Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
File:                     EAAF7884450411F09738105FC4F9AE02.roa (raw, json)
Hash identifier:          tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=
Subject key identifier:   79:03:CE:47:A9:D6:FE:03:1F:A9:8C:60:DD:08:60:A0:F5:F1:05:2D
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       0360
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
Signing time:             Sun 03 Aug 2025 01:39:17 +0000
ROA not before:           Sun 03 Aug 2025 01:39:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  3 01:39:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ebdc5-52d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:8f:2b:39:96:15:6d:46:4b:a5:15:ad:e2:
                    02:dd:0d:e5:8f:08:83:7e:42:f0:e3:c3:d0:3f:f3:
                    f6:fd:b7:79:94:4b:c5:4c:d5:6f:cc:ce:e0:8e:fb:
                    33:fd:99:3f:ad:72:54:c7:1f:64:28:e8:0a:ae:bc:
                    f6:ab:10:50:78:a1:b8:70:59:6e:a7:d5:6b:3a:a5:
                    f1:c8:cf:1d:9e:37:bf:ec:50:0e:56:5d:5c:7a:16:
                    a3:9c:4b:59:13:dd:fb:3d:13:79:50:9f:60:d1:90:
                    af:ff:da:db:92:78:5d:cf:49:c1:62:ee:e5:19:b2:
                    b6:f1:2f:72:b3:b6:95:3f:10:ca:a4:82:a3:a6:0c:
                    bd:38:89:7d:e4:de:07:78:09:b9:6f:ee:00:f0:f5:
                    87:33:5d:f7:33:96:14:c4:9f:cb:6b:f8:3d:b2:51:
                    2c:33:7b:6a:7a:ce:c6:67:27:ad:fe:ec:b2:2d:b4:
                    d8:48:9d:b1:c1:c9:1d:0d:13:93:02:df:77:15:6c:
                    b0:d9:3a:e5:9d:02:37:90:2d:c1:9a:c6:b7:2e:f4:
                    79:2a:60:8a:b6:e9:23:5c:d2:f8:75:ce:f6:8e:31:
                    20:c5:64:19:70:53:c5:e3:52:7f:e4:3b:be:26:34:
                    bd:9f:9d:5b:84:a8:87:4f:a0:14:23:06:a8:ec:4b:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:CE:47:A9:D6:FE:03:1F:A9:8C:60:DD:08:60:A0:F5:F1:05:2D
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/EAAF7884450411F09738105FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:dd:7f:f9:30:3b:49:5c:2a:13:4f:f5:75:f6:6d:70:c8:
         24:78:2c:66:5b:e9:76:05:2b:47:c3:96:7d:5a:69:b9:f6:c4:
         ad:fc:af:05:0e:18:71:b0:8d:23:60:db:2d:cd:56:97:24:cb:
         55:c4:e9:55:fa:ab:7b:ea:d5:0e:e3:da:44:c2:c9:0e:15:0b:
         11:50:58:3f:56:39:9d:3a:61:11:ee:4f:b6:14:c2:64:0f:9c:
         76:9d:bb:3a:ce:91:ce:f3:75:81:2c:cc:c8:e7:65:1b:62:4f:
         5f:83:5c:2d:39:b2:f2:ed:9b:db:e9:59:e8:a2:a2:70:ef:8a:
         5b:86:f3:d4:60:10:b9:1b:5f:84:b2:42:f3:91:00:ae:44:03:
         93:15:c7:f4:ad:80:f5:e7:53:38:6b:a1:3d:04:ef:fe:49:40:
         a6:10:79:a3:c5:6a:99:18:b9:fc:6d:2d:1e:a7:6d:a7:02:ef:
         06:36:97:89:51:b1:4c:57:76:d5:88:8b:83:c3:97:06:cb:25:
         88:5d:ca:3e:4d:08:e9:d3:2f:63:e4:74:7f:88:5a:02:e4:09:
         6e:3c:c1:0e:a4:43:b7:4b:4b:d4:0f:c0:93:ae:83:3e:c7:92:
         d9:f3:c7:28:7d:2f:d5:09:15:ed:f2:a0:16:81:9d:77:7d:ad:
         6a:9e:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:00 2025 by rpki-client