Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
File:                     74CA44AA049F11F087661234C4F9AE02.roa (raw, json)
Hash identifier:          Dt3Rxw54HIQ46kEi6T0edZoyMwWemQneM/8kvnTf7jo=
Subject key identifier:   6E:64:9B:B0:73:D1:AC:9F:5D:75:81:4C:6C:FB:9C:B8:55:60:0C:CA
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0B54
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 19:39:26 +0000
ROA not before:           Tue 02 Sep 2025 19:39:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        103.14.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 19:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2900 (0xb54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Sep  2 19:39:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b747ee-3880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:01:b0:cc:91:9f:3c:3a:db:7a:a9:0d:4c:
                    e4:08:cb:d8:fb:31:f8:a8:a8:c6:28:19:1d:69:42:
                    57:df:bd:17:d2:96:68:75:ca:7e:97:b9:df:da:d6:
                    a2:4c:39:4e:09:13:e0:09:27:0a:47:6d:35:c2:2c:
                    b2:2b:d5:82:58:fc:dc:80:e7:4e:bf:f2:72:22:eb:
                    85:09:d9:1e:b0:14:af:9e:e1:ef:2c:e0:81:ed:88:
                    1d:9b:ec:6e:1f:ca:c4:76:6f:51:17:b5:6e:00:5d:
                    c4:36:67:84:75:b3:7f:e9:38:ce:2e:f2:44:da:68:
                    3b:c4:3b:7d:13:32:8a:80:4c:0c:4d:27:5e:23:c3:
                    fd:6b:c7:52:3a:0a:b8:43:6e:49:59:a8:41:0d:35:
                    66:9b:04:dc:89:c1:61:a1:40:45:56:99:7b:d0:6f:
                    c4:40:b7:e9:ae:c1:59:1a:9e:20:7e:97:6b:c6:92:
                    93:93:ac:25:4e:d2:5b:5d:28:e7:24:34:59:79:4e:
                    a1:e2:a0:c1:f9:a9:0d:43:70:26:ca:ee:24:63:8b:
                    97:32:b9:e7:e5:89:b4:a8:70:8a:18:2a:ca:e1:bf:
                    1a:3a:68:c5:f9:00:dd:64:5c:b3:d5:49:2d:06:11:
                    56:88:3d:d4:f4:7e:1e:85:e8:c6:eb:f1:06:fb:9c:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:9B:B0:73:D1:AC:9F:5D:75:81:4C:6C:FB:9C:B8:55:60:0C:CA
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/74CA44AA049F11F087661234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:04:eb:47:b7:28:18:0f:12:94:5f:ee:99:b8:d5:9c:e0:36:
         ef:45:74:70:76:f5:87:81:26:a3:fb:46:3b:a8:f6:7a:bf:b7:
         65:c2:90:31:0a:51:b5:20:e8:8a:d1:02:80:23:5d:61:ba:6c:
         b8:42:13:56:8b:8c:39:8f:bf:f8:ff:9d:e1:fc:48:67:26:58:
         7c:aa:1b:02:7b:5e:91:c0:3c:f7:17:74:e5:e4:e7:47:e9:c4:
         85:72:19:67:0a:7a:06:02:22:58:7e:5f:67:93:32:49:d1:5d:
         52:d2:c6:c9:7b:07:35:7f:92:8b:8b:73:e6:90:1f:49:f1:91:
         ec:27:db:db:11:0d:6f:07:96:66:86:91:be:8a:35:e1:b8:fe:
         f7:c6:6b:5e:c3:fd:f6:66:d1:05:1a:a1:e0:b6:4d:ce:bf:49:
         99:f0:8e:36:e7:59:45:76:2e:ab:b7:75:e0:0c:5b:a6:34:33:
         3c:97:d9:17:be:6c:12:df:ee:45:a8:58:66:ea:61:c8:1b:8a:
         51:90:ed:e0:37:7e:ed:ac:a1:4a:cb:cb:88:73:ee:ea:18:05:
         80:38:73:b3:77:55:a4:b7:4f:8a:79:65:d7:01:f5:03:6b:7e:
         9d:96:d0:8d:ca:3d:36:fd:be:3f:5f:04:88:22:0f:7a:4c:ea:
         71:01:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:40 2025 by rpki-client