Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
File:                     7982D8DAA12A11ECBB6E0681C4F9AE02.roa (raw, json)
Hash identifier:          jeCNmEfIGMHYR8Cczhahi21hZLCLN+kqVS4CnbUJm6g=
Subject key identifier:   42:AB:B4:6B:92:F7:72:CC:D2:CA:F7:70:D3:E9:13:8E:B0:64:8A:0E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4E44
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:57:58 +0000
ROA not before:           Thu 28 Aug 2025 14:57:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63744
IP address blocks:        103.216.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20036 (0x4e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e76-56b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:66:66:1e:cf:85:09:dc:d4:7c:d5:04:30:
                    ac:c5:5f:35:49:14:2d:63:d8:77:fa:d4:35:b4:61:
                    a7:81:bc:a9:e3:6e:eb:cd:26:f9:85:f5:ad:4b:f7:
                    7b:47:e1:54:be:f6:2e:b6:76:f4:e8:39:b3:3c:33:
                    11:18:d5:24:ce:1e:e8:62:ca:ec:cb:9f:87:21:1e:
                    9c:fb:56:e7:31:9d:ea:33:4e:ee:ac:7e:68:bc:03:
                    db:57:47:6c:31:56:d3:82:11:06:19:e2:34:5e:43:
                    a9:bc:39:c2:4c:7b:65:8c:9f:83:33:f1:d6:7e:07:
                    a6:0a:f3:b6:e6:49:f6:e3:00:52:ac:61:f9:96:2a:
                    9e:92:14:85:35:d2:a9:0a:bd:ee:49:28:b6:03:3a:
                    5c:df:93:e6:f3:00:37:a1:82:b7:a5:28:c4:94:91:
                    e0:6c:30:cd:20:52:c0:6c:df:4a:50:89:19:b7:c7:
                    cd:36:a9:c1:d3:92:33:66:4b:44:f9:1b:11:8b:f4:
                    90:63:d9:b5:e6:c5:d4:2f:0b:be:73:37:e6:8f:41:
                    d8:e0:e9:8f:b7:ed:29:06:53:60:31:04:4d:af:6c:
                    ef:84:85:f4:2a:13:48:4d:85:c0:9f:29:b9:51:a4:
                    bb:6b:97:51:71:83:ff:42:bc:20:9b:bf:17:50:9b:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AB:B4:6B:92:F7:72:CC:D2:CA:F7:70:D3:E9:13:8E:B0:64:8A:0E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:00:9b:c4:8c:da:27:f3:1a:14:3d:72:01:da:d8:99:12:24:
         5c:ba:91:1a:6e:17:c3:a0:eb:d1:06:1e:fe:89:a2:27:94:57:
         da:24:c1:93:3b:d4:7e:df:7c:a0:f3:96:40:71:01:42:00:33:
         94:5b:f2:14:31:ba:42:9e:10:f4:eb:96:9a:71:25:0c:5b:84:
         68:a7:b2:5b:bb:03:5f:fe:da:c2:18:f0:bc:0b:9c:bf:c2:e6:
         69:44:31:df:66:c7:f2:78:1c:a6:5b:9f:3b:3c:18:86:4b:bb:
         45:c6:5c:10:cf:98:ff:52:e0:bb:8b:4e:62:7a:a5:c4:ed:12:
         1f:9b:4e:60:01:e5:b9:d9:0c:b2:18:00:d6:49:b0:e9:9d:56:
         1a:23:e6:e2:29:1f:91:9a:1a:22:79:8e:ff:e4:43:44:bd:a3:
         58:f7:f6:27:b1:3d:ee:b2:11:d0:f7:43:5a:8b:98:92:79:16:
         8a:31:f8:25:09:f4:9b:d7:b6:65:e7:0f:06:7f:4d:1f:04:5c:
         49:27:37:f5:4a:c4:3d:ac:69:92:ac:f4:60:c3:ae:29:c3:ea:
         a0:b5:84:f3:8f:30:7c:18:e1:ea:df:23:11:d1:a6:c2:f2:63:
         15:aa:01:20:24:79:92:e2:27:c7:d7:64:7e:5a:f9:24:00:11:
         62:99:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:42:16 2025 by rpki-client