Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
File:                     78423A52DE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier:          eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=
Subject key identifier:   41:5E:20:F9:E6:CF:4B:D7:A6:37:1B:D3:EA:3B:E5:24:0C:D8:DB:DD
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       059E
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 00:05:09 +0000
ROA not before:           Thu 07 Aug 2025 00:05:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136742
IP address blocks:        103.169.150.0/23 maxlen: 23
                          2407:a3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Aug  7 00:05:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6893edb5-521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:0f:de:6e:3e:fb:fb:6b:e8:53:c9:bd:6d:
                    e8:0a:83:17:a1:55:67:fa:42:65:fe:7f:44:b7:1c:
                    63:17:1b:9f:ff:10:b5:8e:b7:9e:8f:e1:9f:6e:bc:
                    40:3d:f2:35:8f:16:06:2b:cf:34:8d:3b:19:3d:ca:
                    a1:c1:43:2c:c1:4a:5e:ef:0f:61:be:72:03:5e:f5:
                    25:05:b2:b1:cb:4b:9e:dc:2f:24:33:2c:59:8b:31:
                    5d:fe:a8:56:11:05:d9:70:75:bf:14:71:63:c0:c2:
                    81:69:00:fb:61:83:ea:8f:ed:4e:d3:ea:38:74:82:
                    af:30:24:a9:98:96:71:46:29:57:38:58:7e:6a:d5:
                    1b:3e:70:b0:21:58:a3:01:fd:eb:eb:37:ab:d3:c6:
                    3d:83:0e:0e:5c:ee:e2:80:57:65:38:bd:01:f3:9f:
                    dc:65:47:f7:0f:f8:9c:26:79:32:34:62:6f:8c:b2:
                    88:7c:89:44:1b:80:6f:71:1f:31:74:d3:d3:f3:4b:
                    ff:3b:df:2b:67:31:f4:b2:6b:40:83:09:89:7a:48:
                    17:81:6d:ad:84:67:ac:2d:50:8b:3d:7f:8a:11:e3:
                    14:61:c2:53:be:82:3f:04:95:c4:86:69:59:37:97:
                    b8:2f:3a:23:cc:b1:1c:5f:2b:44:9b:23:9c:56:e3:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:20:F9:E6:CF:4B:D7:A6:37:1B:D3:EA:3B:E5:24:0C:D8:DB:DD
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.150.0/23
                IPv6:
                  2407:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:8a:21:d6:bd:ab:0e:d1:37:6c:2b:46:aa:dc:89:34:01:
         0c:da:1f:7b:e9:78:f0:99:f1:5c:e5:54:94:a9:6a:bf:96:6d:
         0e:1c:68:bf:de:31:70:5d:f4:83:1f:37:a7:80:f4:a5:8e:08:
         28:ae:8f:35:9d:0e:38:b1:c1:c3:c4:c5:d3:e2:71:48:d1:90:
         23:da:4f:3e:32:17:34:fa:a2:09:81:e8:de:f6:b4:23:cc:99:
         d3:53:c4:33:42:e9:d0:b4:33:a4:ae:1d:8b:1c:46:7e:03:88:
         bd:31:ec:eb:a6:be:1c:52:7d:57:17:a0:b1:bb:c9:65:e6:b6:
         08:56:2e:a5:3f:6c:4e:8f:99:e5:a5:22:1e:e9:ac:82:37:53:
         0f:c9:e8:5f:ff:81:e1:c9:e1:ee:8a:c5:73:91:c8:43:2a:56:
         ef:cd:bf:b4:9f:c0:32:db:9a:fe:00:f8:50:dd:e9:42:5f:7e:
         00:f0:35:7e:88:64:fb:35:df:36:8c:99:83:40:a3:2c:46:da:
         3c:6b:f4:09:6f:33:2f:e7:f7:f2:c6:ac:a3:37:5b:70:9c:7a:
         ed:74:3e:ff:10:f4:d9:c1:03:4c:11:f1:fb:38:11:37:4e:a5:
         68:e0:e7:f2:4f:a7:bf:4d:9f:bd:30:b4:d4:57:2b:83:a9:6f:
         bc:d2:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:06 2025 by rpki-client