Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
File:                     884A59828D3211EF9E092384C4F9AE02.roa (raw, json)
Hash identifier:          xOaimOfUZBkRNhY2P91bf0+ib8Nd/3H7NeCCoMewY1U=
Subject key identifier:   64:FB:AE:16:94:B0:87:C8:76:9E:CC:12:77:29:DE:47:9F:D7:05:ED
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       E6
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
Signing time:             Mon 07 Jul 2025 06:12:55 +0000
ROA not before:           Mon 07 Jul 2025 06:12:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55405
IP address blocks:        103.13.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Jul  7 06:12:55 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686b6567-7855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:44:fb:84:13:35:24:e0:88:35:d8:4e:7e:
                    be:4c:f8:cd:03:85:d0:b8:6c:8c:35:9b:6c:72:a1:
                    41:df:68:5d:68:ad:5f:ca:cf:08:9c:1a:ad:0b:96:
                    15:b6:0d:5d:69:4d:a3:68:90:c4:1b:05:6b:11:05:
                    bb:f7:c0:05:7e:6c:48:85:b8:08:9d:02:89:38:49:
                    fb:0a:34:fd:a8:5e:17:3c:c1:22:af:f8:bb:04:28:
                    3f:fc:06:e2:67:3c:d2:3a:1e:c3:7f:bb:99:1b:55:
                    30:07:9e:a3:ec:29:89:79:6a:58:11:30:4d:93:48:
                    75:22:d2:d6:84:0c:9f:4c:25:cd:89:95:fa:19:67:
                    06:aa:47:0f:74:c2:60:0a:10:d3:d0:ed:37:46:f9:
                    87:72:a7:50:0c:0e:a0:2b:94:b2:f1:16:13:5a:b0:
                    17:9e:1a:d5:93:43:67:b4:3c:9f:54:fb:f0:11:88:
                    24:9a:30:d4:c9:e6:af:f8:87:a3:cb:da:50:9f:f4:
                    b7:59:2c:a4:99:0a:5d:de:a7:a7:5f:3a:2b:76:c2:
                    16:53:9c:39:00:34:8e:28:1e:74:67:14:ff:9f:3b:
                    24:df:24:d6:c7:86:95:ec:3b:e3:c0:a4:f9:5e:6d:
                    17:8a:5d:5c:2d:24:36:53:ad:ca:14:45:4e:63:6f:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FB:AE:16:94:B0:87:C8:76:9E:CC:12:77:29:DE:47:9F:D7:05:ED
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:95:1f:fa:97:77:c6:cb:c5:c8:12:88:18:69:1d:34:c0:
         74:89:4c:73:21:f8:d8:b1:e5:4b:c4:91:b6:96:2a:3e:91:27:
         e4:4d:a9:2f:c5:7a:74:59:c9:9a:5f:d7:7e:ac:bc:93:0d:37:
         96:99:e8:04:99:07:dd:cc:27:c7:81:05:e1:3d:2d:51:d8:6b:
         4e:33:4f:9c:de:f5:c7:51:ac:ca:4d:7d:4f:34:25:34:1c:ba:
         71:46:b1:f4:9e:4a:88:04:7d:16:e8:8e:e6:84:f0:14:38:f7:
         fc:12:9f:08:a6:8e:fc:0b:78:ce:23:74:3c:5d:f9:a5:31:b0:
         d7:65:c2:a7:b3:60:b7:16:84:b2:8d:52:f5:e4:b1:1c:6e:33:
         75:d5:94:4e:a8:f6:3d:f9:ca:57:3c:66:30:7a:60:f7:19:b7:
         b5:e8:d0:95:a0:f9:91:77:23:f9:6a:45:a4:23:6a:65:f9:fd:
         26:8a:d7:9f:35:d0:af:20:01:86:8f:6c:53:74:ce:4c:bc:3e:
         d6:9f:ea:d8:71:2b:2b:99:50:b4:63:a1:88:7f:1f:3c:55:12:
         cc:b9:03:c3:26:f1:22:f0:27:f8:c0:f9:7a:ce:84:20:9b:0f:
         83:6a:94:be:dc:09:d3:77:69:cc:fe:b5:12:5c:f2:30:df:11:
         ab:cf:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:05:02 2025 by rpki-client