Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EA2C5116450411F09738105FC4F9AE02.roa
File:                     EA2C5116450411F09738105FC4F9AE02.roa (raw, json)
Hash identifier:          mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=
Subject key identifier:   19:C0:61:E7:6F:F4:51:24:5C:29:9D:37:3B:A1:52:9D:8C:61:2A:A6
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       035F
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EA2C5116450411F09738105FC4F9AE02.roa
Signing time:             Sun 03 Aug 2025 01:39:16 +0000
ROA not before:           Sun 03 Aug 2025 01:39:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401696
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  3 01:39:16 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ebdc4-eb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:ff:b3:38:b4:0e:24:f7:a5:20:af:db:68:
                    21:28:7d:23:f5:db:f0:07:34:4f:d7:e1:fe:a1:1c:
                    3f:0e:2b:02:59:ee:2f:62:ae:42:0c:37:f5:11:92:
                    23:24:f3:61:ec:35:21:f6:ea:a8:02:31:fd:6f:b0:
                    d1:e5:a4:78:6b:35:6b:0c:89:63:53:d5:3a:17:58:
                    e8:2a:72:dd:28:c9:3e:50:16:b4:5d:31:c4:4e:87:
                    93:46:17:c6:38:34:37:39:c4:97:9d:e3:98:33:2e:
                    37:05:d0:90:21:ac:66:d6:6f:2f:ef:63:e4:9d:e7:
                    18:d0:76:d9:21:77:25:a4:16:46:a1:bc:61:10:ca:
                    1b:f0:02:63:cd:67:49:85:e1:21:72:2e:65:22:09:
                    cb:ed:3b:35:e8:b6:c2:41:35:e5:0a:0d:6b:8a:cd:
                    93:1f:1e:06:71:c6:5b:f3:20:8f:43:f8:95:46:83:
                    ca:25:06:66:86:4b:a7:fe:11:94:c9:43:96:2a:6a:
                    45:ca:95:cd:a4:35:31:74:b3:23:cc:b8:aa:12:d1:
                    c9:9a:5d:50:31:d9:da:6e:bf:4e:3b:b1:c9:15:60:
                    40:29:08:0f:05:1e:58:27:0a:6d:4f:d3:7e:49:96:
                    8f:7c:45:44:29:71:15:7b:a8:4a:7a:d4:44:24:65:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:61:E7:6F:F4:51:24:5C:29:9D:37:3B:A1:52:9D:8C:61:2A:A6
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EA2C5116450411F09738105FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:80:da:06:0b:3d:07:95:cd:be:fe:e6:42:ba:f5:85:75:
         32:9f:2b:68:88:4a:e7:e9:ce:c2:e4:41:0a:e2:27:1e:5f:4d:
         2b:ed:5a:9a:62:5b:68:7a:e8:ce:53:f6:0d:85:70:53:cf:ba:
         4b:ca:61:77:75:1e:57:22:0f:94:bd:1e:9e:ef:87:1c:e3:2a:
         d8:af:97:8d:e4:17:84:57:1e:c8:56:b6:32:1f:78:14:ff:d7:
         29:32:bb:1e:84:49:1b:59:bf:d7:a9:aa:4b:bf:6e:65:7a:07:
         76:f8:23:a9:40:4f:d3:70:e3:43:a1:2b:fc:d6:4c:1e:02:f4:
         09:7b:da:21:97:ff:c6:ca:ef:7f:d5:4f:d2:dc:ca:25:44:3a:
         e5:06:60:04:b8:18:92:0a:be:10:e9:3a:0a:a4:fb:3b:77:38:
         18:23:1e:16:5b:67:1c:35:d9:c5:56:93:af:d9:b1:b3:48:e8:
         51:cd:8a:ca:b8:84:02:4f:7f:71:da:2d:c0:7f:09:a9:36:6b:
         74:f8:9a:28:44:a1:91:2a:0a:c5:a0:9f:06:3f:79:f5:39:5d:
         a0:e9:24:cd:ef:8b:42:6d:bd:44:b1:03:a1:be:8d:d9:a4:ff:
         04:eb:84:98:04:52:b4:84:44:a0:98:ea:43:62:86:26:10:38:
         df:b1:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:37 2025 by rpki-client