Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
File:                     59231DCC2A6911F0BA904B1BC4F9AE02.roa (raw, json)
Hash identifier:          VGXhbd/nTIeBA0RsQGIGC5YqQwoabT0+oQu4vlet+kk=
Subject key identifier:   A6:F6:9A:80:83:DD:E3:61:0D:B9:F4:8B:AE:FE:FE:6A:7E:2A:BF:73
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DDC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:27 +0000
ROA not before:           Thu 28 Aug 2025 14:56:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153447
IP address blocks:        103.180.134.0/23 maxlen: 24
                          116.118.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19932 (0x4ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e1b-b279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:b1:a7:77:b1:a3:5c:60:a4:50:00:d0:e5:
                    e5:07:d7:75:a8:9b:83:47:73:2f:bd:fb:ff:1a:c0:
                    37:64:ab:b5:2f:47:32:01:56:67:12:b6:dc:bc:eb:
                    09:5b:6b:d5:a4:1d:5a:87:7f:4a:e2:f7:b0:b4:ce:
                    4d:e2:98:83:40:57:96:8c:d4:fd:1f:95:93:db:5a:
                    88:91:cf:c8:23:ac:d7:8b:0a:50:85:ba:84:5c:31:
                    4b:59:d4:20:2f:3a:a8:36:5b:17:ba:7f:3a:6d:84:
                    3a:16:b9:56:9a:8f:06:f3:57:09:78:7f:89:1d:54:
                    0f:50:27:4f:6b:fd:a9:b1:86:85:0e:b5:87:60:54:
                    54:50:4c:f1:14:c2:14:6b:46:4f:a9:56:b0:db:33:
                    ed:8b:a2:02:19:34:16:43:2b:57:fe:47:bd:03:a5:
                    d1:cb:5f:9c:3f:67:fb:0c:a6:42:cc:b2:0b:36:14:
                    46:db:a4:ef:54:ee:be:4d:c6:48:9e:23:15:40:d6:
                    84:bd:fc:90:59:3b:78:1b:21:12:a4:13:16:6b:60:
                    b6:76:40:89:f3:67:53:63:ff:f1:5a:a0:b1:e1:09:
                    7d:6c:66:a8:26:72:2d:1c:e1:54:02:f4:97:61:a7:
                    52:bc:b2:75:30:83:36:0d:70:4b:c6:e2:f6:69:ca:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:9A:80:83:DD:E3:61:0D:B9:F4:8B:AE:FE:FE:6A:7E:2A:BF:73
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/59231DCC2A6911F0BA904B1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.134.0/23
                  116.118.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:f5:30:1c:14:55:c3:d5:50:c6:aa:b2:cf:f2:d4:c6:4a:
         05:79:cb:2b:fa:db:55:bd:22:32:f5:41:6e:7d:ac:cf:7c:43:
         a2:01:70:31:88:ee:ae:f8:08:e4:64:88:d8:3f:1a:04:93:14:
         0d:35:0b:c2:b6:8d:e9:07:f2:4c:a9:ed:7c:4d:4e:48:24:7d:
         03:ed:22:df:6d:73:e8:ac:cc:f7:0c:2f:03:cd:5a:e5:eb:0e:
         05:52:f2:2b:4a:b3:3d:52:cd:7d:84:eb:f4:6f:a5:8b:3a:d2:
         40:58:c3:c9:b0:9b:43:e3:81:03:ca:09:ad:80:2d:05:16:6b:
         b3:4d:71:f4:4e:5f:1f:5b:c2:2f:d2:c1:e2:e4:6f:69:2a:14:
         b6:27:27:3e:cf:b9:fd:43:bf:15:e2:5d:66:36:2c:1f:8d:4d:
         d8:e5:84:48:0e:6a:8c:d9:3a:e7:4d:cb:07:a4:0f:6e:b6:37:
         28:50:0c:a9:d3:7f:98:02:25:10:aa:8c:a0:97:58:8a:9d:f2:
         2b:13:28:ba:47:44:ea:75:d4:53:b9:e8:53:44:fc:ac:f5:63:
         54:6a:a2:28:98:b1:e4:59:9e:84:4c:ea:9e:f6:3e:25:42:92:
         58:45:9d:a8:2c:ae:70:e8:e7:be:a5:fc:5a:bc:98:c1:cd:9b:
         20:85:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:43:24 2025 by rpki-client