Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
File:                     2A162D644EE411EFB8076138C4F9AE02.roa (raw, json)
Hash identifier:          CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=
Subject key identifier:   8C:E6:E9:08:36:C4:7A:BD:C5:15:75:DB:3E:61:D7:70:B5:C0:44:30
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1348
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
Signing time:             Thu 14 Aug 2025 17:26:47 +0000
ROA not before:           Thu 14 Aug 2025 17:26:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        203.116.108.0/24 maxlen: 24
                          203.117.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4936 (0x1348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 14 17:26:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689e1c57-3e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:c7:b4:9f:c9:c2:07:3b:21:6a:04:1f:19:
                    d4:4d:e8:85:73:91:2f:30:19:fd:8a:82:25:8e:0a:
                    f0:e1:ac:1d:6a:f5:58:34:ea:be:75:07:fc:2b:ba:
                    31:6d:26:c7:26:40:07:3b:bf:48:25:2d:68:5e:f3:
                    d4:48:d7:8b:ec:ff:d3:97:38:d7:bd:b8:48:fa:61:
                    91:f3:1f:bd:de:88:af:f4:1d:ae:9a:a8:ac:f3:ea:
                    0c:3d:e7:7f:fc:f1:79:5f:27:1e:5b:79:8a:08:f3:
                    ca:b7:03:40:43:d6:04:da:1c:95:1b:6f:54:2c:7d:
                    9f:29:35:09:3e:e7:9f:3e:76:91:49:63:d9:89:6b:
                    97:50:8a:f6:61:da:f7:66:07:dd:1f:66:40:22:3b:
                    90:8a:ce:7e:36:b3:00:11:d1:19:34:91:31:20:83:
                    24:0d:74:91:67:41:d7:5c:d1:31:a1:e1:f7:84:f5:
                    db:f8:e8:34:ec:c2:88:c2:1b:5c:8a:53:c8:99:5f:
                    45:2e:a3:35:5d:cb:fc:b8:b2:8c:73:a9:f2:a8:fe:
                    36:11:6a:35:a3:2b:6f:7e:c0:91:59:e4:99:d2:10:
                    29:5d:0b:5c:72:81:42:da:c3:3a:9d:b4:0d:63:03:
                    91:31:bd:ab:fc:cf:5b:6e:d0:d8:07:c3:5e:40:88:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:E9:08:36:C4:7A:BD:C5:15:75:DB:3E:61:D7:70:B5:C0:44:30
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.116.108.0/24
                  203.117.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:e9:34:64:43:ba:8a:f9:e5:8c:fc:ae:ce:8e:b6:21:09:
         2f:07:fd:22:fb:71:7a:9e:f9:13:de:1f:60:6e:d6:18:73:56:
         e9:ea:fd:5d:8e:c8:60:25:84:c7:59:90:76:3e:22:58:a5:75:
         81:5e:37:d3:31:47:c8:62:4e:a4:7a:b4:0f:37:4f:de:18:cb:
         85:24:d9:1a:5e:55:1c:e9:a4:4d:6e:56:3f:b0:22:bf:b5:7b:
         2d:80:9a:bc:27:34:17:0f:6c:aa:35:b4:e5:24:f3:b5:08:7f:
         45:72:ba:ba:d1:aa:f8:ac:6e:4d:b6:e8:11:b5:7c:75:e6:57:
         a7:ad:44:ed:78:15:eb:bf:69:86:fa:e0:0d:ff:e8:d1:12:a2:
         6f:21:fc:15:6e:cb:4f:de:f0:40:52:34:c6:aa:9c:f0:88:29:
         b4:ab:26:ee:94:4e:2d:2d:cc:fc:01:66:2f:e1:12:22:fd:00:
         d8:8b:d0:91:fb:10:d0:1e:39:38:3e:ae:bf:3f:88:45:4e:6e:
         44:ce:42:f2:e0:7b:e1:17:61:96:33:c0:a3:b3:ab:4a:12:b6:
         91:73:18:02:d5:06:38:c8:06:27:a5:b4:ac:61:92:58:d1:19:
         df:e1:72:6c:69:07:5a:08:c8:55:81:1d:43:90:3f:aa:54:f5:
         79:70:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:59:53 2025 by rpki-client