Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
File:                     AEF7F896B23511EF99CCD73DC4F9AE02.roa (raw, json)
Hash identifier:          zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=
Subject key identifier:   99:05:33:07:2D:EA:71:B4:73:B7:6E:1B:C4:FA:8A:60:1C:49:D8:8C
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0344
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
Signing time:             Mon 21 Jul 2025 01:38:21 +0000
ROA not before:           Mon 21 Jul 2025 01:38:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     395793
IP address blocks:        103.189.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jul 21 01:38:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687d9a0d-ee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:ef:28:00:bd:d6:0e:de:ea:8b:43:fb:59:
                    8b:4e:6b:35:3e:a8:42:0c:4c:18:ac:16:f0:fb:0f:
                    c1:3d:63:a2:fb:72:9c:b5:98:4c:46:ee:0a:22:82:
                    5d:c2:9c:fe:f9:48:08:be:c9:aa:85:2f:4e:88:8d:
                    4c:3a:3b:f1:ef:38:60:2e:82:82:83:0c:61:86:71:
                    c2:c9:dd:2a:f5:17:f3:f0:22:a1:61:0a:46:1c:a4:
                    d2:e0:1b:c1:d1:3d:31:4a:03:12:17:46:35:65:f1:
                    b4:45:a2:d9:47:49:a4:54:95:c5:f7:d8:87:25:c9:
                    b8:13:a1:c6:bd:a5:82:4a:f3:de:64:ac:ff:de:50:
                    20:c1:a3:88:7f:1e:98:4b:b2:e2:a5:2f:51:e0:e5:
                    c3:48:d3:cf:c7:69:99:62:94:d4:d7:f4:c8:8a:18:
                    ec:e1:16:d4:50:69:8f:6f:b5:0b:2a:41:19:60:c5:
                    04:8c:df:63:2b:f3:c0:9e:f9:c3:ca:1d:47:84:94:
                    ef:85:54:36:c9:b0:8f:ac:98:cc:90:e9:d6:b6:0a:
                    96:01:99:f2:0a:25:ae:ed:cc:bd:1f:03:8a:8e:fd:
                    7a:db:ab:39:46:bf:89:9e:99:4d:20:cf:f5:98:0e:
                    e6:c4:68:16:01:f4:e8:8e:69:19:f7:b8:30:4d:13:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:33:07:2D:EA:71:B4:73:B7:6E:1B:C4:FA:8A:60:1C:49:D8:8C
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/AEF7F896B23511EF99CCD73DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:d4:77:28:b1:b7:07:02:e3:5a:07:39:d1:f4:8e:a9:be:
         20:10:40:55:33:de:63:79:65:b0:c1:6d:97:8d:b5:de:08:0e:
         9a:5e:e7:44:28:2d:27:1f:cb:24:73:fa:7a:1e:3e:68:34:ca:
         78:6b:c5:a1:15:6c:a2:98:a9:d3:ca:1e:1f:75:bc:7e:61:91:
         b5:ea:00:3b:a3:64:bb:3c:26:2e:b4:a8:56:ef:da:b2:ed:57:
         cd:b3:fe:66:ac:91:54:ee:68:06:73:4d:88:69:c8:12:94:dc:
         b7:d5:ee:54:d2:c2:30:13:22:50:f4:90:6a:67:d1:ed:5f:7a:
         5e:a9:34:36:99:b6:b7:f1:08:04:ed:f7:9f:b5:62:02:86:c7:
         56:87:58:2c:b0:83:c2:6b:1d:cf:bd:93:2b:4b:db:b0:be:f4:
         b3:e1:b8:09:06:15:1e:44:50:3c:7d:84:6b:82:c2:86:85:95:
         a9:4c:c1:65:fa:cc:a6:90:af:e2:ca:a2:cf:66:3b:f6:68:73:
         57:56:ba:48:fe:8e:2b:0e:05:d5:a5:58:0a:c3:77:83:17:05:
         9d:2c:1f:55:53:e6:80:08:03:01:f3:44:5a:7c:a2:ef:81:bb:
         2b:fb:76:62:e8:c6:7e:c7:5b:47:3b:cf:4d:4e:0d:cf:76:53:
         0c:fc:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:52 2025 by rpki-client