Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
File:                     A14437C0FAD311EDBF5E232DC4F9AE02.roa (raw, json)
Hash identifier:          Bez05FWUIMUnrH7SzLlKjPaSBngAUJwCdctudMIfHok=
Subject key identifier:   E0:AB:75:AB:EB:12:72:09:81:13:EF:8C:FC:FF:1E:3D:3D:9D:D3:25
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4BCE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
Signing time:             Sun 20 Jul 2025 09:51:55 +0000
ROA not before:           Sun 20 Jul 2025 09:51:55 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135944
IP address blocks:        103.159.54.0/24 maxlen: 24
                          103.159.55.0/24 maxlen: 24
                          103.165.144.0/23 maxlen: 23
                          103.165.144.0/24 maxlen: 24
                          103.165.145.0/24 maxlen: 24
                          103.199.8.0/22 maxlen: 22
                          103.199.8.0/23 maxlen: 23
                          103.199.8.0/24 maxlen: 24
                          103.199.9.0/24 maxlen: 24
                          103.199.11.0/24 maxlen: 24
                          103.216.124.0/22 maxlen: 24
                          116.118.64.0/22 maxlen: 24
                          116.118.88.0/22 maxlen: 24
                          116.118.92.0/22 maxlen: 24
                          157.119.248.0/22 maxlen: 22
                          180.93.172.0/22 maxlen: 24
                          180.93.176.0/22 maxlen: 24
                          180.93.180.0/22 maxlen: 24
                          2001:df7:cc00::/48 maxlen: 48
                          2404:ef80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19406 (0x4bce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jul 20 09:51:55 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=687cbc3b-3ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:ec:51:5f:38:84:39:c8:92:24:e3:38:5a:
                    23:12:ef:7e:dc:b6:94:74:0e:ab:a9:81:85:39:0f:
                    45:89:51:a7:03:86:ec:45:b1:71:90:29:02:da:5a:
                    af:2b:e5:44:65:a2:9b:87:e5:a1:28:0c:dc:66:ba:
                    6a:0e:25:61:f0:11:77:bc:83:e3:6a:3a:37:36:8a:
                    8d:d1:d6:3f:ec:a9:3f:fa:44:2b:4b:2c:e6:8f:9f:
                    9b:0f:34:f5:39:f3:1c:34:a3:da:38:84:2f:7b:6a:
                    ea:e0:3d:a5:58:56:8d:3c:27:59:e4:db:60:3d:c7:
                    e2:a3:2d:f1:04:4c:28:7d:95:22:1c:6f:7d:c4:fa:
                    e5:2d:a7:dd:08:09:ee:83:7d:10:35:fb:28:30:00:
                    2e:0a:08:5a:6d:e0:e6:c2:ed:7c:76:44:0a:a4:80:
                    8e:f3:27:23:05:1b:e8:78:61:25:97:e9:2b:dd:20:
                    b7:b8:16:2f:cf:7e:3c:1f:2b:17:46:a5:95:be:f9:
                    be:5e:bd:a6:8e:c0:82:be:f9:bf:42:e0:b3:e0:55:
                    23:b9:f2:d7:2a:f0:ac:e5:72:49:71:cf:d0:75:ff:
                    48:89:6d:ff:cb:a1:14:0c:7e:f3:c8:a4:21:35:df:
                    ab:80:2b:77:ca:a0:67:09:19:4b:2f:ef:3f:db:6c:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AB:75:AB:EB:12:72:09:81:13:EF:8C:FC:FF:1E:3D:3D:9D:D3:25
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.54.0/23
                  103.165.144.0/23
                  103.199.8.0/22
                  103.216.124.0/22
                  116.118.64.0/22
                  116.118.88.0/21
                  157.119.248.0/22
                  180.93.172.0-180.93.183.255
                IPv6:
                  2001:df7:cc00::/48
                  2404:ef80::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:70:8c:ce:d1:98:e9:88:d7:30:aa:bc:36:19:f8:6b:a7:94:
         da:37:b6:d6:de:9d:8f:18:81:db:43:bd:d6:08:cb:fd:91:ed:
         30:71:ea:cd:28:4d:8a:3d:de:d0:60:a9:32:a8:96:a7:ad:1f:
         35:13:05:d0:03:7c:e8:bc:34:37:8e:28:fa:08:42:5a:c5:7c:
         3c:a7:4e:13:da:2c:ed:9d:09:c9:f8:ca:65:91:73:8d:a5:5b:
         83:5a:b2:90:51:1a:04:0c:74:75:3d:ba:e9:b8:5a:2c:98:94:
         93:dc:6d:fe:79:ec:55:b3:fa:63:d9:b2:6d:5e:21:4a:ed:25:
         5e:cc:75:80:e7:de:58:7e:48:db:8c:1a:09:b0:4f:29:49:e4:
         35:46:b2:16:44:60:4c:e6:a0:f2:0f:d9:9b:13:ea:7e:67:55:
         dd:02:a4:fa:f8:b0:55:c0:95:f3:10:db:1d:02:78:41:87:1b:
         74:52:70:ec:18:5f:e0:a4:89:33:ba:1e:40:9f:93:88:26:fb:
         5d:18:3e:19:3c:ba:ed:30:b6:5d:62:67:2e:6b:72:82:6f:47:
         57:ba:8f:2c:c1:93:d8:3e:e7:6e:e7:21:43:6e:1a:c8:1f:8a:
         51:1d:2c:fb:70:16:59:55:58:12:a5:19:4e:53:f0:df:5b:a3:
         de:5d:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:27:40 2025 by rpki-client