Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa
File:                     93C0837AA52911EC9D2DAE83C4F9AE02.roa (raw, json)
Hash identifier:          +n1EkVjGqmRIN2F0mYDcDpolX9s17cHIyXg+OPTXZ6I=
Subject key identifier:   3C:15:E7:21:97:C1:D4:A1:BE:D3:BC:B0:FD:D8:EC:D5:6E:15:61:5E
Certificate issuer:       /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial:       30E2
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 15:32:26 +0000
ROA not before:           Sat 30 Aug 2025 15:32:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        103.43.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 15:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12514 (0x30e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
        Validity
            Not Before: Aug 30 15:32:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b3198a-1566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:44:cf:cc:f5:d4:71:89:75:4c:81:0a:8a:
                    bd:63:e0:1e:c4:9f:90:65:66:dd:5a:b8:a7:24:1f:
                    f7:1b:ff:cd:75:c3:a6:29:74:53:81:19:8b:71:7a:
                    5b:71:01:ca:e3:4d:90:9a:a5:e6:28:c2:ab:9d:05:
                    69:13:ae:9c:f5:78:c4:fe:31:c1:2b:4c:be:c0:26:
                    00:bf:70:23:78:d8:9b:a1:73:07:db:4a:d2:68:b9:
                    03:f8:9f:92:46:90:36:72:cb:b3:7b:31:3c:af:5b:
                    a6:16:1f:1f:c4:9f:58:b1:69:19:02:97:f4:13:2a:
                    b7:fe:3e:c1:3d:66:12:62:f4:e2:ef:ef:03:75:6f:
                    b8:31:79:fe:5e:54:4e:09:21:12:cb:c0:9c:1f:9b:
                    df:1e:25:8a:b9:5c:9e:92:45:e9:80:dd:82:9c:51:
                    f7:1b:d3:4b:20:15:1f:e1:59:2a:c4:07:d7:95:a2:
                    e2:29:2a:55:b0:f2:12:72:06:99:6a:3d:36:f0:07:
                    43:c3:37:66:d1:c0:8a:c8:b9:69:c8:b1:bf:0a:69:
                    94:c4:bc:6e:13:ec:6a:6c:eb:f4:c0:44:a8:f3:13:
                    3e:66:4a:9e:07:c0:ed:51:e6:68:3f:5b:16:21:bb:
                    bb:7b:89:55:a4:2e:99:de:34:61:ed:92:10:a5:b9:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:15:E7:21:97:C1:D4:A1:BE:D3:BC:B0:FD:D8:EC:D5:6E:15:61:5E
            X509v3 Authority Key Identifier:
                keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:37:83:7d:90:a4:7e:1f:bc:fc:67:c9:11:cf:74:48:90:1b:
         6b:c3:da:e3:6b:d3:e0:71:8d:5b:20:45:d3:84:3d:49:1b:56:
         25:5f:2c:8c:40:ec:cd:53:42:9e:b7:7d:4d:09:9a:ca:67:08:
         c6:69:b6:bb:b3:e1:7e:27:5c:89:be:7a:b5:a1:3e:62:4e:49:
         6b:d7:72:fa:8c:f6:cc:7c:ce:7b:0d:84:ea:74:0c:44:af:4b:
         7c:8f:af:72:25:4c:f5:11:fd:63:d1:f2:81:a3:15:fd:ba:d6:
         5d:63:f5:90:d6:df:8b:37:8c:ba:48:5a:52:07:88:c8:02:e4:
         7b:f3:b9:7c:76:00:8e:0e:21:1a:0f:c7:ee:c0:d0:13:0e:9a:
         9c:7a:13:b2:2d:d8:e5:91:7b:39:bb:b2:b6:52:f5:c6:02:29:
         ad:bc:96:ab:a9:49:cc:89:3e:2e:24:9a:84:a9:81:ce:b2:f3:
         d1:dd:e2:ce:a4:bb:74:fe:13:8d:2a:95:2b:96:9a:fc:0a:e4:
         20:59:27:c3:a3:5e:10:17:1d:68:90:a6:6d:62:c0:9c:5f:18:
         35:a2:2b:c7:f5:bd:40:59:ac:9c:c1:8b:28:48:12:ff:45:8b:
         e5:bd:61:62:66:ea:9f:b6:a8:f4:be:58:54:42:78:58:52:3a:
         c4:c8:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:45:15 2025 by rpki-client