Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa
File:                     DD1FEE48C77311EEA5076E2CC4F9AE02.roa (raw, json)
Hash identifier:          e8WAY0Y3CoS5+B8mQdHDLApUCt8COdKCwX61EjEYzJk=
Subject key identifier:   04:4E:85:1C:0C:C4:2F:C8:87:4A:DE:8A:CB:FB:68:5A:11:A3:DC:15
Certificate issuer:       /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial:       0295
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa
Signing time:             Thu 07 Aug 2025 02:38:22 +0000
ROA not before:           Thu 07 Aug 2025 02:38:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141987
IP address blocks:        103.191.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
                          rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
        Validity
            Not Before: Aug  7 02:38:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6894119d-30ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:86:33:88:65:ef:17:d4:99:a0:61:bd:f5:
                    82:60:96:a4:04:8a:31:73:29:8b:f8:3e:1a:51:a2:
                    1f:1c:38:de:4e:c9:64:70:ee:0f:ba:5a:1d:38:93:
                    e6:fc:bf:78:70:9b:23:3f:84:da:23:2e:8c:72:61:
                    1d:37:9f:e7:af:7e:a2:38:d0:91:87:25:0c:39:c8:
                    10:aa:16:56:a6:fe:55:ef:6a:20:a8:10:b7:18:6c:
                    7d:12:e9:8a:be:f5:02:c4:ff:93:d9:3b:dd:55:97:
                    79:4c:a9:22:4a:3f:53:81:7d:78:45:a8:91:d1:27:
                    38:ab:0a:f3:a1:a0:36:02:bb:5e:24:1e:d0:1d:b7:
                    b2:75:6a:00:53:ac:c0:be:e0:26:f9:9f:1f:88:0a:
                    d1:d1:69:99:22:2d:ec:4f:64:d3:db:cc:75:ac:bd:
                    25:42:cc:82:75:cb:75:1b:7a:61:66:4a:4d:5a:9b:
                    b1:2a:7b:dd:94:13:13:5a:0a:33:24:ef:3e:0e:7f:
                    9f:01:e6:1e:b0:03:36:5e:55:89:8b:8e:9b:70:3c:
                    ad:4c:27:73:fd:d9:ed:23:d4:87:23:cc:ae:f3:0c:
                    38:e4:6b:21:6d:7e:ae:b2:0a:b0:9e:54:96:5a:dc:
                    03:86:ea:f2:20:14:68:92:e9:5d:a2:35:f9:06:af:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:85:1C:0C:C4:2F:C8:87:4A:DE:8A:CB:FB:68:5A:11:A3:DC:15
            X509v3 Authority Key Identifier:
                keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:4b:f9:48:ce:d1:b1:dc:80:10:ea:48:10:a3:0b:0f:41:
         c6:dd:24:b1:49:fd:b8:fe:ab:5e:2c:49:07:e2:80:44:03:85:
         54:ed:cb:c7:19:22:f9:0b:0a:87:b2:de:56:94:e6:19:27:61:
         32:c4:34:6d:cf:27:ff:3b:a4:05:41:da:a4:b5:7f:24:23:a5:
         ae:e6:ae:1b:26:64:43:d5:fe:1c:c6:88:05:ce:fc:af:24:4e:
         76:b3:5d:29:64:9c:fa:da:d5:ea:94:c4:cb:8f:c1:03:59:84:
         c3:af:37:88:8f:89:e9:05:8a:b5:7b:e4:fb:ab:47:55:dc:34:
         40:77:12:ae:83:b1:b9:43:97:43:f4:f1:38:53:cc:3a:5e:22:
         e6:f1:be:f5:d7:e6:e4:d2:b8:c9:78:4f:98:27:7f:63:19:14:
         27:fd:31:a9:37:1e:ff:53:25:43:fd:d3:dd:1b:3a:14:40:9d:
         46:86:f7:66:67:8b:89:57:e6:2a:ae:83:82:6a:76:28:bf:34:
         90:60:b3:10:35:4d:0a:c4:e5:4d:92:2d:94:8b:1a:75:f5:05:
         53:df:70:d0:4c:52:b8:b7:ce:5d:76:81:06:21:44:1e:79:59:
         a7:3f:50:2e:0e:44:b7:47:cc:d0:cd:cf:47:3b:0e:07:92:5a:
         78:0f:af:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:51 2025 by rpki-client