Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
File:                     76B3E9929B9811EC8CE35458C4F9AE02.roa (raw, json)
Hash identifier:          kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=
Subject key identifier:   79:CA:2A:0B:46:86:18:4E:B4:EF:0F:3A:D5:16:37:2F:68:DE:46:C2
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       03A5
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
Signing time:             Wed 11 Jun 2025 00:56:08 +0000
ROA not before:           Wed 11 Jun 2025 00:56:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141389
IP address blocks:        103.167.214.0/24 maxlen: 24
                          103.167.215.0/24 maxlen: 24
                          2001:df6:c180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 00:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jun 11 00:56:08 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6848d428-5ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:0f:e2:20:5c:11:95:c0:10:e0:7e:d0:59:
                    e6:fc:cf:bf:c5:87:55:97:26:27:08:8e:d3:96:23:
                    50:cc:00:02:7d:b9:de:ae:b1:47:42:53:f4:31:96:
                    c7:44:da:67:37:c2:b1:4d:d4:dd:ab:ad:6b:ba:be:
                    72:84:fc:65:25:ef:0f:ad:4c:ff:b1:7f:8a:70:3d:
                    2a:77:16:55:c2:73:db:aa:fc:f4:04:45:e6:94:f5:
                    b6:d4:4a:a0:bf:45:9e:91:1e:d1:9e:02:c2:fe:a8:
                    03:26:78:5f:70:83:77:7b:f4:7f:b1:c2:1a:1a:c3:
                    a7:fe:1b:ef:bb:0c:40:bf:a3:87:44:f7:fd:04:15:
                    75:20:73:ad:54:a2:6d:ef:c9:f3:f4:63:7b:0a:46:
                    3a:bd:c7:79:2f:66:81:26:b4:6b:ff:3f:e5:5c:3f:
                    f8:a2:2c:90:e0:92:1a:c3:ae:c3:fe:02:e8:b3:8e:
                    b5:0d:08:b8:f2:a3:29:5e:fd:3d:9d:e0:6c:47:8e:
                    19:a6:da:52:d3:e2:9a:57:6b:e8:a5:64:2b:d6:99:
                    62:ad:4c:17:00:77:02:2d:67:a3:ce:a3:0f:9e:e5:
                    08:5e:3a:36:c3:0f:99:f5:2f:05:a8:52:af:0a:04:
                    1e:68:ce:2c:05:ce:8e:3d:02:52:47:52:e2:ab:0d:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CA:2A:0B:46:86:18:4E:B4:EF:0F:3A:D5:16:37:2F:68:DE:46:C2
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.214.0/23
                IPv6:
                  2001:df6:c180::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:a8:a6:62:52:87:36:a8:df:5c:d5:24:21:3e:dd:48:41:57:
         9b:ed:1f:13:fe:38:4a:1e:5b:af:b8:df:8d:2e:31:e2:fa:da:
         a3:fb:e1:6d:71:35:67:47:62:59:70:f6:4e:38:c1:63:9b:14:
         f3:d3:0e:cf:41:fd:d3:8e:b5:69:fe:b2:cb:79:35:e5:05:22:
         b9:b7:8c:90:e2:60:c8:7a:87:0a:f0:f5:5b:ef:05:69:da:4b:
         68:18:4a:f3:b0:29:69:2c:09:33:7d:14:62:40:a7:37:a3:c5:
         08:40:5d:e3:dd:df:93:65:68:51:a8:39:e5:5e:20:ae:ad:8a:
         8f:8a:ce:8c:db:d5:4f:1d:64:51:f5:71:59:ca:da:59:65:f2:
         25:34:c8:34:35:a7:69:93:94:68:17:71:7e:95:d6:78:ac:fe:
         a9:2c:c6:25:39:28:4e:1d:f4:4d:15:15:2a:1a:fb:1f:3c:87:
         b8:ac:ac:a9:75:93:ca:97:6a:66:e9:f4:d2:74:43:da:9e:28:
         61:a6:f7:a1:4e:83:60:33:aa:4c:24:ec:43:ff:39:ca:20:03:
         3f:8e:4f:bf:36:a0:35:00:d0:50:0d:c0:7c:9e:2c:4f:63:06:
         ab:36:bf:82:59:82:0b:74:16:b9:89:2f:c5:41:f9:16:9e:4d:
         ef:c8:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:11:38 2025 by rpki-client