Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
File:                     A6789038400211ED808CCF0DC4F9AE02.roa (raw, json)
Hash identifier:          tO/Vg+1jM6TnaROUPSYxvRElxqw/2z5ZN8ZDcSK7tnY=
Subject key identifier:   40:0D:78:7F:EB:6F:A9:F6:5F:C8:1E:CD:BB:05:24:B3:E9:23:03:48
Certificate issuer:       /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
Certificate serial:       0211
Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
Signing time:             Tue 15 Jul 2025 02:38:13 +0000
ROA not before:           Tue 15 Jul 2025 02:38:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136592
IP address blocks:        103.93.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8
        Validity
            Not Before: Jul 15 02:38:13 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6875bf15-8a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:cf:c9:8f:49:24:bb:e3:d3:59:c7:ad:e7:
                    23:84:a8:16:c8:73:d0:b5:3a:82:62:3d:1d:ff:c7:
                    aa:81:bf:4d:f0:db:84:72:d4:46:ba:c6:d1:b9:97:
                    9c:04:94:f4:58:b4:7b:6c:f2:57:f7:e8:b8:d8:d1:
                    99:f8:a8:09:08:16:5a:82:bc:0f:87:3b:c2:70:59:
                    dc:36:f0:61:7c:68:02:56:4e:e8:c9:8a:88:7a:13:
                    af:a1:99:75:97:a6:e9:de:40:74:1b:39:51:a0:3c:
                    1a:d4:b7:5f:c0:4f:94:9e:31:aa:fd:57:7c:b4:32:
                    b5:50:0f:6a:68:55:f8:04:4d:8e:2d:88:81:16:7a:
                    a3:4b:81:7e:24:f5:0b:3e:9c:10:4b:90:21:44:c0:
                    00:70:65:ca:d0:38:f2:c0:70:c5:16:16:8a:93:86:
                    64:5e:d4:5c:d6:3f:01:dc:1a:2c:6f:68:b9:70:7c:
                    41:ca:68:6f:c7:64:10:a6:89:01:d3:7b:cd:c2:1b:
                    9b:3a:29:4c:9f:05:f7:2f:41:3c:f3:2a:ec:32:91:
                    0a:30:38:d9:1c:91:28:14:20:df:0f:a4:b2:8b:db:
                    fb:2a:7d:b2:a1:2e:42:8f:34:06:0f:e1:8a:b4:05:
                    67:b8:04:06:fe:8c:7b:8f:d9:ba:42:12:7c:69:10:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:78:7F:EB:6F:A9:F6:5F:C8:1E:CD:BB:05:24:B3:E9:23:03:48
            X509v3 Authority Key Identifier:
                keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/A6789038400211ED808CCF0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:e3:d4:50:13:b3:1b:95:25:5e:d3:82:81:cd:fa:67:63:
         0d:e5:06:de:0b:3d:cd:af:04:a6:c2:87:a6:d5:f6:49:d4:47:
         57:1b:3e:a6:9a:33:80:ae:c2:47:db:10:ca:b7:cb:1c:0b:a1:
         e8:9a:3b:44:51:4f:12:d8:6e:56:93:69:ea:3c:44:6b:79:96:
         ad:e0:89:5c:d5:85:ab:aa:72:91:4e:4a:08:72:50:76:fc:1d:
         20:7b:88:06:33:ad:99:34:05:ce:b8:d8:3a:c2:8c:3e:ae:f0:
         e3:d2:a1:b4:f6:f9:3e:ed:da:67:62:29:bc:44:d9:05:04:24:
         dd:76:a5:75:00:ee:ac:99:a8:08:a5:9f:ed:3e:4a:f2:eb:45:
         49:21:05:af:7d:4b:ad:93:37:48:aa:f2:10:45:01:3f:e4:3d:
         8a:ab:f8:00:7f:4c:2d:65:ff:9a:1a:28:7e:44:f3:5e:e4:c4:
         0b:cd:06:10:06:60:88:4c:f4:a9:26:34:e8:85:dc:bc:a4:ca:
         83:2f:26:39:25:55:0b:61:63:61:f1:df:d6:a8:e0:32:3f:5e:
         04:04:3e:6c:7c:84:47:6e:5b:8a:f4:1b:37:00:6a:6b:69:7d:
         f7:d9:02:12:c9:c8:7c:a4:f1:c5:4f:fd:21:55:78:ee:37:4c:
         f8:6f:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:45:28 2025 by rpki-client