Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
File:                     E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (raw, json)
Hash identifier:          yrboOG9m2lvBWQHx/uqKC37vWN731mVNG5r2uRiBCHQ=
Subject key identifier:   3A:13:DD:EF:B5:AE:2B:0F:E0:BB:3F:03:FD:96:D6:A6:84:A1:5D:9E
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       05F0
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 23:57:00 +0000
ROA not before:           Sun 28 Sep 2025 23:57:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     147002
IP address blocks:        103.172.134.0/24 maxlen: 24
                          103.172.135.0/24 maxlen: 24
                          2407:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 28 23:57:00 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d9cb4c-2e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:00:f9:d6:e4:43:9e:9d:15:e7:e9:ad:55:
                    8b:66:ec:b1:bd:38:46:70:24:20:80:67:05:25:e1:
                    99:40:df:b1:78:55:bd:58:d4:78:05:6c:c7:d3:c5:
                    aa:86:83:27:04:21:0a:31:4f:1a:bf:78:2b:84:4c:
                    5e:ec:5b:6f:03:eb:cb:96:2f:c7:1c:f8:ff:20:77:
                    00:9b:84:b0:bf:4e:10:3e:f6:2e:0b:bb:89:37:ee:
                    62:38:44:39:7a:f9:b6:41:06:8c:bf:00:ee:c7:8e:
                    1a:8f:51:e0:57:fe:f5:52:76:b7:b7:2f:1f:bf:3c:
                    16:e6:d6:0d:f1:49:0c:67:17:01:85:61:2e:25:a4:
                    25:ce:73:a7:d3:cb:58:a3:0d:92:6b:ef:03:fe:5b:
                    90:75:9e:63:76:b2:35:72:bb:db:5a:f4:e6:13:0b:
                    ba:20:e1:87:2d:72:ac:2b:15:a2:2d:aa:d2:82:33:
                    1f:58:95:91:89:1c:42:3b:37:47:d0:ba:bb:96:09:
                    12:1d:5c:76:1f:03:f6:2a:0a:b8:de:f2:e7:cd:0c:
                    96:4b:61:6b:ad:7a:d0:c0:96:95:03:cb:59:26:9d:
                    59:80:de:8e:11:13:0c:f7:01:10:11:ca:4d:80:5b:
                    72:04:a7:b9:1a:1c:a1:87:c5:e2:ad:ae:51:99:92:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:DD:EF:B5:AE:2B:0F:E0:BB:3F:03:FD:96:D6:A6:84:A1:5D:9E
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:b5:f5:41:93:4e:5c:13:30:bb:fc:6f:24:bf:fb:c2:ab:
         1d:4e:6e:4d:72:07:52:95:bf:55:24:5d:71:f1:ce:cf:c1:86:
         fe:4c:aa:ad:d0:15:51:2e:47:33:02:47:54:a9:31:d7:7f:ea:
         1d:0e:5d:74:62:89:d5:7c:5e:b2:db:e0:d8:d2:2d:70:a1:aa:
         48:52:a5:60:7e:31:d6:4b:98:d4:94:67:13:0a:e9:e5:ab:e8:
         57:f8:09:6d:0a:a5:7e:f2:7f:50:9c:fc:0c:59:aa:e6:c3:a1:
         59:0b:e0:08:cd:49:24:3c:b2:b8:3d:16:95:af:da:c0:e0:a5:
         ed:ae:a1:cd:1b:65:3b:89:ca:dc:c4:4c:b8:e9:ab:f3:88:03:
         50:5b:09:79:e1:29:fe:de:7a:c1:79:aa:e4:2e:c6:07:e8:75:
         26:fa:b4:56:86:8c:59:fa:dc:32:a0:88:1a:8b:6a:ce:65:29:
         bb:8d:e7:a9:46:28:dd:a7:d2:d3:c8:cd:1f:fc:5e:23:09:1f:
         af:f9:ae:5d:be:7e:2f:04:97:5a:8e:1f:50:8b:38:e0:fd:d3:
         d0:ef:e0:7d:cf:d9:92:e1:3f:1b:dc:ce:f2:d5:cb:40:0c:9a:
         9e:15:58:04:4f:03:c3:79:d1:f5:20:87:fb:c5:dc:19:8b:d6:
         4b:17:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:21 2025 by rpki-client