Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa
File:                     E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (raw, json)
Hash identifier:          nETGCZ7oN/cEeYIslhlbXvG2CCoKeFiaS4o4yNcP+rs=
Subject key identifier:   6C:58:55:CC:B0:B1:A3:C8:32:7C:5B:66:6E:66:FB:6B:05:77:68:1F
Certificate issuer:       /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial:       0117
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 06:00:55 +0000
ROA not before:           Wed 01 Oct 2025 06:00:55 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139599
IP address blocks:        103.142.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
                          rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
        Validity
            Not Before: Oct  1 06:00:55 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68dcc396-1bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:31:4d:3a:78:39:ce:9e:db:27:66:47:82:
                    41:4d:c1:17:57:4b:ee:25:8e:66:e8:60:40:27:f0:
                    41:7b:bb:91:21:3e:10:b2:dd:6f:98:6c:1f:b5:f2:
                    09:99:4f:00:ec:c5:5f:ed:18:c5:dc:a9:04:7a:8d:
                    31:65:46:dd:7b:82:fc:b8:a1:b0:34:50:35:d3:00:
                    56:67:d9:c2:a9:5c:6c:4d:52:a8:4e:d8:ec:41:95:
                    5f:e0:43:25:e9:8f:4f:62:55:40:d3:61:4b:7a:7e:
                    2f:67:f7:21:47:ef:86:89:fb:cd:2f:b9:42:34:cf:
                    65:c7:a8:7b:8c:a4:86:ac:6a:88:55:34:d9:b1:80:
                    87:5e:25:d9:1c:5f:99:20:a6:83:b4:a1:98:99:7c:
                    a9:24:67:70:ef:ae:56:b8:2f:91:58:82:07:28:d1:
                    1d:43:8c:86:f1:5c:0c:64:b0:98:8e:12:47:d0:2d:
                    7f:45:47:e8:34:af:70:25:b3:58:33:08:22:3c:ce:
                    f0:20:dc:15:76:01:d0:f1:d3:0f:85:f4:d6:b5:5b:
                    b8:8f:df:b2:d8:32:14:6b:d7:96:2e:01:01:d2:a1:
                    7a:d9:e4:ed:60:f4:c5:bd:42:7e:12:61:69:01:17:
                    cb:3c:af:b5:c3:32:b0:4b:4e:13:28:a5:ba:e3:57:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:55:CC:B0:B1:A3:C8:32:7C:5B:66:6E:66:FB:6B:05:77:68:1F
            X509v3 Authority Key Identifier:
                keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:9b:50:e1:3a:3c:bc:b2:54:e0:12:8e:ac:4c:d1:a3:a2:
         4f:f7:3f:83:a9:c4:55:df:92:5f:ff:19:37:a6:04:2a:84:78:
         14:a9:bf:93:36:1e:d2:65:9f:d3:22:d6:64:47:83:0b:79:78:
         61:9b:4f:d4:2d:07:00:38:8c:7b:ef:32:68:2f:7a:d3:9f:85:
         97:7f:64:d3:00:0f:f7:24:aa:82:07:aa:bc:a9:f8:b0:4f:37:
         5c:9d:5e:0b:be:67:66:f9:bb:3a:5f:81:d0:9a:c5:2c:0f:e3:
         93:5f:6e:26:58:4e:64:80:91:db:5f:39:ff:ce:df:68:dc:78:
         60:1c:d0:ff:b7:6c:c7:90:65:27:22:37:6e:b8:a8:5b:8a:5a:
         74:cb:75:f7:ad:25:a0:ce:96:30:dc:fc:76:fb:29:4a:20:0a:
         2c:a8:d9:d9:91:cb:95:df:a1:99:52:09:f0:48:32:74:cd:34:
         b8:31:68:f0:75:5f:5e:53:71:d0:b3:e5:a7:8f:16:56:1e:97:
         33:b6:25:6f:2d:b5:87:21:61:e6:95:3e:34:99:5b:82:fa:63:
         1f:f5:11:9f:d6:cb:d4:e0:ef:70:63:bb:e0:16:7b:d2:d7:cb:
         c8:ef:9d:ae:82:90:69:57:2b:92:f4:22:a3:f7:d4:45:6a:b1:
         1d:e9:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:38 2025 by rpki-client