Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa
File:                     7474F998377111EE8AFEB74DC4F9AE02.roa (raw, json)
Hash identifier:          O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=
Subject key identifier:   06:69:F0:8F:31:D5:57:9A:B6:65:D3:B4:90:64:27:7C:D9:48:00:4F
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0191
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa
Signing time:             Sun 03 Aug 2025 04:10:41 +0000
ROA not before:           Sun 03 Aug 2025 04:10:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38136
IP address blocks:        103.229.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Aug  3 04:10:41 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688ee141-4259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:61:bc:4c:d4:01:a9:19:0d:22:22:88:9e:
                    ef:63:94:ce:10:53:b5:7b:86:95:13:d9:b8:89:8e:
                    5e:fa:8b:76:f9:77:bd:f4:28:98:b9:1c:7d:94:c0:
                    6e:86:7c:6f:7c:b4:c2:39:6b:5b:ae:6f:bb:38:58:
                    6e:bd:77:43:10:60:85:5f:0f:d8:99:99:74:ac:f3:
                    ce:87:a0:28:78:d5:0a:63:c5:67:b3:33:0f:f9:fe:
                    38:6b:c4:8f:de:0d:3e:2d:7d:2c:85:6e:1a:a3:2b:
                    60:29:36:cd:8f:0d:4c:a0:b5:c4:73:4e:d5:4f:db:
                    73:f8:6a:f7:d7:00:aa:6d:a9:76:fc:e0:69:fd:1e:
                    51:cb:dc:19:f0:37:5c:d7:eb:78:bb:dd:13:00:a6:
                    00:7b:34:4f:77:bd:92:a0:a2:19:e6:20:f8:43:b3:
                    e1:c8:16:6c:82:17:95:ca:38:61:3f:34:fb:c5:1d:
                    03:d4:e6:e9:b8:c4:26:74:84:4a:94:5e:31:5a:8f:
                    df:3d:cb:f5:2c:34:9f:e5:c5:89:08:9e:52:ca:06:
                    6d:8c:20:1b:69:39:9d:42:d4:b0:86:7e:8c:85:ad:
                    82:13:2e:73:6c:84:fd:20:17:25:fb:0f:de:63:e0:
                    37:a0:c8:88:de:84:fa:ed:c4:f8:c0:35:0a:da:e1:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:F0:8F:31:D5:57:9A:B6:65:D3:B4:90:64:27:7C:D9:48:00:4F
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:67:4f:30:a9:34:77:4d:52:62:e1:1c:8e:26:6d:b7:f5:22:
         a9:e1:5a:8c:94:72:08:1d:49:3d:cc:3d:82:d6:f4:15:98:71:
         54:9e:f1:7c:e5:3c:a7:83:e4:2c:66:95:4e:17:37:d2:92:e8:
         17:7a:2f:ad:3c:96:e1:e6:2e:1a:d0:87:c4:48:08:26:66:74:
         d1:7d:39:75:c3:72:e7:9f:1c:10:26:f7:27:2b:46:ad:4b:64:
         b8:4b:a2:d3:2f:03:44:b4:ae:81:ee:5a:b9:af:d4:46:d2:1d:
         0f:24:56:3f:58:fc:55:78:8d:93:60:aa:a8:5f:0d:e2:6c:31:
         aa:54:2b:76:0a:e1:ed:49:79:98:69:b2:15:8e:8a:7b:6f:72:
         f9:e7:aa:11:90:7c:bf:fb:b7:f2:cd:b8:07:cd:c7:a5:7b:80:
         55:d7:ec:26:df:c0:68:50:f3:37:d2:02:2a:24:18:21:9f:42:
         e3:4f:b0:8b:04:00:01:a0:83:fc:67:d8:c7:77:ae:b2:d6:91:
         01:e2:e1:ef:51:42:f8:31:de:4d:8b:ac:3c:af:83:a0:b2:1b:
         31:1c:ad:5d:9f:25:87:f9:03:04:10:8e:06:49:10:79:22:b1:
         44:2c:44:be:9f:af:f9:ff:69:5b:af:1b:6a:1e:1e:c6:64:8c:
         0a:32:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:30:18 2025 by rpki-client