Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
File:                     481545DEFE8211ECBAB0E13FC4F9AE02.roa (raw, json)
Hash identifier:          jEKlncyC+64UETCLm2u7esM8VX+/1LjWilEvooOzMxI=
Subject key identifier:   F5:05:A6:D2:AB:58:59:87:AC:C5:70:7E:BB:D7:F6:30:27:14:BA:CC
Certificate issuer:       /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial:       02D7
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
Signing time:             Thu 21 Aug 2025 01:38:47 +0000
ROA not before:           Thu 21 Aug 2025 01:38:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149784
IP address blocks:        103.190.206.0/24 maxlen: 24
                          202.20.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
                          rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
        Validity
            Not Before: Aug 21 01:38:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a678a7-393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:a0:92:e2:6a:6f:cc:74:3e:92:15:19:67:
                    53:d4:d5:63:f7:c8:77:67:9a:92:fa:b8:d6:f2:7a:
                    1c:e4:00:c7:e0:8d:5b:85:fe:bb:d7:83:1c:8a:03:
                    41:27:56:24:e1:5b:79:25:9d:cd:4c:d2:9d:38:75:
                    06:c3:4e:5a:9a:63:34:7a:21:02:26:66:23:8d:f9:
                    46:15:94:61:74:e1:61:27:9b:4c:3c:63:0e:9f:f8:
                    22:ab:e5:77:c3:29:f0:c8:ba:7e:2f:46:64:30:64:
                    ac:dd:3d:50:93:21:ca:78:64:ed:68:c1:fb:09:dc:
                    a4:32:14:88:4c:b2:15:34:5d:2b:2a:c5:32:89:9a:
                    6b:7b:03:5e:af:27:0b:fb:57:45:2d:9b:81:08:6a:
                    fd:ec:94:61:82:7e:52:cd:09:d4:e2:17:a3:52:0c:
                    80:c4:b8:31:50:8a:df:75:be:00:de:5b:b9:bd:ca:
                    9e:75:34:e7:e0:9d:34:c9:ab:47:da:36:fe:30:6c:
                    96:e4:ff:22:95:2c:8f:88:a8:4f:03:d6:40:ca:3d:
                    9f:e7:19:12:dc:4d:39:e8:b8:24:80:04:ea:49:7c:
                    a6:90:b2:51:03:88:27:b1:ae:e1:bb:52:07:06:cb:
                    69:ec:c8:71:8b:33:f6:5d:9e:87:dd:6c:e4:62:f9:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:A6:D2:AB:58:59:87:AC:C5:70:7E:BB:D7:F6:30:27:14:BA:CC
            X509v3 Authority Key Identifier:
                keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.206.0/24
                  202.20.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:04:1d:50:8a:a6:9f:06:1d:7e:80:33:4a:20:36:d8:53:
         5e:c0:9b:a1:9a:64:1b:f5:02:97:53:2d:20:c8:fa:16:c5:ff:
         7a:99:1c:34:0c:9b:1c:b8:74:2c:4a:28:08:7e:f2:cf:19:12:
         53:ae:c9:06:b2:d1:e0:f1:12:44:87:00:10:65:0c:36:6d:43:
         3a:8e:03:e2:9b:2e:4f:43:33:25:6a:4b:49:ea:c7:24:11:d0:
         98:60:20:47:d1:24:7a:96:c9:57:24:a7:bd:db:c2:71:ed:f5:
         3c:c2:64:ef:16:76:e4:a0:ca:fb:2c:0b:42:53:5f:48:b6:42:
         be:7a:77:d4:74:7d:2b:19:0c:85:0a:84:6a:34:33:90:0b:ef:
         c5:b4:8f:d7:28:bd:8d:99:83:a1:6a:d6:da:19:60:a0:d6:03:
         1d:0d:2e:b1:be:d1:93:21:be:e0:c7:31:40:36:27:a1:c8:a9:
         0e:6a:d0:89:1a:64:a4:4e:cd:b7:0d:6c:2f:b0:19:0d:93:bd:
         13:28:fc:ae:f7:e1:a0:53:0e:74:e5:17:2f:b8:ac:17:1e:de:
         52:56:31:0b:3b:66:ea:1b:4c:e9:ce:ed:7e:90:6e:e1:bd:75:
         12:cd:6f:d1:8d:c3:ba:56:b9:a3:e2:b3:df:19:51:59:b7:aa:
         b9:af:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:06 2025 by rpki-client