Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
File:                     8FE569EC776B11F0B156EB5AC4F9AE02.roa (raw, json)
Hash identifier:          05ONJ6gn6THBNIdjw9547Y3Ra4e7ZSd6nxQro/5YWpc=
Subject key identifier:   8B:BD:86:02:EE:82:99:8E:3D:F1:63:BA:A4:D0:B2:81:EC:C3:5E:78
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       05BC
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
Signing time:             Wed 13 Aug 2025 06:49:46 +0000
ROA not before:           Wed 13 Aug 2025 06:49:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.166.60.0/23 maxlen: 23
                          103.166.60.0/24 maxlen: 24
                          103.166.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 23:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: Aug 13 06:49:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=689c358a-0a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:01:54:8d:a6:08:92:0c:92:64:55:dc:2c:
                    b4:5f:4b:ae:59:29:95:eb:7d:86:e7:d9:a6:2e:a4:
                    33:aa:df:f2:c0:e5:b9:fe:3b:3e:80:42:11:8c:55:
                    83:83:f0:d5:5f:d2:00:48:b5:00:b3:4b:c9:a2:7a:
                    4d:d2:93:d6:27:af:2f:ab:af:92:41:75:94:8a:a1:
                    0a:26:dd:87:7f:31:68:d0:97:f3:c4:47:bd:4d:af:
                    ba:73:3c:80:2f:f6:00:01:e8:59:48:d1:74:cf:c1:
                    bb:a4:3f:3a:f1:e3:43:1d:93:10:9d:cc:a2:58:cc:
                    bf:31:ec:f1:5b:67:48:a3:b8:9f:e8:a6:6d:ef:c7:
                    a0:4c:87:80:07:16:48:44:77:5d:ea:8a:60:d2:11:
                    61:65:57:e7:82:5a:e1:77:a5:2a:af:3b:6d:36:1f:
                    b7:5e:16:f4:1c:72:32:80:31:ea:ea:ff:3d:45:95:
                    e0:c7:e9:1d:5d:82:ec:72:83:31:ff:23:05:2c:74:
                    59:f6:cb:ce:5e:81:52:22:75:0b:5a:fd:06:8e:ca:
                    3e:65:7c:ae:6c:4a:52:d4:4a:1a:ff:05:0b:e9:b9:
                    55:b1:4b:31:69:27:d0:a3:88:3d:ad:3d:80:74:1d:
                    0c:08:a9:8a:43:5d:fa:4f:64:e4:25:95:d7:38:59:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BD:86:02:EE:82:99:8E:3D:F1:63:BA:A4:D0:B2:81:EC:C3:5E:78
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/8FE569EC776B11F0B156EB5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:55:83:fe:a1:d2:f3:22:a9:03:4c:69:9e:37:bf:eb:81:83:
         57:ba:d0:d1:c8:9b:63:0e:10:51:c3:49:42:dc:f0:16:a1:e8:
         fe:7f:38:5b:fe:8e:b9:8a:92:5f:95:c9:ee:cd:e7:73:64:6e:
         af:d6:a2:24:80:a2:ff:73:54:95:cc:da:77:a1:f5:03:c2:e2:
         05:a3:eb:8a:d4:dd:b2:0c:56:c5:e5:9b:11:1d:1a:b6:42:5b:
         69:71:39:88:0d:17:00:db:57:fd:01:d3:fd:ec:af:38:d3:08:
         d2:36:e6:f4:dd:e7:af:61:a2:cb:f4:9b:7d:41:58:2f:e0:bd:
         e7:d4:b8:e5:34:71:e9:88:88:63:13:28:84:30:15:e4:32:04:
         89:a5:eb:db:d1:38:6e:4e:24:00:57:8c:be:12:0a:2a:82:85:
         2b:87:5a:bf:1a:b7:f3:b7:39:a4:f1:9a:a9:ef:d0:69:8c:50:
         fb:16:4d:81:64:76:2f:72:0b:2c:1f:64:71:11:0e:cc:60:1a:
         24:4a:a7:02:1d:6b:96:4b:6d:14:de:65:1c:87:ea:f9:b9:c6:
         76:5b:22:fd:39:66:c3:f5:06:d6:a1:1a:eb:73:08:02:07:ce:
         b6:49:2f:1f:80:61:93:b1:9a:d1:a6:08:53:27:4c:10:5d:bb:
         c6:c1:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 19:01:29 2025 by rpki-client