Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
File:                     C01674A86BF011EA87B33D25C4F9AE02.roa (raw, json)
Hash identifier:          c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=
Subject key identifier:   58:8E:BA:13:CB:9C:6C:5C:8D:60:D3:11:45:BA:13:47:A6:F1:0E:ED
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       0A52
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
Signing time:             Fri 18 Jul 2025 20:00:53 +0000
ROA not before:           Fri 18 Jul 2025 20:00:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135590
IP address blocks:        103.95.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642 (0xa52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Jul 18 20:00:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687aa7f5-4e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:50:45:ea:57:c3:13:0e:61:4c:48:a3:46:
                    97:c3:c8:0c:53:48:17:d7:56:e8:68:9c:a9:1b:d7:
                    4a:31:60:f8:1e:bc:b0:61:93:ae:d9:25:50:1c:44:
                    9e:35:b0:0b:4c:e2:8d:ab:df:39:d9:67:47:0b:51:
                    98:cd:fa:ac:bf:5a:1d:0a:3f:84:d8:c0:fd:b7:20:
                    b2:3b:ce:1d:51:82:8a:9a:43:13:af:b1:11:e1:2e:
                    b0:27:7b:55:ee:f4:07:8b:38:d2:22:e2:60:f4:87:
                    7b:06:5b:8a:5a:b7:3f:e4:8d:1d:45:7f:a0:84:77:
                    a4:17:be:55:fd:f3:ed:af:86:10:86:4a:c5:5c:8d:
                    d4:60:a2:1e:fd:4c:cb:fa:35:ba:1a:a1:da:2a:da:
                    fe:84:84:14:08:f8:e6:a8:05:5b:83:43:a7:a8:de:
                    02:48:84:1d:90:39:62:de:b1:db:5a:b0:6a:a4:0a:
                    cb:20:0f:a7:8e:83:e4:0f:c0:84:2f:7f:39:ba:c5:
                    4b:3c:36:4a:bc:b1:59:b4:86:d3:f5:e2:7d:e3:f4:
                    52:11:be:86:a3:f3:48:4c:a4:45:ae:bb:98:ad:5a:
                    02:68:09:89:b4:22:60:7f:03:41:32:33:5b:e4:d9:
                    22:7d:ae:4b:f1:f7:68:06:6a:68:83:d5:8c:60:0e:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8E:BA:13:CB:9C:6C:5C:8D:60:D3:11:45:BA:13:47:A6:F1:0E:ED
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:17:b5:32:a4:7c:85:90:42:fc:b6:c2:ab:87:42:a9:89:1b:
         4b:0a:d6:21:3e:87:3b:bd:b2:2e:5d:d4:44:8b:18:83:5e:f4:
         d0:0d:18:58:88:3d:9b:9c:2f:3e:bb:ae:1a:c4:5c:8c:fe:f3:
         83:5c:f3:0e:3a:da:e5:23:2f:2a:03:47:db:f0:6c:05:3d:58:
         7e:ad:3e:27:70:14:e7:ba:d4:f3:21:6b:df:00:69:5c:43:86:
         a2:90:02:f8:ce:98:6b:20:6b:e0:03:55:73:1f:32:2f:94:42:
         0b:e0:09:a3:b8:de:a3:85:a9:d1:88:6d:a1:5d:fe:ce:6e:e3:
         fb:cb:25:b0:3c:e5:86:2c:a7:9f:e2:8f:e0:22:78:4d:6e:e0:
         d0:d7:d3:de:3a:97:b2:5b:a8:60:49:08:59:3a:91:7d:8c:b6:
         a9:f2:44:66:f1:d0:94:eb:89:b9:e5:c0:49:9e:e3:f8:50:99:
         6e:ca:45:aa:dd:6d:c1:f5:5f:86:06:dd:7f:1f:e6:48:44:e4:
         89:13:24:84:e0:72:f6:19:60:9c:4e:03:68:54:05:98:8a:45:
         2a:5b:0c:37:ae:d4:6d:24:57:3b:50:85:75:9b:e4:0b:28:18:
         68:ca:fd:08:52:a5:22:d1:af:8a:a3:c4:3e:db:1f:95:2b:98:
         5e:7a:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:29 2025 by rpki-client