Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
File:                     ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (raw, json)
Hash identifier:          QKvT/NXLjM1zgrExrepY0NIOpuLuOZvI/cmhC3FJr94=
Subject key identifier:   AF:D9:75:BC:2B:C4:E2:D1:50:5A:C9:F4:E4:FC:9C:0D:94:40:0A:69
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0C6A
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
Signing time:             Thu 24 Jul 2025 18:57:34 +0000
ROA not before:           Thu 24 Jul 2025 18:57:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58946
IP address blocks:        103.26.136.0/23 maxlen: 23
                          103.26.136.0/24 maxlen: 24
                          103.26.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3178 (0xc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Jul 24 18:57:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6882821d-4574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:d7:05:91:d7:f6:e5:d1:e4:e9:c4:db:c8:
                    ab:ab:ac:4d:29:a1:7b:1a:05:6a:9e:90:aa:30:0d:
                    0e:83:90:e9:66:1f:99:21:9c:98:bb:d9:42:55:e5:
                    19:fb:51:9a:1f:a3:20:1b:c4:89:9c:6e:e2:64:3c:
                    de:71:71:43:d0:5f:65:e7:4b:fe:0c:17:a1:81:dd:
                    c9:02:fe:20:5a:ee:a2:12:8a:fe:62:54:d5:09:70:
                    16:e0:a0:0c:c7:86:34:26:f0:bd:13:48:2a:ab:4a:
                    65:cd:ea:c2:cf:fb:ea:b1:ed:7c:f8:99:8a:6a:3d:
                    50:9f:d8:cc:e5:2e:c3:51:40:05:3d:6c:a1:98:55:
                    a8:4b:29:58:61:3e:34:2b:75:e3:48:9c:5c:b9:95:
                    da:60:72:33:9f:fd:a2:83:d2:6b:ed:3e:ac:4d:54:
                    b3:9f:90:3c:aa:70:a6:69:21:39:82:fd:55:65:e0:
                    36:e6:63:a1:54:d1:b0:37:a4:7d:11:4c:f3:a4:46:
                    8f:29:df:78:9e:eb:18:48:57:b9:f1:86:cd:83:91:
                    ac:2f:17:5e:43:12:53:88:9f:7a:fc:9f:0d:fe:7b:
                    32:6b:aa:78:db:bf:fd:a8:4a:76:39:ab:2c:2e:ce:
                    a3:ca:53:1b:5d:1f:5b:20:a5:c3:e4:88:e3:73:75:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:75:BC:2B:C4:E2:D1:50:5A:C9:F4:E4:FC:9C:0D:94:40:0A:69
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:53:31:f5:61:c2:50:85:f3:00:f1:76:f1:3f:7e:05:96:
         65:a2:8d:0f:d8:73:96:78:6e:64:c6:58:ea:06:7e:a6:12:95:
         a2:7c:49:fb:2a:fa:54:32:8b:1d:aa:dd:e6:78:c1:27:d6:3b:
         95:9e:bf:81:b1:ba:d0:e3:9f:1f:5b:32:2e:f6:9a:9d:5b:a5:
         f7:16:a7:9c:c3:8d:25:1a:0b:de:3e:fd:03:f5:b4:1c:d9:9c:
         3a:3e:07:c5:34:b9:18:70:a1:62:de:91:27:67:6f:4b:56:f4:
         9d:b1:88:7d:b7:f5:db:ce:bb:31:ff:a2:76:8c:78:4a:5c:1a:
         75:d8:89:6b:0d:7e:78:86:52:43:45:6d:40:1e:aa:77:e4:cc:
         5b:23:0e:b0:c0:b6:b4:ed:09:c0:2d:71:26:71:6e:f1:4a:ac:
         4f:85:0c:4a:05:de:c6:57:83:fc:a4:81:5a:8e:af:5c:d9:1f:
         3f:26:6c:75:cf:44:b4:0b:4b:71:12:0c:a3:af:6e:ea:b5:3c:
         5d:45:45:8f:bd:76:eb:59:f7:70:b3:79:f4:b4:7d:68:43:0e:
         ba:a9:29:64:b6:a1:e2:6b:ab:1e:c1:fa:e2:17:fd:f6:b4:f6:
         48:1d:24:75:e2:33:89:7b:a0:90:ec:f6:8f:51:b0:fe:4a:44:
         f5:a5:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:46:59 2025 by rpki-client