Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/937AFB607E3611EEAD05495AC4F9AE02.roa
File:                     937AFB607E3611EEAD05495AC4F9AE02.roa (raw, json)
Hash identifier:          0v3ssTpGYmDhNqBqiZ+NsO29KdOi8s2cwnExbbi6d8Y=
Subject key identifier:   C5:C2:23:5A:83:49:71:6D:03:7B:20:31:53:DF:54:39:10:0C:0A:CD
Certificate issuer:       /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial:       02DB
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/937AFB607E3611EEAD05495AC4F9AE02.roa
Signing time:             Sat 05 Jul 2025 02:09:46 +0000
ROA not before:           Sat 05 Jul 2025 02:09:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58057
IP address blocks:        103.190.102.0/23 maxlen: 24
                          2001:df0:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
                          rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
        Validity
            Not Before: Jul  5 02:09:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68688969-a7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:88:6e:04:9b:e5:7c:65:e5:5a:06:a8:b8:
                    fc:51:05:ab:e2:e6:96:66:10:ae:c6:40:18:3d:65:
                    a6:43:e6:7b:10:7d:26:8b:8d:7a:28:a3:48:2e:4f:
                    bc:f2:b2:f7:4b:de:29:fb:1c:c6:97:15:46:a3:1b:
                    53:56:a6:a1:ee:b4:c9:eb:80:8e:46:f1:40:10:49:
                    fd:bc:47:09:3a:42:72:1e:0f:c8:f4:6c:a7:7d:2b:
                    39:b6:92:d2:e5:2d:a3:be:5b:49:4e:70:e2:f9:6d:
                    40:0f:43:dd:c8:09:fe:27:53:08:80:12:97:6f:31:
                    b5:5e:f3:b0:00:f8:31:75:69:59:21:25:9c:c8:76:
                    85:d2:89:44:04:36:f4:62:ad:56:d9:b5:6c:4c:41:
                    65:4e:07:a5:d0:d7:9a:54:84:21:c0:03:a0:d2:74:
                    b7:c7:cb:68:09:22:f3:2c:59:1a:b1:cc:6e:5a:21:
                    75:e3:00:ab:d8:21:df:38:8c:a6:98:b4:87:de:b2:
                    f6:f8:87:b9:6b:2c:2c:a9:39:ad:6b:06:21:62:c6:
                    81:e2:69:9c:98:f4:58:b5:b6:4d:54:f4:bb:62:ac:
                    2b:23:03:f3:18:b1:99:c5:01:c7:f0:1b:6d:da:93:
                    ef:f8:e8:10:d5:c6:88:bb:e2:78:7d:e5:28:aa:6c:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:23:5A:83:49:71:6D:03:7B:20:31:53:DF:54:39:10:0C:0A:CD
            X509v3 Authority Key Identifier:
                keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/937AFB607E3611EEAD05495AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.102.0/23
                IPv6:
                  2001:df0:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:8b:9d:3f:9b:dc:34:d4:33:81:c3:7c:0e:25:43:16:4c:
         1d:9f:a4:fc:40:37:cd:7e:af:5c:b6:48:b0:66:ea:5f:36:8a:
         b0:7e:ce:67:d6:d7:43:b6:20:38:fc:72:b5:90:90:14:0b:25:
         91:53:b2:f9:53:aa:c4:17:d1:76:64:53:ad:83:d5:db:ad:bf:
         de:d2:f4:0a:4a:ef:37:b3:f2:1b:34:c4:69:d1:13:04:9b:20:
         24:a7:23:7f:e1:75:fe:4d:39:c4:d7:b7:a3:3d:fd:5a:35:e9:
         6a:ac:44:93:31:5c:68:f4:69:43:07:a3:7c:da:5d:68:49:c4:
         e1:65:c9:af:20:1a:58:9a:01:5f:ba:b1:9e:21:e2:41:82:52:
         cf:c6:f9:fe:70:e4:d8:33:05:64:d5:a1:6e:f6:7d:9d:52:ef:
         04:a9:0d:f0:44:48:e9:23:fd:42:d0:9c:5f:7a:c4:b9:45:f8:
         21:c6:f3:21:97:24:44:e4:f5:41:10:c5:c7:ea:a5:e6:b5:1d:
         7e:eb:d9:3f:05:76:95:37:8c:ec:d9:83:28:92:f2:b1:f0:2e:
         20:8c:f4:ff:a9:39:26:ea:c2:1e:8b:36:87:6b:e0:d2:e1:c4:
         f0:34:fe:00:52:29:0f:a2:25:9d:f5:e2:4c:70:2d:32:15:b7:
         2c:da:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:06 2025 by rpki-client