Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa
File:                     06D647D4057811EC8BCE3783C4F9AE02.roa (raw, json)
Hash identifier:          iQTk2jCAJ3kd1RvRS4R0lxcz1Fp4oO1bRr4X9vh6Reo=
Subject key identifier:   20:CF:81:85:58:E7:16:84:F5:33:89:E8:61:39:D6:DE:51:F3:D2:DB
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       054C
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa
Signing time:             Mon 25 Aug 2025 00:04:35 +0000
ROA not before:           Mon 25 Aug 2025 00:04:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138926
IP address blocks:        103.170.178.0/24 maxlen: 24
                          103.170.179.0/24 maxlen: 24
                          2001:df7:2380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Aug 25 00:04:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68aba892-893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:7d:b5:c2:0b:9c:c2:2a:72:f5:2a:1f:e7:
                    15:2c:a0:ac:74:db:64:2b:0d:a7:0a:26:de:f7:b7:
                    16:48:cf:89:45:c7:e2:71:fd:65:0c:10:72:59:e1:
                    2d:37:9d:00:ec:79:bc:3e:aa:5d:76:3e:08:d1:31:
                    c0:45:71:f7:9d:d7:e6:ec:72:9b:b2:fe:63:71:1b:
                    8f:8a:41:e3:6d:5b:59:70:37:37:51:86:a2:83:21:
                    04:ac:da:4d:a9:ae:8c:62:68:a4:78:2f:02:ca:1a:
                    d7:53:90:ef:ff:4a:cd:ca:7d:9c:e2:cc:0c:7c:84:
                    45:95:f2:d7:49:83:2d:cc:67:c4:49:50:9f:d5:de:
                    59:65:c9:6c:8d:47:20:99:f3:72:02:17:ea:c1:79:
                    33:03:90:fc:04:de:69:71:2c:73:04:3a:1a:a4:34:
                    69:a7:01:f0:bb:27:e1:d6:5d:98:cd:c5:50:30:ec:
                    48:bd:3b:a3:14:40:50:8f:c8:a1:a5:d6:be:b4:94:
                    5b:27:6d:01:b2:83:5c:a1:76:dc:d1:c4:a7:ea:64:
                    8e:9f:30:37:ba:ce:e2:3c:48:91:7f:4b:ec:45:6c:
                    37:ef:98:16:1d:34:0a:5c:41:39:d6:ef:75:31:d3:
                    10:c8:cd:68:97:6d:c8:51:38:76:bf:11:2b:c6:b0:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:81:85:58:E7:16:84:F5:33:89:E8:61:39:D6:DE:51:F3:D2:DB
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.178.0/23
                IPv6:
                  2001:df7:2380::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:2f:0c:de:9a:75:b4:d4:5d:8b:ff:be:05:ee:45:c0:45:
         07:f4:e0:7a:e7:e1:09:19:c1:f8:7b:6b:94:e0:47:cb:08:76:
         41:b1:7f:f4:82:84:b1:d1:11:13:72:7c:27:43:39:c5:7a:7c:
         81:7a:2d:66:59:69:ec:e0:65:68:17:2b:13:ce:7c:7d:bb:b0:
         4c:43:3a:1b:a6:69:98:24:22:85:73:fc:69:28:e6:a7:bf:2a:
         d3:44:2a:96:b1:ea:d6:8f:82:bb:47:6b:72:11:75:72:8e:6d:
         cf:7c:78:eb:54:9f:71:de:31:ba:fc:d9:60:c2:8d:f8:eb:fe:
         f7:c1:a7:a5:e0:be:76:44:60:d8:73:c5:ac:9f:41:9e:41:c1:
         61:fd:36:6d:aa:06:7a:f6:b0:3e:f4:a6:f2:4c:31:2f:02:ed:
         67:f1:8f:cf:13:a3:b4:99:f7:98:8f:57:f0:61:75:84:98:d2:
         98:ff:e6:27:ff:69:e6:ab:55:8f:6a:9e:12:32:5f:83:de:47:
         ad:70:04:6a:f8:46:c6:c7:4d:72:6a:0f:fe:16:32:8c:f0:a4:
         5d:24:3b:de:9a:f3:a3:9d:88:a7:fe:62:63:a4:63:31:87:29:
         8d:f1:47:ac:d6:72:36:95:b8:8a:7d:2a:f0:bf:52:8d:8d:ac:
         b3:6d:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:02 2025 by rpki-client