Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
File:                     59231DCC2A6911F0BA904B1BC4F9AE02.roa (raw, json)
Hash identifier:          V8g0SvW9cp96xqDkqRwrM+zq/nxQ6eLrWp/2/U6b0B4=
Subject key identifier:   4B:A9:C0:2D:C8:1A:38:C6:D1:09:9F:17:AD:1F:6A:07:BC:ED:F5:30
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4B49
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
Signing time:             Thu 22 May 2025 02:57:46 +0000
ROA not before:           Thu 22 May 2025 02:57:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153447
IP address blocks:        103.180.134.0/23 maxlen: 24
                          116.118.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19273 (0x4b49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: May 22 02:57:46 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=682e92aa-4e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:4d:cd:d4:43:40:13:ad:de:cd:0a:31:95:
                    07:d5:78:54:3f:6d:57:a8:69:48:f2:36:06:66:ae:
                    47:12:6f:c7:19:a9:25:33:33:84:b2:30:7f:d4:66:
                    5b:42:1c:10:db:56:b5:c5:6e:36:6c:68:0d:79:57:
                    74:84:82:74:7b:29:6e:76:bb:57:a0:3a:6a:3e:8f:
                    9c:a3:2f:17:5c:c3:c1:80:c6:db:15:3d:e8:b2:42:
                    1c:c3:d1:e3:e4:4d:cd:56:95:30:28:c5:24:a2:12:
                    c4:61:62:ca:de:2c:f8:4c:88:f8:54:46:0e:e8:b9:
                    3a:13:b6:65:ed:1e:29:58:a7:6f:1d:2c:5a:35:23:
                    e0:72:67:17:92:13:f0:a2:b8:08:2d:1b:f5:d4:bc:
                    e7:1d:5e:45:53:01:79:8a:31:a5:6b:b2:2d:b6:7d:
                    ee:ac:71:a9:e6:1b:c2:82:b3:24:a3:d3:d8:d3:58:
                    8e:94:43:90:8d:e0:fe:1a:70:f4:5f:66:c8:b4:a8:
                    22:b5:1a:09:ef:b6:23:12:67:94:92:ca:53:1a:1d:
                    5a:71:c8:b4:e1:25:4b:1f:39:a4:29:38:c4:53:e1:
                    73:38:3e:3b:28:5d:e6:cf:96:cb:ca:16:01:a3:58:
                    b2:a4:72:6c:76:2a:24:3b:4c:57:67:11:fc:d8:8a:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A9:C0:2D:C8:1A:38:C6:D1:09:9F:17:AD:1F:6A:07:BC:ED:F5:30
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.134.0/23
                  116.118.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:2d:29:71:ce:55:5e:5e:14:1c:dd:66:24:a2:42:14:07:
         1a:b1:e1:7b:09:20:56:18:2f:5d:51:23:a3:3c:a5:9c:ac:24:
         1a:16:bd:73:dc:9f:9c:00:84:e2:e4:57:7c:9b:8f:45:9c:91:
         ae:b7:d1:da:ea:0f:60:55:3b:d9:46:91:97:3c:ab:41:91:a0:
         d3:a1:14:8e:8d:ec:03:60:2e:17:28:4d:8e:65:02:2f:4e:eb:
         1b:61:aa:ee:5d:87:9a:ba:cf:09:b7:42:50:7e:f9:22:d4:af:
         23:58:6b:7d:92:04:93:ef:9a:e4:e1:0d:fe:77:a0:22:1a:3d:
         cc:0c:fb:90:6f:19:8a:4a:15:9c:0b:96:b2:f5:2b:ef:60:44:
         42:f7:f9:a0:98:04:8d:3c:dd:dc:0d:3c:c1:b3:1e:85:05:f2:
         b1:b8:c4:29:62:18:98:3b:7b:ee:8f:d4:28:88:18:0f:ae:66:
         92:d2:0b:19:48:e0:88:5e:97:3d:4f:fe:67:f6:8c:95:e8:b0:
         9c:28:6c:8e:30:c4:92:d5:c5:3d:b2:49:eb:35:ad:6e:ed:bd:
         2d:a8:23:e5:57:bd:1e:3e:6e:e7:44:dd:be:65:e8:d6:a9:65:
         b4:00:6b:75:d7:66:1c:25:ee:48:95:a0:3d:a0:be:9c:58:e0:
         25:05:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:12:05 2025 by rpki-client