Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/58BB655AF47C11EBB34AB831C4F9AE02.roa
File:                     58BB655AF47C11EBB34AB831C4F9AE02.roa (raw, json)
Hash identifier:          fKjF+BnPFzCKYzy2S18hHZ7OEvWxZXVLzbMEcVWg2es=
Subject key identifier:   35:CE:A2:77:F1:6F:46:EF:49:14:C2:05:60:0A:FD:BA:B2:ED:59:AC
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       056F
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/58BB655AF47C11EBB34AB831C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 00:04:54 +0000
ROA not before:           Tue 19 Aug 2025 00:04:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142611
IP address blocks:        103.170.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 23:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Aug 19 00:04:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a3bfa5-be41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:84:67:30:6a:d5:f4:7b:18:42:4c:73:34:
                    bf:c7:0f:95:09:2e:92:b9:10:66:27:13:7e:6d:51:
                    03:c5:83:90:db:57:b2:ca:83:8d:73:13:5f:03:6d:
                    33:e2:b7:0f:eb:f0:02:2e:0d:ac:e7:05:0e:96:9f:
                    3b:59:83:95:cd:01:19:1f:a3:6a:fb:e2:af:1d:45:
                    22:2a:d2:e4:5f:c0:70:8e:28:17:df:ab:ee:e1:97:
                    ed:dd:24:cc:97:84:f7:15:9f:c4:bd:bb:94:ef:52:
                    12:87:1b:0b:16:a7:94:13:8b:01:9e:71:c1:69:04:
                    2a:cf:2e:40:c0:54:19:77:57:d5:fb:7d:93:4b:8e:
                    39:58:ed:0f:c8:e3:48:7b:ed:17:1e:8c:34:1f:44:
                    6d:69:5e:e3:e5:14:45:08:d3:31:d3:76:0d:02:49:
                    2e:41:6f:8b:6b:d6:1c:07:ee:e0:e5:67:48:1a:74:
                    7e:bc:c9:82:77:ec:76:93:b5:49:73:e1:1e:99:3d:
                    c7:d8:79:cb:8a:c8:3f:f0:0f:16:70:9c:67:56:63:
                    f0:02:c4:3c:76:8d:6e:df:ac:3a:8d:2c:36:b5:5c:
                    82:08:15:f6:99:a7:f1:ca:8f:74:76:08:2b:91:85:
                    db:a1:6b:8a:60:35:90:ad:3f:1a:06:c5:74:66:ce:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:A2:77:F1:6F:46:EF:49:14:C2:05:60:0A:FD:BA:B2:ED:59:AC
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/58BB655AF47C11EBB34AB831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:00:1a:6c:41:1b:6b:c1:4d:35:41:3c:45:a9:03:4b:b6:
         26:47:50:a5:c6:56:c7:28:36:c9:30:d2:f4:92:00:f0:5c:5c:
         57:71:1e:c8:4d:ae:f3:b5:4b:29:4f:08:40:45:c0:93:09:f0:
         02:5a:4b:19:cc:6a:47:c6:72:1d:6f:ff:45:fe:d9:71:7b:d5:
         c5:5e:27:6a:c9:60:4d:64:c8:6f:d0:4c:f0:89:7d:16:5f:77:
         a6:e9:2c:ee:c5:cd:bd:21:51:eb:5e:c6:aa:db:53:af:0e:62:
         84:8b:05:c3:8e:6f:ea:9d:ba:75:70:4e:86:b6:75:ed:1a:2a:
         17:ec:d9:1a:3b:d6:5e:e4:15:1e:91:02:94:9a:8e:65:ae:b5:
         61:50:d3:a6:f7:74:4e:5d:6b:00:eb:4b:26:bb:52:03:cd:12:
         07:f7:2b:38:74:ec:fa:a4:9d:e7:a3:7d:95:bf:b0:28:8b:95:
         03:2f:d2:01:c9:44:2d:c5:2b:8b:84:df:52:bb:5d:18:8b:84:
         13:ae:ca:93:eb:6a:4f:db:0c:8e:aa:39:ec:40:37:ec:b2:e7:
         c6:be:ac:1d:fc:0c:17:79:86:57:33:ff:1a:ec:e7:ed:a5:10:
         c4:49:fe:b1:fb:ad:bb:dc:a4:f9:a2:40:f2:48:12:02:6d:03:
         e4:a3:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 18:21:55 2025 by rpki-client