Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
File:                     DCD75050315011F0BC916269C4F9AE02.roa (raw, json)
Hash identifier:          Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=
Subject key identifier:   D5:2F:FF:A9:99:4C:59:D5:07:A4:57:B4:9F:4A:95:EA:6F:7D:52:E1
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       19C1
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
Signing time:             Fri 08 Aug 2025 10:45:32 +0000
ROA not before:           Fri 08 Aug 2025 10:45:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9422
IP address blocks:        103.70.132.0/24 maxlen: 24
                          103.70.133.0/24 maxlen: 24
                          103.70.134.0/24 maxlen: 24
                          103.70.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6593 (0x19c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Aug  8 10:45:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6895d54c-2fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:67:58:2f:c4:58:a9:2a:91:15:77:83:53:
                    f7:97:06:9a:54:97:98:58:3b:b6:f8:f6:9c:6b:75:
                    99:cf:2e:2f:86:7e:20:c3:73:6d:a8:6d:79:e7:cf:
                    4b:14:da:fd:91:a4:bd:9c:61:96:ab:6b:40:46:51:
                    d2:cc:55:63:fe:8c:64:6b:87:73:04:d9:fd:66:cb:
                    58:bc:21:f1:b9:92:05:83:fc:80:2b:6b:e7:47:91:
                    6e:37:a2:c0:e8:ba:89:3f:45:80:61:22:9b:a2:8a:
                    6e:cb:2a:77:ba:26:2c:4a:4a:26:9e:da:d5:77:6d:
                    b3:16:17:35:89:22:d9:eb:6c:c2:53:3a:22:ce:d7:
                    e0:92:d2:0e:19:18:28:cc:45:58:cc:c6:e6:48:a5:
                    aa:81:4a:83:89:ac:63:e6:d1:bc:7f:b4:1d:dc:93:
                    a4:ae:5d:3b:48:70:90:fc:99:d0:c3:ca:be:4d:bf:
                    63:66:2c:6d:58:f1:92:cf:47:39:ad:89:d0:2f:c4:
                    1b:dc:34:8a:f9:2d:4b:92:c5:b0:f4:df:a4:18:af:
                    7a:ac:4c:15:d0:5f:f2:4c:37:db:89:b8:ab:2c:0d:
                    6a:07:2c:83:e4:5e:70:88:c8:7a:b0:9a:72:53:86:
                    a5:18:af:17:88:ff:b7:b0:d2:a7:7b:82:d4:0c:64:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:FF:A9:99:4C:59:D5:07:A4:57:B4:9F:4A:95:EA:6F:7D:52:E1
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:08:08:28:58:14:02:61:49:c0:6b:b3:e3:45:65:46:81:78:
         97:fd:4d:2e:1c:82:ed:a9:7c:5c:0b:13:db:65:49:8d:8e:ab:
         6b:bc:dc:78:11:f6:f0:c6:a2:6f:cd:68:9f:5d:9d:22:5c:cb:
         41:07:dd:06:58:09:f0:92:25:4a:81:60:a8:b0:e2:18:51:3c:
         1a:27:e4:3a:66:18:e3:ca:b7:fc:d3:a0:04:26:29:93:5b:c4:
         a7:5f:2b:29:f7:0d:69:be:0e:83:6f:6a:ca:e3:64:a8:64:6d:
         0c:06:08:78:e1:fb:21:48:92:51:ce:78:dd:9b:b3:99:04:b4:
         4a:d8:a4:12:2b:d7:47:b2:81:9c:e9:44:05:b4:5e:94:93:f8:
         52:78:ea:8a:df:54:6f:0e:9e:c5:ed:36:44:9d:b8:71:de:13:
         b6:1c:ea:53:08:7b:44:2a:c1:e0:ea:76:5d:2e:9b:75:8d:1b:
         51:88:f9:f4:3c:b4:47:ca:20:b1:22:bc:0f:b2:17:a4:d7:2f:
         f9:97:34:30:50:e0:b5:fb:35:40:57:6a:1f:b9:e4:5e:3c:2d:
         c8:1d:3e:22:3c:d4:06:6e:46:ec:5f:cc:d4:d7:ac:2f:b0:4d:
         bf:4b:b4:11:7a:fd:35:89:50:8a:58:db:98:9d:c7:66:12:33:
         14:91:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:49 2025 by rpki-client