Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
File:                     39087D74951411EF97138B40C4F9AE02.roa (raw, json)
Hash identifier:          +mFwSm/mGnxoW6TwI9NR3Iiou1BeZbZDzNTfpJJ41hE=
Subject key identifier:   94:85:B9:18:25:07:01:3F:10:BD:DE:AC:84:A0:61:93:A9:CE:CA:DE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D20
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:52 +0000
ROA not before:           Thu 28 Aug 2025 14:53:52 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140742
IP address blocks:        103.152.162.0/23 maxlen: 24
                          2400:f3a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19744 (0x4d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:52 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d7f-00d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:0a:6f:0a:c2:95:10:d1:da:4c:63:18:35:
                    16:ff:9a:b3:39:19:ee:34:55:f1:7f:c6:ca:f6:b6:
                    d4:37:58:32:af:be:33:8c:b2:96:22:3d:55:15:ba:
                    3c:7a:5a:62:5a:54:7a:04:33:fd:9d:56:0a:fe:ad:
                    78:da:29:24:36:d5:e5:47:8e:27:b8:59:1c:c0:52:
                    97:36:9e:d4:80:bf:e3:cc:a8:19:b1:c0:c5:dd:98:
                    ef:16:ba:b1:37:dc:42:16:74:fc:05:a8:f7:a9:e5:
                    06:6a:92:05:3b:47:bc:39:b7:ea:27:fe:04:60:b2:
                    c2:db:d8:e7:2a:4f:00:9d:a1:6b:39:30:a4:98:d3:
                    cc:89:04:3d:b5:64:53:21:08:00:b9:1a:a2:31:f9:
                    51:3f:eb:9e:6b:c3:17:8b:5b:4f:4c:ee:a7:61:6c:
                    02:87:d9:a1:31:a8:b2:78:af:71:d4:8e:24:c9:a2:
                    cf:45:fa:7b:f8:1a:b5:e3:41:6e:22:42:5c:f2:c0:
                    90:e1:1c:54:d0:57:24:7f:15:c7:92:b1:ae:16:82:
                    67:05:7f:b9:39:d3:53:eb:0b:07:47:59:0c:f6:f9:
                    87:4f:37:c7:9a:2c:e4:3a:71:91:a9:45:63:3b:38:
                    76:3c:5d:61:80:15:63:ed:0b:d5:c9:99:f6:d9:4a:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:85:B9:18:25:07:01:3F:10:BD:DE:AC:84:A0:61:93:A9:CE:CA:DE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.162.0/23
                IPv6:
                  2400:f3a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:13:93:ad:2a:82:ef:37:20:1b:3b:a8:6e:98:7e:48:2e:
         19:0a:aa:fe:b6:b1:0a:76:e4:35:d6:c7:0f:43:0f:33:09:66:
         80:46:6d:92:2c:2b:bf:f4:28:36:a2:74:79:dc:cf:30:ef:86:
         4a:b8:8d:ea:12:d9:c2:49:80:fb:96:b3:90:a9:87:93:9a:30:
         ad:78:38:8c:ab:b4:65:7c:3f:36:de:67:f4:42:ea:75:8a:2e:
         ce:06:4e:25:71:cf:19:e3:78:9e:6a:d6:24:e8:e3:01:c3:17:
         90:62:e2:03:b7:de:c8:16:c1:61:a8:16:57:01:16:77:dc:90:
         fc:aa:f1:c4:18:85:e2:72:b4:6c:d9:2d:da:13:20:f2:81:47:
         c3:c6:98:22:19:a4:82:1b:a6:6c:b9:33:fc:08:22:2d:c3:e4:
         3a:01:2b:04:74:7c:8a:38:57:1f:3b:fc:bd:f4:99:12:1f:79:
         22:1e:8a:5b:d9:c9:29:a7:9c:ab:cc:73:6a:c2:f7:9a:c4:f7:
         01:73:b9:10:f6:3f:2d:ea:51:28:92:75:14:b4:88:f0:62:43:
         b6:42:4b:b4:32:0c:1f:fa:a3:d3:44:c4:7f:37:d2:ee:e6:4f:
         99:a1:0d:78:bd:49:2b:af:2b:12:3a:cc:b4:5d:fe:a6:e1:21:
         e1:f6:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:42:16 2025 by rpki-client