Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa
File:                     1983150A3BB911EEB0CA4809C4F9AE02.roa (raw, json)
Hash identifier:          SmYPi2RSloxSaKTT7RKvc8hMxfYT7RAYE5IrJ7qdRzM=
Subject key identifier:   F0:A8:D1:92:21:5F:80:52:0A:03:0A:79:77:5F:67:80:42:E6:DD:BD
Certificate issuer:       /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial:       1409
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa
Signing time:             Thu 14 Aug 2025 17:26:00 +0000
ROA not before:           Thu 14 Aug 2025 17:26:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137972
IP address blocks:        103.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5129 (0x1409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
        Validity
            Not Before: Aug 14 17:26:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689e1c28-73e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:38:69:72:55:dd:1e:97:a3:ed:b4:96:21:
                    42:bd:10:2e:43:5f:ee:47:4f:c9:8b:3d:eb:d7:73:
                    cd:6f:3f:dc:1c:5b:eb:7c:2f:31:1a:3a:b8:02:3a:
                    c7:75:a4:9b:59:bc:cb:82:cb:77:8a:93:c5:1a:df:
                    24:d1:50:f4:f9:45:15:7d:eb:b6:c3:4f:9f:64:82:
                    db:71:31:7a:50:90:cf:8c:45:55:f8:7f:52:bf:62:
                    26:e7:6e:ab:72:b5:54:9a:36:cb:05:04:85:e9:a1:
                    7a:19:d2:87:cf:d8:84:9c:0f:b4:67:b6:05:0f:45:
                    4a:e7:82:c9:5d:44:8e:82:00:2d:80:64:3f:52:19:
                    80:3d:8b:3a:23:6e:a4:b4:6b:d1:cc:e7:0b:25:64:
                    3c:39:3a:45:a7:49:1e:e3:9e:fe:13:8e:40:f2:c1:
                    25:25:6e:11:9e:b2:04:54:bb:59:e3:dc:7f:30:9a:
                    c6:a1:ab:02:0d:c0:62:65:77:fa:20:74:a4:a0:a2:
                    62:78:b9:33:51:8b:b4:69:45:f7:67:23:98:90:78:
                    3e:02:6f:90:42:2a:1b:7c:f9:62:a5:71:ce:d1:bc:
                    eb:ea:0e:53:13:1c:14:5e:51:e2:d6:4d:0c:a4:0b:
                    89:1d:d4:cc:b5:d7:29:15:03:3d:a3:4d:66:f9:c5:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A8:D1:92:21:5F:80:52:0A:03:0A:79:77:5F:67:80:42:E6:DD:BD
            X509v3 Authority Key Identifier:
                keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:af:0a:50:7b:46:e7:79:9f:3a:e2:51:21:77:c1:cd:f1:07:
         b0:56:18:2b:85:72:ff:40:66:d7:70:19:28:e3:80:fa:03:ca:
         8d:f4:74:9a:4d:f2:3a:36:b5:3b:f0:d5:97:29:00:e0:db:05:
         77:7a:14:d9:65:b9:cb:d3:c4:ce:2a:ac:28:f0:2b:66:84:e4:
         53:ae:a6:77:e0:3b:d1:bd:55:46:71:92:95:60:78:ac:84:e4:
         cf:22:50:36:60:63:4c:4c:4b:61:0f:82:af:5c:26:84:00:49:
         ed:bc:81:17:48:3e:04:a7:b1:7b:88:db:65:c4:6b:21:6b:49:
         7b:d4:d6:b0:7b:2e:3e:aa:7d:ca:65:9e:1c:49:7e:a2:85:d6:
         35:6b:75:fc:21:df:9c:e2:06:d7:62:86:7f:84:40:ce:2b:5b:
         61:14:8c:ad:f9:2c:f1:2a:3a:d5:54:82:91:21:89:9e:1c:3e:
         92:74:9a:77:76:19:01:09:44:17:2d:a9:93:ff:e7:ac:68:e0:
         6f:ce:a6:2b:db:2a:b4:cf:bf:b3:aa:73:47:bf:19:83:83:99:
         1c:4e:1f:50:04:0e:8b:ed:3c:f5:2a:02:8b:6b:8d:ed:a0:8c:
         60:31:86:cc:4f:7b:57:70:52:d2:0d:e5:ff:d8:6f:a0:9e:2b:
         51:a5:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:35:58 2025 by rpki-client