Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
File:                     B2D0D768766011F08F4AF05AC4F9AE02.roa (raw, json)
Hash identifier:          jw3dgD5r99gdiqJPpFrsCsOclRW/9zVLzwyZyaUhXJg=
Subject key identifier:   83:B2:A0:CC:17:BC:F6:B5:73:15:BE:C6:97:78:21:92:8E:5C:74:CB
Certificate issuer:       /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial:       9D
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
Signing time:             Mon 11 Aug 2025 03:10:14 +0000
ROA not before:           Mon 11 Aug 2025 03:10:14 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153952
IP address blocks:        103.75.236.0/24 maxlen: 24
                          2001:df1:c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
                          rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 06:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
        Validity
            Not Before: Aug 11 03:10:14 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68995f16-8bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:48:f5:9e:04:6e:94:63:9f:e9:b9:d2:d5:
                    89:e7:69:ef:e1:31:37:66:94:4f:e2:da:95:74:a6:
                    e3:9f:25:ec:bd:60:bb:31:a9:26:4f:92:e3:49:b8:
                    40:53:fe:5c:6d:03:da:80:5c:20:fe:7a:9b:16:60:
                    24:32:5f:c7:94:3e:9d:82:88:1b:37:07:bd:53:16:
                    24:3c:ca:02:0f:ae:18:9a:f3:0b:79:1a:04:75:8e:
                    96:de:69:8d:7d:e0:af:ad:16:09:57:35:11:23:8f:
                    ba:68:e9:4f:3f:22:3c:9d:18:e1:13:68:ba:74:04:
                    fb:2b:cb:e6:3f:22:fc:88:68:d2:6a:ba:c7:97:b6:
                    30:e7:db:21:9b:53:ef:b2:bd:ee:26:f2:f2:f1:15:
                    bd:58:fb:a2:d8:a8:d7:47:ba:e5:d3:99:4b:a0:53:
                    37:5e:f2:67:b4:9c:b1:93:1f:a4:e7:74:2d:4c:51:
                    bd:0a:5c:ca:59:aa:fc:ad:1a:05:92:74:b2:0e:4e:
                    ae:39:2c:a0:55:6f:52:e9:3f:3a:a6:d2:e5:9e:b6:
                    79:87:17:ff:2a:16:d5:0e:04:fc:24:7d:a8:a3:a2:
                    98:5f:3e:52:9f:a2:b8:80:1a:f0:1e:02:80:0b:07:
                    0d:00:d0:0d:88:84:07:5f:21:f6:28:b9:a4:e6:4b:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B2:A0:CC:17:BC:F6:B5:73:15:BE:C6:97:78:21:92:8E:5C:74:CB
            X509v3 Authority Key Identifier:
                keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.236.0/24
                IPv6:
                  2001:df1:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:48:26:bc:fc:67:64:a6:4b:6f:b7:f1:28:dc:14:fd:16:
         01:0b:b9:83:d1:d6:11:18:ea:6f:6c:a6:19:c2:e9:d0:59:17:
         7d:58:c6:51:7e:4c:49:ee:8a:dc:3b:36:a5:90:18:21:aa:ae:
         da:44:c9:8a:26:6a:d2:45:26:b3:11:fc:1d:cf:a9:8b:b8:23:
         49:48:d3:7e:3e:4e:0c:52:ea:ff:18:fb:1d:91:95:49:a2:f7:
         7b:c7:f7:38:69:7b:b8:a5:e0:cb:07:72:67:87:a0:c7:cb:f6:
         ea:20:7e:bb:82:47:ae:5e:b2:eb:4e:4f:62:b3:25:0e:67:39:
         09:c3:0c:5a:3f:d9:3a:92:32:ec:3f:7e:cd:8b:c7:bb:8b:d7:
         64:cd:7c:ab:39:ed:14:32:13:4a:69:a2:34:e6:7b:d5:81:4a:
         71:46:10:47:00:00:83:87:be:f9:3c:4b:2a:26:49:b1:4f:0d:
         5d:61:c4:d9:05:c7:9c:c8:56:5e:79:24:db:4b:89:37:b6:f6:
         5c:6b:34:c8:9b:0b:e7:0d:21:a1:1f:8b:68:58:45:66:e6:92:
         ee:6d:b1:67:6d:c5:31:ca:73:c3:f6:92:9b:95:2f:a5:10:9d:
         0c:ba:ce:73:5b:b7:c8:97:1d:23:94:d2:d0:20:57:6e:eb:83:
         f1:e9:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:37:16 2025 by rpki-client