Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
File:                     0BD593E6136D11F09F542C81C4F9AE02.roa (raw, json)
Hash identifier:          SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=
Subject key identifier:   68:97:91:E2:84:D0:1C:E6:E0:89:21:3B:26:1D:2C:12:A6:00:AE:1D
Certificate issuer:       /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial:       36
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 05:16:35 +0000
ROA not before:           Thu 10 Jul 2025 05:16:35 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153526
IP address blocks:        203.77.168.0/21 maxlen: 21
                          2401:e9a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
        Validity
            Not Before: Jul 10 05:16:35 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=686f4cb3-6d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:35:4a:b0:b1:34:a1:dd:17:66:a1:dd:4f:
                    8b:20:d3:5f:67:37:4b:7a:2f:11:2f:50:83:24:e8:
                    a6:a7:11:96:df:fd:9b:b6:dc:46:b7:b7:ec:a0:98:
                    08:00:e6:bd:4e:00:42:dc:bf:35:cd:6c:2c:cd:97:
                    7c:8c:7a:41:0d:1a:b8:29:e7:e8:96:3c:e7:32:d8:
                    17:06:3c:e2:7b:18:b7:8b:c2:ca:8a:9a:41:52:f0:
                    a4:51:87:1e:fe:ee:f5:fa:6a:b0:36:d9:37:02:5a:
                    4e:5f:84:11:ef:41:34:42:f2:ab:2c:cc:eb:80:65:
                    4b:96:b7:62:34:ea:04:e4:95:2a:0b:9c:f8:2a:6b:
                    98:2b:d9:42:3c:16:11:c5:f9:02:54:7f:58:3d:57:
                    9a:1b:b4:2f:1c:58:98:b2:0c:29:c2:08:a8:33:f3:
                    d3:10:45:02:3e:25:fb:71:8f:96:3c:f1:89:66:12:
                    2f:0c:3e:ba:3b:47:19:08:ac:84:da:41:fc:5d:fb:
                    47:88:91:a2:99:02:aa:5e:39:da:d1:8f:aa:93:3d:
                    cf:ee:25:0e:0c:17:77:ae:1f:19:41:c0:24:22:fa:
                    2a:31:f7:57:80:03:db:79:e7:2c:e0:9a:b6:61:a4:
                    51:ce:4b:5d:ea:e4:a1:e2:b0:11:e9:2f:c0:ad:5d:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:91:E2:84:D0:1C:E6:E0:89:21:3B:26:1D:2C:12:A6:00:AE:1D
            X509v3 Authority Key Identifier:
                keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.168.0/21
                IPv6:
                  2401:e9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:7b:93:22:b3:85:76:1c:bc:bb:ad:f4:d0:9f:f3:67:a9:
         19:74:2b:e9:0b:96:0e:a9:7b:19:47:d7:eb:40:47:18:f2:64:
         13:6c:58:5a:11:d9:b6:0d:f7:19:33:cd:df:3b:72:0b:56:d4:
         4b:19:89:37:98:73:e1:42:9b:e8:ca:3c:62:38:5c:fa:43:2b:
         57:24:3b:77:b7:f9:ec:cd:53:bc:7c:34:83:96:0a:f7:d4:e5:
         16:2c:5b:22:cd:26:1d:8c:42:0b:3a:2c:57:81:ed:5d:76:ce:
         f1:e9:91:a9:fd:1e:20:f0:f8:68:c0:d3:f9:9a:03:a9:c8:70:
         33:29:ab:f1:14:88:ed:2b:25:ca:e8:f4:95:c3:a9:6a:bd:02:
         73:e9:ef:44:ce:b6:6b:84:cf:5a:7f:f4:f0:52:c4:a0:ec:cd:
         65:87:65:0f:38:dc:9f:73:00:bc:5d:ea:e8:8e:61:a4:c9:66:
         3c:40:0a:34:f4:33:9a:66:17:48:d8:d3:2c:86:85:fe:9b:84:
         05:7e:d0:41:cd:e6:46:59:83:9e:b5:65:5b:1f:57:39:03:2e:
         a6:71:a0:1a:0f:85:ad:e1:e2:31:29:b8:bd:dc:74:09:82:1a:
         a6:01:9f:c5:55:50:1c:27:12:05:11:99:48:b2:f7:2c:f6:b1:
         a3:fc:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:17:24 2025 by rpki-client