Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
File:                     B56F2E9697B811ECA8AA4230C4F9AE02.roa (raw, json)
Hash identifier:          qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=
Subject key identifier:   BB:4E:60:50:5B:3B:9F:2A:E0:A6:95:E8:28:26:81:7E:B5:D8:AB:9D
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       03EA
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:49 +0000
ROA not before:           Wed 27 Aug 2025 01:06:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139659
IP address blocks:        103.251.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Aug 27 01:06:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae5a29-89cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:d4:24:4a:3a:3d:6a:25:70:d8:92:f7:ae:
                    31:61:9a:c0:07:4f:3a:35:60:d2:98:f2:9d:6a:88:
                    4e:2d:07:ee:1f:fd:1a:ef:01:96:e5:1e:b5:df:2c:
                    8b:58:0c:f8:a5:06:01:6e:58:78:b7:c1:ae:78:07:
                    5e:91:f5:ad:bb:12:5f:63:99:68:7c:33:39:f7:50:
                    71:be:a7:c4:53:26:5d:3a:52:37:50:f2:6a:c5:e0:
                    aa:01:bc:4d:f8:5b:a9:ed:a8:1f:a9:09:d4:2f:04:
                    70:e0:0e:15:d3:e4:28:b3:e1:9d:35:0e:6e:41:61:
                    01:d1:6d:84:b6:ba:0e:6b:cc:9a:4c:12:c4:12:37:
                    24:d7:e3:c0:f8:63:52:4f:bd:2e:60:b1:cc:31:bb:
                    6e:35:aa:c7:be:7a:21:1a:11:51:29:c2:05:af:ef:
                    9b:e0:51:31:1f:92:cc:29:c2:fd:cf:1a:4c:c5:b0:
                    74:db:bb:c1:4a:37:a2:2d:50:dc:05:c3:5a:74:cc:
                    8b:71:ea:c4:88:cb:01:9f:d5:79:49:5e:67:0e:74:
                    a1:18:f4:42:7f:dc:51:e8:f7:ef:4c:be:c7:67:2f:
                    73:8d:1c:73:73:36:dc:47:8b:01:cd:60:d5:95:5a:
                    c5:78:88:8a:55:9b:e1:a3:0a:b8:70:bb:8e:42:ce:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4E:60:50:5B:3B:9F:2A:E0:A6:95:E8:28:26:81:7E:B5:D8:AB:9D
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/B56F2E9697B811ECA8AA4230C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:0d:a7:d6:bd:8a:03:46:96:79:ff:60:d5:49:13:07:97:
         0c:fb:c5:2a:92:c9:30:cc:e0:24:08:df:52:57:02:4e:a3:c1:
         de:99:ba:87:08:e5:70:2b:4c:60:aa:50:e8:94:3c:f8:e4:a3:
         5b:64:80:2b:fe:b2:d3:fd:15:c6:9d:f3:94:bd:08:9d:52:31:
         45:18:2f:3d:cd:48:a2:f5:16:60:9c:c5:83:2e:9f:1a:20:b6:
         5e:47:a3:a3:b6:ce:d1:6d:eb:3c:10:2b:29:1a:31:12:60:27:
         9c:c4:45:c8:50:85:61:95:ac:ec:ac:7b:63:d1:ab:1f:01:c8:
         f8:37:e2:13:e7:72:aa:0e:c7:ff:d6:e9:a6:a9:3e:34:ad:3d:
         af:91:57:51:25:dd:e9:b9:47:e8:d7:50:f0:ca:8f:25:a3:99:
         d5:a9:51:7d:62:e0:16:eb:e5:dc:17:32:6b:af:49:d1:e2:3f:
         c8:d6:15:a4:15:d4:c6:09:7a:74:ca:b0:dc:36:93:59:24:12:
         ea:58:1c:54:ad:c4:c1:8a:e0:43:a4:0b:02:cd:78:56:31:29:
         e8:f3:65:c1:0d:72:87:f2:8f:80:73:81:ec:ce:a8:9a:b7:1b:
         98:a2:cd:b8:36:35:96:be:b8:c0:97:4e:34:7a:02:eb:f2:29:
         6b:24:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:39:28 2025 by rpki-client