Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
File:                     8977329C6BFA11F0A5B94819C4F9AE02.roa (raw, json)
Hash identifier:          sWepAg9vOOQr0bNjmy6UlY09ZaZXwokEECnmuTF3nsc=
Subject key identifier:   D2:82:38:29:BD:2F:15:73:ED:C3:AF:9F:F0:B9:5C:3F:DE:EE:C5:8A
Certificate issuer:       /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial:       07C7
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
Signing time:             Mon 28 Jul 2025 21:33:44 +0000
ROA not before:           Mon 28 Jul 2025 21:33:44 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        103.58.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
                          rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
        Validity
            Not Before: Jul 28 21:33:44 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6887ecb8-d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:9b:7c:19:03:e3:78:12:8e:cc:53:93:65:
                    cd:69:39:2f:69:68:59:7f:d7:9d:47:01:eb:8f:79:
                    47:2c:b8:3c:15:27:a0:dd:44:03:06:52:4b:ae:29:
                    14:22:81:5d:1d:be:6b:e7:62:fa:53:13:cf:c5:b6:
                    f8:c8:e8:c3:05:0c:5a:54:e0:d3:38:89:33:28:e2:
                    2a:91:5a:c4:64:53:20:c5:e0:af:99:77:c3:27:a6:
                    97:70:59:57:7d:5b:43:cd:44:5d:bd:e5:6d:99:b0:
                    fa:7b:0f:4b:4e:12:5b:70:95:4b:68:33:6b:e3:be:
                    75:f1:b8:06:4f:b7:63:fc:d3:c3:8a:14:74:60:09:
                    22:89:e8:8c:d0:5e:f3:c2:a9:b6:1b:f9:49:7b:bb:
                    fb:0d:47:3a:7f:bd:b5:f2:38:c6:04:1a:39:dd:67:
                    f9:28:db:a1:41:cf:c1:e1:71:62:53:81:59:d2:de:
                    0e:22:88:da:0b:34:97:4f:60:d7:6e:12:4b:3f:a2:
                    16:a1:6d:dc:78:e0:0f:61:53:7e:da:75:b7:f4:4d:
                    50:83:07:24:2f:d2:cb:78:42:ee:75:32:f0:c0:ac:
                    cf:f7:92:c9:69:da:76:6e:61:b5:8a:6c:aa:de:f6:
                    a8:31:29:e3:ea:8c:3e:5e:b1:71:d0:ba:98:3a:f6:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:82:38:29:BD:2F:15:73:ED:C3:AF:9F:F0:B9:5C:3F:DE:EE:C5:8A
            X509v3 Authority Key Identifier:
                keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/8977329C6BFA11F0A5B94819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:83:25:46:d8:8b:69:5c:fe:e8:c3:b5:bb:bc:a0:1d:09:
         ac:26:bf:63:0f:28:65:d9:70:f4:30:be:5a:6b:45:08:65:45:
         48:3b:d5:c6:eb:27:82:57:da:e1:8d:d5:c5:01:cd:fb:03:91:
         ff:d2:49:7c:85:7f:f4:3a:02:2e:ce:89:eb:6a:2e:e7:83:39:
         4e:42:21:8b:ae:63:16:9c:97:60:50:54:43:74:5e:4b:ff:01:
         1d:c1:2a:46:9f:b0:0a:03:6e:fd:1f:8c:cf:84:4d:41:22:c0:
         bd:c5:bd:92:e1:82:47:cf:48:59:97:9f:e1:0a:fe:1b:fe:aa:
         16:30:06:3b:47:03:e2:60:2b:cc:05:de:90:e6:8e:57:78:71:
         bd:80:c1:8b:36:4f:b7:42:cb:00:fb:07:c6:92:08:6a:ef:95:
         7e:40:a5:30:6a:9b:70:5d:01:5a:46:71:95:d7:88:9a:3a:ef:
         85:16:b8:75:86:58:69:3e:6c:a8:90:37:be:e0:2d:b7:5c:61:
         16:4d:80:dd:51:b6:c3:2b:83:6f:18:4d:3c:bf:a3:fe:bb:57:
         0a:f1:84:63:2a:1f:96:0d:a2:ea:02:db:d2:9f:57:6a:0e:97:
         ef:2a:6c:61:af:1e:5f:64:40:05:cb:bb:30:02:33:a6:22:20:
         67:11:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:47:08 2025 by rpki-client