Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa
File:                     FE1C0C348E9211F0B9F46F41C4F9AE02.roa (raw, json)
Hash identifier:          iRQhqMAd0hRFEssmzS610D6wroDA71aDkWeK8ksNCRI=
Subject key identifier:   63:66:E3:7F:FF:6B:83:41:34:E3:2E:30:5D:33:04:FA:37:E6:54:4E
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       0131
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa
Signing time:             Wed 10 Sep 2025 22:10:43 +0000
ROA not before:           Wed 10 Sep 2025 22:10:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     33667
IP address blocks:        103.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Sep 10 22:10:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c1f763-d3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:94:08:4b:04:25:50:e2:a6:f3:df:de:9c:
                    c8:73:35:02:61:1d:55:a8:4d:8e:39:82:7e:66:94:
                    0b:14:d3:fe:3d:86:9e:f5:6e:cf:b3:1c:27:fa:7c:
                    3b:54:08:3e:78:64:08:a3:60:5a:60:79:1c:a3:a1:
                    17:f2:5e:09:cc:d7:32:f7:0a:d8:d8:4f:c8:15:85:
                    2c:86:06:f5:b5:ac:f8:38:ea:68:e6:ed:55:84:72:
                    51:74:1f:9a:ec:65:a7:53:84:7f:bd:59:3e:23:a5:
                    07:a4:e2:af:49:75:54:38:2b:9d:99:7b:3f:5e:29:
                    92:8c:dc:7a:ba:ed:b3:7b:26:60:2f:e7:bc:24:29:
                    ee:48:40:8b:96:56:39:a5:71:51:52:7d:1d:83:b5:
                    38:1f:bc:62:b7:ef:28:bc:11:d2:89:59:62:17:8e:
                    97:06:cf:67:64:cb:93:ed:8d:bc:9b:fc:53:b9:1a:
                    53:8d:33:37:bc:4b:fa:15:0b:ed:4a:5b:01:dc:1e:
                    8f:c8:a1:e7:79:f0:e4:1f:fa:51:86:c9:8c:ec:f0:
                    9d:a6:5f:65:3d:47:85:66:39:e6:24:97:4e:47:99:
                    68:87:72:95:03:a0:68:a6:14:68:d7:76:90:f8:dd:
                    d2:3d:2e:d7:11:86:cb:47:d7:9a:4e:dc:7b:93:09:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:E3:7F:FF:6B:83:41:34:E3:2E:30:5D:33:04:FA:37:E6:54:4E
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FE1C0C348E9211F0B9F46F41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:f2:57:db:23:ba:44:72:af:80:6d:db:03:eb:17:b3:3a:
         8d:08:66:53:fb:33:c9:fe:b6:b1:96:db:43:68:e8:10:64:aa:
         7a:04:e4:cc:12:a8:8a:0f:23:4c:04:00:df:31:96:92:88:56:
         ea:69:a7:80:45:cc:bb:f8:7b:1f:c5:0f:d0:4c:df:ee:1f:b7:
         36:1d:3f:8f:aa:f3:24:c0:9f:19:5e:a3:7d:8c:13:7e:16:5f:
         7e:ac:f9:cf:ff:5b:08:da:58:5b:6a:29:08:73:4d:e5:69:eb:
         27:5a:62:c6:30:df:93:02:35:5d:d2:8e:87:1e:bf:bb:2c:17:
         55:f0:73:91:ef:03:cd:7f:7b:99:b7:ef:f0:83:12:1d:86:fd:
         1d:65:33:6b:ce:0f:11:a2:ba:a4:88:df:f5:66:2c:88:0e:77:
         c6:ae:0d:64:77:1a:53:ea:97:27:2b:d5:c5:44:b9:27:5f:c2:
         3d:3c:50:17:f2:8e:73:f8:ca:0b:75:42:ca:f2:21:97:d9:41:
         44:58:b8:0c:8d:8c:22:71:c6:ee:ef:0f:41:41:71:9a:c3:1e:
         4b:7f:3e:32:04:cb:30:0f:65:5d:fd:3a:60:9d:d2:04:c5:72:
         e4:8a:dc:a7:a3:2f:50:9b:b7:90:cd:1b:c5:15:96:a6:ec:bc:
         39:86:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:48 2025 by rpki-client