Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
File:                     183E52D8224711EB9EC51D58C4F9AE02.roa (raw, json)
Hash identifier:          ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=
Subject key identifier:   A1:27:73:FD:9C:E8:C3:99:A7:70:75:21:43:47:9E:F6:F8:5D:C9:94
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       362B
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 15:01:24 +0000
ROA not before:           Tue 02 Sep 2025 15:01:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     209181
IP address blocks:        103.230.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13867 (0x362b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b706c4-ab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:df:04:a6:2b:d3:d4:4d:99:b1:41:4e:71:
                    a9:6c:18:8f:24:6c:e4:db:a3:88:37:97:0c:7c:88:
                    a5:53:a3:04:2d:47:4d:04:f8:69:ff:58:f1:30:79:
                    2b:05:a0:9a:f6:2a:34:d5:15:c0:2d:63:63:1d:39:
                    78:9b:a5:f5:13:76:e8:32:2f:6e:f4:38:8c:07:2e:
                    13:79:6d:41:3e:68:ef:b2:2f:f9:ea:98:09:8f:08:
                    3f:75:56:1c:62:19:aa:ac:47:fb:9e:1c:ee:92:40:
                    d0:fe:7b:c9:8c:47:c0:3f:d5:36:34:db:df:db:76:
                    a5:c6:93:6b:6a:5f:a9:42:ed:67:9a:1e:d5:52:64:
                    91:c2:b4:3b:7d:b8:bd:e9:be:ac:78:5c:c5:6a:6d:
                    55:d7:cf:b6:ae:c9:84:68:83:f5:dc:fd:03:9e:a0:
                    9f:ec:4f:a5:61:bd:6c:2c:89:c8:b4:8c:1e:6f:d5:
                    79:b1:77:15:61:da:e5:7c:71:6f:00:1c:a2:db:b4:
                    10:41:24:52:1a:87:a5:b1:5a:33:45:ac:95:91:65:
                    86:fc:86:3f:44:ea:4f:f0:4e:31:73:a2:0f:38:2b:
                    e1:77:0b:df:29:f4:73:5f:cf:d9:8a:a5:eb:be:e5:
                    16:bc:de:28:fa:22:a9:8d:f5:5c:e8:19:83:fc:fc:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:73:FD:9C:E8:C3:99:A7:70:75:21:43:47:9E:F6:F8:5D:C9:94
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/183E52D8224711EB9EC51D58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:16:1d:d4:e8:10:31:fb:ea:6e:3c:98:9f:aa:37:61:4f:
         0c:78:37:b1:f9:26:a7:16:13:34:27:ca:94:3d:b6:31:5d:d5:
         fd:ba:73:36:33:eb:d1:e2:6e:df:1a:d8:c2:85:22:60:1d:a1:
         dd:32:09:b8:4e:ee:cf:ad:91:aa:e6:ac:8b:ec:f7:cb:f9:2f:
         79:5f:91:bf:63:77:6d:1c:8a:6b:47:de:c0:34:7b:be:f0:22:
         6e:01:1b:e5:b7:1c:c2:a0:d5:09:90:dd:41:b9:2c:b8:e0:33:
         2b:00:f8:bb:b8:f7:d3:88:9b:92:f9:ce:16:0c:c9:ab:55:ad:
         5a:d1:89:17:e5:79:0b:6a:5b:2f:87:5b:b8:17:e6:23:16:83:
         36:81:4b:d0:a2:e5:2e:ec:3f:e1:75:e6:a2:40:c9:5a:53:0b:
         2e:df:bb:df:9a:f2:ec:4a:1d:a4:dd:27:46:a6:c4:43:72:92:
         3f:c3:4b:a5:4e:cc:9b:2b:50:0b:d0:23:15:bf:d9:8c:30:3b:
         cc:e7:18:83:2c:92:9e:06:f2:8f:de:8a:2d:2d:a0:98:a6:94:
         78:32:a7:92:0d:9d:f7:87:2e:d2:98:c1:4e:66:99:55:60:d5:
         00:87:0c:6b:d9:1e:ff:be:74:6c:f3:16:2f:02:ef:41:90:eb:
         96:91:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:24:13 2025 by rpki-client