14:27:71:29:24:ec:af:38:cc:9e:3a:93:d7:26:00:26:
         a6:7c:d9:f9:f5:c5:01:47:69:51:c4:c1:e8:5d:9d:02:69:ef:
         b4:37:de:ad:dc:8b:59:8a:1a:07:98:b3:e6:15:2b:01:d9:56:
         46:c9:62:62:53:7d:44:f7:60:ea:a9:13:b1:9b:6e:e6:29:fb:
         38:1b:fa:08:95:6e:40:74:ac:77:b1:33:0c:71:47:73:63:90:
         95:6e:de:e2:ad:53:97:f3:b0:33:ba:87:4a:6f:ec:9c:27:db:
         b5:3b:f7:3d:9a:db:8c:6c:a6:34:52:4d:ad:cc:34:af:56:4a:
         e7:7b:f6:bc:a7:10:89:e7:1f:25:5d:a5:3b:80:ca:bc:6e:6d:
         d7:5e:ae:23:24:a3:28:e4:b1:d4:9a:0d:82:64:c1:be:ba:a5:
         78:24:34:af:18:75:44:28:5d:15:f5:6b:cf:72:cc:d5:6a:96:
         06:0e:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:35:19 2025 by rpki-client