Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
File:                     132D82FC6F5311EFA28F470DC4F9AE02.roa (raw, json)
Hash identifier:          6ua60ZFv4yMON+VXB98oAIdiNofvpqoRR7M7oXyYVBQ=
Subject key identifier:   17:D4:75:35:3F:E8:DF:B1:40:18:7A:EF:61:66:DE:8C:89:96:17:2E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D0B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:35 +0000
ROA not before:           Thu 28 Aug 2025 14:53:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135959
IP address blocks:        103.126.160.0/22 maxlen: 24
                          2001:df7:7e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19723 (0x4d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d6f-b69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1f:65:b7:dc:df:ff:6d:53:34:ba:ad:76:38:
                    59:f7:5d:ba:8d:ce:2f:1a:7e:10:3c:1e:f1:89:ff:
                    f1:fe:cf:46:01:3c:04:ee:e0:2c:72:23:31:55:3f:
                    28:9a:e0:1b:5c:e9:3b:ae:9d:a3:1a:ba:1c:65:90:
                    03:cb:a9:5c:b7:bf:78:39:c4:15:d7:13:e5:ef:e1:
                    66:af:d9:2d:ed:03:bd:2f:a2:9a:fb:24:50:b9:ac:
                    8e:04:66:48:c4:08:1a:70:c5:46:61:c5:e5:04:ac:
                    8a:47:98:55:2f:5a:f0:be:11:a0:4d:52:d4:02:dc:
                    b8:eb:cc:38:ad:af:05:b1:23:01:83:71:30:ef:4b:
                    ad:e3:f1:b6:85:f6:76:91:03:b8:2c:60:41:d5:cb:
                    e2:74:ea:fd:60:75:6e:e8:12:e4:10:1f:9c:7d:8b:
                    ca:6f:17:a2:98:6f:e9:50:f6:39:60:90:5f:c4:3d:
                    df:96:75:33:5e:cf:cb:e0:47:8c:06:e2:45:0d:3e:
                    3e:fb:3b:1c:d6:07:d5:f1:38:fd:4b:4e:d6:97:a4:
                    c3:f8:92:b3:e3:39:54:fd:43:65:93:f1:b5:08:c3:
                    2a:ae:38:28:9b:b7:56:2f:06:50:1f:2c:ab:0d:75:
                    ff:b6:cb:bf:da:5d:95:f1:83:e4:e7:e2:ae:d1:eb:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:75:35:3F:E8:DF:B1:40:18:7A:EF:61:66:DE:8C:89:96:17:2E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.160.0/22
                IPv6:
                  2001:df7:7e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:81:ce:20:40:f6:8b:e9:de:6a:3b:93:31:64:34:b0:06:af:
         71:53:88:3a:6e:05:86:88:64:43:e3:88:76:49:bb:30:26:b3:
         86:f2:2c:1c:cd:fc:a6:7d:ba:5a:fe:4f:c0:6c:b0:b5:4e:b4:
         48:e6:c5:b9:b0:5a:65:58:fb:8e:5f:8c:5a:45:de:9b:80:c3:
         5b:9d:90:5a:07:47:6c:fb:8b:f8:d7:f1:b7:52:66:7a:27:e8:
         71:17:9c:b1:5e:5b:95:1a:04:d9:20:67:b9:e2:b9:d7:ca:5f:
         e5:f7:30:46:e7:0f:b7:fc:bc:20:80:e5:6e:b0:7f:65:8e:7b:
         5d:5f:fa:8c:62:ca:a8:a0:96:b5:3f:27:63:e2:b6:f4:e1:ee:
         a6:f4:b0:77:60:36:e9:ce:d9:32:d6:0c:d1:8e:94:8b:8a:b5:
         52:d6:f7:a4:38:76:56:65:25:54:42:88:c4:3a:91:40:bc:ce:
         53:5d:d9:51:98:d1:2d:8e:db:01:b8:a8:17:e1:37:7c:d4:ad:
         0c:5f:ec:fd:c1:75:36:8f:3c:7e:e2:c3:77:a1:11:44:74:ef:
         a6:13:c1:28:50:6e:91:90:bb:87:cf:59:e2:77:c2:e2:cc:5d:
         9c:77:e8:d0:79:1f:d8:c4:09:03:9d:a2:ae:f8:e8:e0:88:5d:
         90:2e:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:38:33 2025 by rpki-client