Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa
File:                     74444F50490E11EFA7EAAA70C4F9AE02.roa (raw, json)
Hash identifier:          kcHTFnzLikXn0NjPuVY7G48i03xbByG7UkZ4K1tljPg=
Subject key identifier:   C6:30:8C:69:26:BD:85:85:78:A3:43:E8:EB:49:3C:E4:0A:29:A6:6D
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       01BE
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:22:26 +0000
ROA not before:           Wed 03 Sep 2025 04:22:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        103.99.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Sep  3 04:22:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7c282-b550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:08:3a:e2:dd:6c:6d:30:ec:fe:57:2d:0d:
                    51:1b:b6:43:38:d1:d0:c6:29:a5:ef:1f:d3:ce:8b:
                    9d:7a:fb:ad:e4:d8:ce:4e:f1:f3:c7:8e:67:b7:ec:
                    e5:28:ee:5b:cd:0e:59:45:0a:05:ee:b0:d0:d9:f3:
                    35:69:3f:fd:7b:4a:12:58:5e:df:c8:36:90:6d:09:
                    ef:b9:87:7d:9a:30:1c:6a:3e:1a:a3:42:a7:6f:a1:
                    0b:ac:02:20:f9:94:f3:60:6e:a6:0f:64:c5:02:21:
                    b4:b7:6a:2e:d6:54:fc:54:16:c8:fd:4b:b5:19:df:
                    15:0d:f0:60:7f:ae:e9:49:59:c1:1a:74:c0:62:1c:
                    1e:b8:08:da:9e:eb:34:98:aa:09:60:05:04:9c:f5:
                    64:30:25:00:10:62:85:18:07:1d:f3:48:02:a8:52:
                    a9:bc:42:05:ed:ff:28:e9:75:f0:10:f5:26:7a:ba:
                    56:4d:f8:a6:a0:3e:7c:1c:bf:13:34:c6:cf:db:83:
                    c3:e3:ef:e1:aa:76:43:50:9d:99:b0:f8:7f:08:22:
                    d4:54:04:2c:4e:9f:4a:97:e9:3e:1f:aa:e7:0e:8c:
                    8e:6f:54:21:87:26:60:d1:57:65:eb:9b:54:ba:20:
                    49:73:2c:2d:ef:65:fd:d0:6d:82:ef:32:ab:cb:99:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:8C:69:26:BD:85:85:78:A3:43:E8:EB:49:3C:E4:0A:29:A6:6D
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/74444F50490E11EFA7EAAA70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:9e:6e:06:2a:fd:44:f2:d3:ef:df:e3:d2:35:02:7e:b4:
         0b:e8:d9:45:f7:9b:0f:27:3b:81:86:15:4a:e3:18:e6:cf:b0:
         66:2e:ab:b6:d1:d2:ff:d7:11:c6:bb:f0:9a:e4:c9:8a:32:e3:
         ae:26:2d:07:77:05:95:38:1b:31:56:7f:f3:71:61:c2:e3:2c:
         b9:35:0a:4a:07:15:a8:80:42:a1:8d:24:e4:07:72:03:66:b1:
         fc:22:7b:66:7b:ff:3f:e8:35:c9:9b:6f:fe:b4:5a:b8:dc:31:
         a6:e2:94:fb:a9:ec:c8:ad:fb:b3:32:67:d1:29:4c:05:c0:1e:
         6c:6e:0d:5b:62:2a:b0:01:41:ee:50:5c:3a:67:e9:6e:25:58:
         55:2c:34:0a:63:91:53:d9:0c:d5:a6:64:65:e6:96:90:52:0d:
         25:49:13:95:cc:07:5d:f8:5d:4c:33:f9:c8:7e:fe:60:36:b9:
         ef:0e:83:5a:30:ee:73:37:6d:86:31:d1:cd:8a:98:57:f0:f4:
         80:7b:27:20:1f:96:f8:da:67:3a:1e:cc:e2:c0:92:38:2c:db:
         d5:4a:ec:3d:69:47:8d:16:b0:12:a7:7c:74:76:89:db:aa:fd:
         52:47:82:da:23:65:6d:5a:1b:8a:9f:89:66:1a:46:14:26:74:
         20:27:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:09 2025 by rpki-client