Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
File:                     B50ECD32A57E11EEB4533738C4F9AE02.roa (raw, json)
Hash identifier:          1HSPz5fptSUhMZGOqCo4GWHbK/jQcYLJDQgsd3l//0k=
Subject key identifier:   CB:6B:AA:1C:2F:FB:D9:76:8A:A6:BA:68:7F:0D:42:D7:D2:F6:DD:D1
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       0185
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
Signing time:             Wed 23 Jul 2025 04:09:53 +0000
ROA not before:           Wed 23 Jul 2025 04:09:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     23688
IP address blocks:        103.230.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Jul 23 04:09:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68806091-3779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:07:b7:26:0d:33:61:00:b4:ac:5d:a5:7b:2b:
                    ad:a2:c6:d1:e3:6a:8d:da:34:87:b6:da:93:69:fd:
                    97:58:b2:c7:0a:01:34:fc:9e:ba:7a:73:72:d1:42:
                    7d:9d:1a:27:14:a2:87:6b:e1:62:be:1a:cf:2a:38:
                    95:c5:d5:a6:ef:ea:84:2b:cd:a6:f0:3e:bf:4b:81:
                    d8:3d:ec:c4:db:bb:11:b9:e3:dd:b6:f1:5e:dd:7f:
                    20:00:e5:95:2e:a7:5b:fa:af:ec:77:bb:f7:be:ae:
                    16:b6:cc:45:2c:9b:1c:c4:03:7b:92:08:17:be:77:
                    31:dc:17:56:db:4c:7a:59:56:51:e0:55:9e:1e:f5:
                    2c:d1:e8:ee:03:68:38:f6:32:8d:c6:61:5a:a1:4c:
                    cc:5b:e0:bc:43:3a:a4:58:6c:6c:58:bd:79:a5:5e:
                    ce:0e:23:09:77:99:c6:22:14:b1:4b:d7:d2:98:a8:
                    10:82:74:63:5a:a8:68:3d:92:a7:fb:ce:07:a1:41:
                    78:92:19:51:14:7a:c6:70:ab:4d:12:06:93:04:a1:
                    9c:26:98:4d:81:f7:13:d3:0b:81:29:bc:a5:be:c7:
                    48:07:1e:a2:be:c9:e1:da:a2:a7:72:4b:22:43:2a:
                    79:a9:b5:4c:b2:2b:7c:da:f5:21:5d:6b:07:86:c1:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6B:AA:1C:2F:FB:D9:76:8A:A6:BA:68:7F:0D:42:D7:D2:F6:DD:D1
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:0f:f2:c4:45:78:3a:01:75:d9:da:05:ea:74:c4:1b:0d:
         b7:30:bf:38:c7:79:af:ab:f2:e9:72:eb:58:06:22:53:4d:f3:
         7d:da:6e:42:99:62:18:66:b7:89:dd:7c:30:e6:f4:d9:b7:60:
         2a:e3:1c:70:c9:54:61:19:8e:f3:67:6c:92:f7:fd:db:bd:c5:
         0d:a0:b4:bc:3c:a4:11:82:bd:b7:8c:84:e8:c4:c5:b9:6f:a8:
         59:87:c3:54:2a:a7:04:22:ef:71:4e:db:23:d1:e0:d1:12:c4:
         9f:8f:5e:99:97:db:fa:6e:52:71:5b:1a:47:52:a2:f6:1b:c1:
         97:71:a6:7f:48:2a:89:4c:15:d7:bd:bd:ef:d7:8c:7a:3e:d6:
         dd:61:86:21:43:12:ef:69:9a:04:91:14:cf:5c:c3:ff:8a:bb:
         4d:10:f9:5f:3a:5b:f2:bf:4e:21:19:33:79:81:24:ae:f6:73:
         c9:a1:bb:b5:59:78:78:79:c7:b5:a5:fb:a0:d4:a5:32:6b:90:
         f9:4e:3e:9e:1a:c5:18:f0:10:56:62:ad:c6:26:94:62:d7:83:
         a8:0c:c7:f5:b6:47:b4:c1:85:9a:d8:2f:de:f7:bd:85:e0:02:
         2e:a6:c0:36:30:26:5c:94:8a:c0:50:c6:81:8e:20:47:be:f2:
         f0:2f:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:25 2025 by rpki-client