Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/930770F4244C11ED95AA5569C4F9AE02.roa
File:                     930770F4244C11ED95AA5569C4F9AE02.roa (raw, json)
Hash identifier:          ULGKwEOFyOrsmtR9RLcNHZ1T/UHrIBp7ZTGPrjal32s=
Subject key identifier:   F4:92:CF:38:3D:74:B5:94:80:7F:E2:54:19:97:AC:67:96:71:59:C1
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       025D
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/930770F4244C11ED95AA5569C4F9AE02.roa
Signing time:             Thu 17 Jul 2025 02:37:31 +0000
ROA not before:           Thu 17 Jul 2025 02:37:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149428
IP address blocks:        103.190.58.0/24 maxlen: 24
                          103.190.59.0/24 maxlen: 24
                          2400:8e20::/32 maxlen: 32
                          2400:8e20::/33 maxlen: 33
                          2400:8e20:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Jul 17 02:37:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687861ea-140f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:59:d6:92:7c:eb:88:2d:8e:9a:28:e8:ae:
                    3b:68:0b:d1:40:34:b2:cd:f3:7b:36:54:c5:58:83:
                    af:e3:08:9c:66:c3:7c:6c:cf:1c:c4:e6:e1:f6:ea:
                    5f:13:1f:89:66:3c:06:ef:a3:de:d9:68:20:d2:4f:
                    b3:61:df:48:94:b8:39:78:96:ae:30:1c:84:38:4e:
                    d6:38:83:07:07:91:d0:92:af:57:a6:b9:13:df:86:
                    7e:22:e3:0d:af:1a:e0:e5:63:aa:e5:1c:68:66:10:
                    c7:c7:5b:21:9f:0d:b4:c8:f5:17:d0:e0:71:da:34:
                    18:ca:86:e6:fd:21:16:99:ac:5f:f5:78:32:57:4b:
                    53:b2:bb:81:fa:26:a6:70:9b:ce:08:84:95:cc:73:
                    89:6b:f8:7c:73:2c:fd:06:71:1d:27:5a:88:b9:5d:
                    13:89:f6:6b:3d:55:c2:e1:21:e0:6a:ab:73:71:9b:
                    f0:15:af:a1:3e:92:04:54:32:c9:3e:1c:9f:3a:aa:
                    07:73:31:99:53:a3:7b:9b:df:22:b8:1b:3e:63:d7:
                    40:d0:5c:2c:67:67:b6:15:6c:48:5e:65:35:f2:87:
                    3c:52:62:25:9f:bc:fc:5c:19:20:b5:0b:0b:c2:1b:
                    a9:08:ff:76:f2:ea:2c:79:f4:0a:32:1c:8e:bb:18:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:92:CF:38:3D:74:B5:94:80:7F:E2:54:19:97:AC:67:96:71:59:C1
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/930770F4244C11ED95AA5569C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.58.0/23
                IPv6:
                  2400:8e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:84:a4:61:6f:2e:d4:36:35:26:24:d3:22:58:a1:0e:2c:
         48:4c:07:63:e4:4d:65:72:79:f0:f0:e6:db:78:ad:ae:3b:0c:
         1f:9b:39:d6:18:09:9d:d3:c9:70:00:0a:e8:40:f4:30:ac:2e:
         29:65:eb:a7:75:e2:02:71:4c:9b:89:b2:6e:4a:e7:b7:22:08:
         1d:a6:18:84:87:d9:78:db:12:07:63:8b:6d:7a:e8:6d:74:f3:
         c2:36:42:a6:75:7b:a0:33:f4:3d:14:b6:05:9f:3e:e5:e8:ea:
         8f:ac:f8:cc:52:eb:f1:53:d2:52:23:bd:64:f7:ab:5b:b9:08:
         d4:00:66:6e:d9:61:9f:45:8b:a0:c3:2b:1b:97:ed:6e:69:a0:
         62:39:42:7f:15:84:04:d8:54:db:da:ce:9d:60:c9:1f:28:aa:
         3d:e9:af:bf:2d:75:57:fe:63:59:07:ad:3d:38:7e:b1:31:8b:
         3f:47:c3:bc:2b:65:59:e9:4c:07:15:e0:ee:ef:50:e9:d2:be:
         7f:17:27:e8:99:60:ef:f2:12:e8:5c:f4:41:e6:8f:c7:a9:dc:
         b6:87:9c:96:19:d8:0f:5b:31:12:e8:cb:de:4f:1b:f7:de:d9:
         1c:cf:31:dc:6f:1a:d2:5f:8b:1f:54:7b:75:4a:16:d1:9f:c7:
         6a:00:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:48 2025 by rpki-client