Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
File:                     933D446C0BCA11ED888E5616C4F9AE02.roa (raw, json)
Hash identifier:          5OZH/ipU9G0SdrZKs5470uFnbaHHzZ691GNPcYjgeyk=
Subject key identifier:   E3:BF:90:56:7B:D9:71:C2:1D:CE:AA:40:96:6D:87:0A:21:D9:45:84
Certificate issuer:       /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial:       02B5
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 01:57:45 +0000
ROA not before:           Thu 19 Jun 2025 01:57:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137831
IP address blocks:        103.115.76.0/22 maxlen: 22
                          103.115.79.0/24 maxlen: 24
                          202.181.92.0/22 maxlen: 22
                          202.181.93.0/24 maxlen: 24
                          202.181.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
        Validity
            Not Before: Jun 19 01:57:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68536e98-e72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:35:c8:08:c1:25:fb:d6:4a:71:dd:0a:ad:
                    e2:c3:91:08:7a:eb:4f:ba:75:e0:2a:b3:37:fb:56:
                    ab:8a:be:22:c3:4e:09:05:ca:2b:fe:79:8d:51:9f:
                    eb:ea:af:89:c3:8b:ce:00:7f:d4:48:65:a1:86:f3:
                    55:c4:41:a2:6b:b0:d9:a4:59:86:27:b3:d4:56:99:
                    b5:cf:8f:76:07:a2:59:e2:7f:7b:ff:f6:fa:20:ee:
                    1d:51:c3:71:d5:76:ee:e4:19:6a:aa:2f:a1:1d:ab:
                    ed:ae:1f:df:6a:6f:72:ee:3c:8d:59:0d:54:8c:a1:
                    67:fa:92:0a:02:b3:ce:90:56:bb:92:ab:82:9f:ac:
                    e4:2a:40:14:c0:14:57:ff:df:78:e9:62:c3:1a:66:
                    09:35:5a:a1:5f:ee:3b:f2:0b:94:08:93:0c:29:8e:
                    5b:e3:2c:42:a1:8d:51:00:59:21:cb:87:4d:58:96:
                    00:7a:22:15:c4:c1:d4:4e:b5:7f:43:39:d9:36:a6:
                    2e:58:dd:96:c1:bb:11:8b:10:d3:23:fc:4f:b4:11:
                    eb:d2:20:38:81:02:13:2d:a3:42:19:68:87:ea:52:
                    39:30:74:d1:53:87:7d:53:55:24:1d:38:2e:33:49:
                    eb:d9:4a:42:03:f6:2c:d8:84:05:e6:8a:17:b9:cf:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:90:56:7B:D9:71:C2:1D:CE:AA:40:96:6D:87:0A:21:D9:45:84
            X509v3 Authority Key Identifier:
                keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.76.0/22
                  202.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:ee:f8:f9:4d:82:de:90:41:a4:74:e9:87:ae:2d:b8:81:
         d7:c4:18:17:62:e1:3f:21:b5:c3:d6:63:53:f1:87:d0:93:01:
         b8:b1:d2:cd:63:06:28:3b:ca:69:a7:d7:6a:c6:b1:3e:c0:48:
         b6:98:ba:e3:62:71:e7:b6:a8:21:e7:d1:8b:9e:3f:a8:c3:1e:
         07:bb:3a:66:f1:69:28:10:99:8b:57:34:97:40:ec:f8:93:ac:
         45:b2:d3:48:7f:1e:a8:50:6b:9d:f5:cf:d4:2e:79:c1:dd:ab:
         7c:fb:8c:57:34:81:70:5e:35:66:c4:16:04:5c:67:55:2a:ab:
         d3:77:17:36:16:27:22:6c:2a:2b:12:1c:7d:8c:be:19:51:9c:
         37:eb:bf:6e:df:fd:be:07:0c:3e:04:d5:06:eb:37:7e:40:c8:
         90:8a:11:fe:93:b4:77:eb:3d:a3:5c:b6:6b:bf:06:0c:cd:1c:
         14:5d:20:30:91:4a:47:37:78:49:6a:b3:46:76:67:66:4a:12:
         51:dc:a7:d5:d8:d2:9d:1c:fc:8a:c8:e1:a1:c4:90:60:df:93:
         f8:85:82:a3:3d:9c:b3:76:40:57:2f:cf:18:b0:ff:46:a6:58:
         83:e8:21:0d:d7:73:db:9b:13:fe:16:d3:f5:3d:97:5a:63:7d:
         80:67:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:54:29 2025 by rpki-client