Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
File:                     ACC8D92C543611EEA8C54616C4F9AE02.roa (raw, json)
Hash identifier:          WqHJ1Lz2N+7+v9Pm82NDgzfnANH6wiFKItLUoX45N1g=
Subject key identifier:   91:F0:64:67:E9:26:2E:E6:98:DD:6C:D8:D3:B7:BB:85:E7:EB:C5:D5
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       02E1
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 03:08:56 +0000
ROA not before:           Fri 01 Aug 2025 03:08:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139016
IP address blocks:        103.187.22.0/23 maxlen: 23
                          103.187.22.0/24 maxlen: 24
                          103.187.23.0/24 maxlen: 24
                          2400:7920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 01:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Aug  1 03:08:56 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688c2fc7-4ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:9d:52:1c:03:d6:90:79:ae:61:6b:25:b1:
                    d9:8e:8e:ba:a4:18:8b:ae:46:23:94:be:c3:de:ac:
                    69:ed:65:38:ed:02:8c:af:59:81:7a:62:11:c4:0f:
                    41:60:37:31:be:ed:d1:30:0f:2b:5a:9a:b9:f3:07:
                    1f:86:ee:8e:f2:82:d6:0c:74:2f:88:48:62:82:35:
                    94:75:5e:1a:4d:70:38:41:59:f3:f8:2c:91:3f:7d:
                    f7:e6:cf:02:ce:64:a3:18:c1:e5:9d:37:5b:ed:e3:
                    f6:6b:10:c6:18:7e:39:98:dc:34:f8:43:e3:5a:ea:
                    50:b3:08:53:61:7d:47:a5:cb:4f:6d:6c:4c:c9:f2:
                    97:71:0c:77:bf:dd:13:65:4b:be:cb:79:51:30:0d:
                    5f:c3:22:2f:94:77:53:f3:7e:18:29:7a:39:bc:47:
                    35:0b:00:21:a2:71:c5:00:19:4b:ac:2f:0d:d7:85:
                    57:5f:cc:11:a1:39:df:8a:d9:20:5f:05:75:b9:e4:
                    bf:fe:19:22:e8:78:5c:e5:f2:a2:c6:78:1e:a2:0b:
                    c7:bf:44:5b:4d:39:4f:5f:b4:24:aa:c1:38:4b:0e:
                    f5:71:c9:7c:28:81:15:63:e4:f1:ff:2c:19:c1:94:
                    d8:43:eb:0d:70:86:1a:90:08:fc:32:91:0a:e8:e7:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:64:67:E9:26:2E:E6:98:DD:6C:D8:D3:B7:BB:85:E7:EB:C5:D5
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.22.0/23
                IPv6:
                  2400:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:2c:a3:ad:b5:f0:86:ba:70:f8:5c:7f:3a:28:09:b2:dc:89:
         ae:ba:e9:26:6c:8c:e0:b9:91:5a:cc:1e:12:54:9a:ae:de:1e:
         8f:7e:4d:00:b7:c4:81:93:aa:00:99:8d:1f:74:e7:69:16:9a:
         cf:b9:f6:53:bd:fb:b0:42:f3:53:c2:2a:5d:eb:4e:6c:ec:f3:
         08:8a:56:64:c6:de:01:7c:3c:6b:2d:53:7b:2c:a1:41:19:6f:
         b5:b4:56:2c:46:9b:a3:b4:bd:4d:74:fc:b8:4d:36:69:12:11:
         29:ea:15:62:01:cc:51:75:89:d4:87:65:6c:51:1d:09:49:04:
         f8:d8:b7:cd:96:0e:a8:70:0b:3c:ad:b0:d2:b0:8d:96:7b:ca:
         33:14:62:27:03:a6:c7:92:4b:85:66:ef:b3:d3:67:e0:16:3e:
         72:33:7f:88:a7:b9:72:5b:27:54:3e:fa:b3:e6:9c:c3:0a:14:
         13:13:c4:b8:b6:18:2c:83:62:91:fb:8b:93:37:4b:76:9c:a6:
         b3:53:44:8a:86:45:c8:ae:44:2d:8e:35:e8:87:e8:dc:90:84:
         01:47:bb:8c:d4:aa:cb:cb:29:d5:76:90:43:f8:cf:a6:b4:54:
         0d:34:0a:f0:6b:b2:41:a4:62:72:a0:48:38:0d:2d:47:58:f0:
         69:ed:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:57 2025 by rpki-client