Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
File:                     1F642722FE4811EF9909DE6BC4F9AE02.roa (raw, json)
Hash identifier:          50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=
Subject key identifier:   52:10:B1:B0:CE:16:B4:48:8F:77:13:8A:3E:75:25:10:1A:DF:A1:4E
Certificate issuer:       /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial:       065E
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 23:35:34 +0000
ROA not before:           Fri 08 Aug 2025 23:35:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150675
IP address blocks:        103.249.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
                          rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
        Validity
            Not Before: Aug  8 23:35:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689689c6-7112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:6b:8a:15:e1:ec:0f:21:ca:df:a8:30:28:
                    f8:9b:23:87:5b:6c:26:ff:29:f1:01:fe:4a:51:41:
                    fd:2f:8d:bb:31:a1:7a:fc:b7:77:a2:d5:5f:54:ab:
                    09:b3:0c:de:ad:a2:33:73:8a:d9:e7:97:96:8d:62:
                    d2:c5:b8:75:1d:d7:63:ef:f6:c0:dc:29:66:cf:42:
                    b1:08:47:60:fe:fd:df:d1:68:8f:a5:f7:61:1c:ec:
                    bf:55:7a:70:cc:cf:1c:eb:16:2d:4b:2e:e9:4b:31:
                    10:f1:a3:0f:f3:d7:37:d0:bb:06:19:29:69:2b:87:
                    ed:a6:d5:41:4b:41:44:e5:f7:6c:a4:a7:68:d3:b3:
                    35:6a:6f:f6:91:2f:1d:c0:65:87:5e:d4:d8:3e:f9:
                    09:a9:cb:9b:93:65:fd:10:7a:7b:9d:51:09:eb:24:
                    35:20:3f:03:b5:76:bd:f9:88:ef:b1:c3:05:ce:49:
                    34:06:2a:f5:70:9d:71:b2:1c:45:31:09:2a:56:0b:
                    e8:e9:32:6b:d6:1c:fd:e4:e2:4b:07:b9:98:ca:18:
                    2c:e3:9e:77:47:10:e9:e6:87:ea:a6:54:9f:99:5b:
                    f8:ec:cc:36:17:ad:61:7b:50:a3:63:0b:d9:b3:15:
                    c9:0f:3e:6f:c9:ee:41:34:24:8c:43:94:c3:41:72:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:B1:B0:CE:16:B4:48:8F:77:13:8A:3E:75:25:10:1A:DF:A1:4E
            X509v3 Authority Key Identifier:
                keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:72:c3:c1:cb:6a:ff:92:3f:11:2b:75:85:47:9a:5a:5a:
         20:3d:ae:4d:3f:87:78:2c:2a:4b:31:cd:57:e6:6f:92:f4:2a:
         e3:c8:29:1c:5f:92:e7:7a:3f:d4:72:00:ad:18:35:05:05:a9:
         9d:24:b5:7f:38:b0:1d:9f:b0:37:76:0c:ea:15:6c:b4:63:2f:
         49:f4:46:b0:a3:7d:9e:c8:67:20:10:36:60:02:94:e4:38:96:
         91:85:fd:fb:74:2f:cf:d6:4d:de:f2:af:13:91:d2:f8:f9:4b:
         03:08:bf:a2:57:14:30:48:ee:83:b3:7b:23:48:b2:97:8e:03:
         1d:20:9d:7f:b2:25:df:4e:d9:07:94:74:b4:5c:3f:d2:c6:e3:
         3d:be:a8:0a:ae:50:f8:8d:4c:2a:df:56:b9:1a:4f:38:bc:af:
         74:95:9e:1c:a3:8a:b1:11:93:b1:c2:c4:b0:a5:49:92:5a:6e:
         87:27:b1:52:16:0d:fd:98:87:fc:5e:e9:d8:65:40:d5:d5:75:
         8f:dd:88:04:7f:6f:28:65:90:64:02:a5:fe:9f:2b:36:5a:ae:
         a1:8b:7c:b0:4c:b8:64:97:dc:56:63:0d:46:bd:9e:c6:96:79:
         9e:bd:7c:0e:01:5f:20:70:53:7c:57:47:30:f9:fa:eb:85:e3:
         67:5a:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:07 2025 by rpki-client