Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
File:                     B92D2816064311EAAFD3B416C4F9AE02.roa (raw, json)
Hash identifier:          buGGZeDXwMHm5dXTyfYB98NmzEX65VEiY2DWWPYjPI8=
Subject key identifier:   DF:83:15:56:D9:EB:25:99:19:02:A8:A8:18:19:A3:A7:B5:5E:D0:C2
Certificate issuer:       /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
Certificate serial:       34AF
Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
Signing time:             Mon 28 Jul 2025 15:51:06 +0000
ROA not before:           Mon 28 Jul 2025 15:51:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58615
IP address blocks:        103.9.181.0/24 maxlen: 24
                          103.12.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl
                          rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13487 (0x34af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB73, serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
        Validity
            Not Before: Jul 28 15:51:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68879c6a-bb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:62:27:a3:35:8c:6f:d6:72:7b:59:f9:5b:
                    22:3f:66:77:0c:c2:3c:cb:5a:89:15:da:48:1c:1d:
                    20:36:74:15:6f:41:ae:95:10:be:3e:f5:66:78:78:
                    df:a1:78:3a:08:cf:a4:fb:37:da:c4:e6:08:cc:2d:
                    f6:4e:33:6a:85:e4:be:5d:f3:28:ec:cf:82:9b:67:
                    9a:28:b5:e2:ae:8c:7c:c7:1b:80:c5:6e:c5:0f:51:
                    ee:6b:4d:9e:61:9d:24:97:86:14:6d:8b:82:85:e1:
                    20:ca:16:22:52:9d:58:4b:2b:f0:1c:d1:da:1b:d8:
                    97:61:02:41:02:7a:8b:3f:8d:1a:1b:a9:92:2e:65:
                    cf:48:b7:f7:3c:83:9d:c6:f7:d7:cc:d8:0f:2e:6a:
                    85:39:07:81:82:e7:f4:9c:65:76:d2:bf:ca:cd:1e:
                    fd:8e:bd:cc:8a:e6:db:a1:9e:8b:c9:e2:d1:ac:42:
                    8b:80:45:75:18:2e:36:b0:9b:89:fc:61:ae:91:23:
                    59:0c:0f:5b:69:36:52:fe:a1:eb:ff:f1:3f:54:49:
                    ac:2d:2d:af:03:79:17:57:65:4f:a1:7e:e3:33:27:
                    a1:68:d8:0b:e4:6e:17:42:83:7a:ff:80:96:c5:b4:
                    94:01:31:dc:36:53:04:b2:7b:55:b7:e3:db:79:b1:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:15:56:D9:EB:25:99:19:02:A8:A8:18:19:A3:A7:B5:5E:D0:C2
            X509v3 Authority Key Identifier:
                keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.181.0/24
                  103.12.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:96:5f:3e:bf:56:c7:2c:8c:5e:ca:1c:78:a2:9c:fb:1b:1f:
         d8:ef:66:54:a2:6f:1b:5f:e2:ff:61:ec:3a:f1:6e:09:64:b4:
         af:e3:1e:7f:6f:93:a9:42:ab:02:c1:32:4c:b0:95:4e:a6:51:
         af:4a:90:51:aa:95:26:00:bf:04:50:c7:ed:2d:50:1b:54:bd:
         b3:49:d1:de:97:54:ff:ad:51:d6:5e:d5:bf:d2:f6:13:c0:78:
         db:cc:1e:61:31:ab:ed:65:25:bf:86:b1:ee:7b:38:a4:7c:ad:
         54:34:f1:a8:06:68:22:e2:71:d4:64:0d:d7:6a:32:aa:50:15:
         24:61:b5:0f:5b:5a:7f:ed:b7:5f:f6:ed:12:c3:2e:5c:9f:1f:
         ae:f4:b1:af:6e:3a:dd:72:54:07:33:c0:8a:74:28:dc:92:5a:
         73:3d:5d:86:f7:7e:bb:8b:bf:e9:45:12:64:9e:ad:04:3d:a9:
         fe:d7:5b:63:8f:c5:b3:f7:e4:e1:8f:15:e5:63:d1:38:b4:28:
         b1:54:e2:c5:8f:79:db:b6:9e:ca:d1:75:b4:a8:2f:25:11:25:
         03:9a:95:86:a7:e4:48:4f:8f:54:b1:42:76:d5:a7:16:fc:0c:
         e5:e2:2f:33:c9:97:46:33:9b:b0:e9:a8:c3:ef:c9:5d:31:12:
         0e:9f:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:01 2025 by rpki-client