Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
File:                     ACC8D92C543611EEA8C54616C4F9AE02.roa (raw, json)
Hash identifier:          TISzTSrE5qXOmFnb4u2BfIGDXSoPkQaTpa16UDl/rrY=
Subject key identifier:   7B:96:5B:F6:2D:5F:14:BC:B6:05:B2:4E:01:E9:AA:DB:A7:31:8D:78
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       02F9
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
Signing time:             Thu 11 Sep 2025 02:08:41 +0000
ROA not before:           Thu 11 Sep 2025 02:08:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139016
IP address blocks:        103.187.22.0/23 maxlen: 23
                          103.187.22.0/24 maxlen: 24
                          103.187.23.0/24 maxlen: 24
                          2400:7920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Sep 11 02:08:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68c22f29-6e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:b1:fa:d4:5e:02:64:dc:c2:be:63:80:cb:
                    ba:e5:d9:28:cb:0e:3d:95:08:29:11:1d:0a:38:eb:
                    64:36:7a:c8:77:21:2c:7c:f3:19:b1:d6:ad:70:f4:
                    80:a2:ce:06:7d:ac:62:ff:6d:8a:c0:36:3d:c3:8e:
                    be:e3:0d:a3:2a:93:40:97:51:71:d6:9a:75:e4:8b:
                    27:6c:83:11:16:0c:97:1e:11:44:d3:da:a8:1b:cb:
                    3c:15:e1:36:a9:f3:18:61:15:09:48:4e:fa:a9:f1:
                    f4:82:95:af:26:4a:66:c0:0f:08:fc:14:f5:7c:90:
                    fa:4b:a7:b9:65:33:40:b5:7f:ef:09:f6:4b:9d:5a:
                    1d:36:d7:e0:28:0f:6a:8d:fc:c9:c8:69:ce:5a:9b:
                    d7:20:dd:b4:96:99:22:f0:c9:c6:21:47:b3:38:69:
                    f9:7a:82:85:de:63:00:e0:64:61:1d:8b:87:41:36:
                    17:d5:79:5b:00:60:82:6f:b8:62:f5:3f:b8:c6:4e:
                    73:b9:c5:5d:ba:24:a0:57:ea:94:c5:a0:bd:3d:2e:
                    2f:0a:4b:da:da:cf:3a:53:14:1a:50:b3:2f:b7:fe:
                    10:88:63:34:74:40:91:0a:c1:5e:3f:f1:45:b1:71:
                    fd:74:85:2b:ff:f0:f0:69:0e:92:62:74:78:b3:05:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:5B:F6:2D:5F:14:BC:B6:05:B2:4E:01:E9:AA:DB:A7:31:8D:78
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/ACC8D92C543611EEA8C54616C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.22.0/23
                IPv6:
                  2400:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:2f:36:38:d2:cf:a1:28:c1:18:64:e1:11:e1:ff:fc:73:
         ae:97:53:f0:b1:37:81:7e:e1:ca:ff:3b:c7:37:a5:2b:3c:8d:
         c4:7b:ad:50:d5:94:b3:d7:9c:d1:a0:c4:19:6e:af:93:05:d4:
         31:cc:ea:10:1b:3d:4a:3d:95:ef:30:7d:79:0d:31:28:90:0d:
         a9:4b:73:6a:27:21:41:32:cd:45:ce:0b:a7:7c:c4:f7:4f:73:
         f5:84:4b:07:c9:11:cb:a0:b8:0c:b3:84:83:27:53:19:5b:b3:
         f8:cb:86:eb:c1:bd:85:db:03:8c:a7:c8:e2:8f:a4:fc:20:1c:
         65:a0:2e:11:93:69:f3:24:af:bb:04:a0:af:1c:44:a3:1b:26:
         12:6e:f7:2f:67:bc:68:60:e3:df:7d:41:e1:e7:29:bf:fd:e2:
         83:bf:75:9c:b5:16:cb:e9:5a:ff:54:28:5f:aa:40:76:d3:3e:
         a7:12:66:e7:db:21:84:23:89:cb:c4:ef:1f:57:13:c9:7d:8e:
         80:06:12:23:7f:3e:b3:0e:eb:b6:c9:38:67:9a:aa:6d:c8:94:
         f7:fa:d4:5c:a4:1f:31:11:8a:42:19:ca:fd:98:7c:32:7c:a3:
         07:77:5b:05:96:82:67:5e:4d:7c:c5:2b:b4:cc:bb:ad:c2:17:
         93:f7:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:10:17 2025 by rpki-client