Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
File:                     7893F3DC0B8511F086B2C121C4F9AE02.roa (raw, json)
Hash identifier:          iYf3jZc2jKBrmv31rxXM38VJ1nI1w/3LYJauL+zzxXo=
Subject key identifier:   83:F4:6C:85:A6:19:F1:04:7E:7F:10:4B:BA:4D:45:C5:DA:22:B3:59
Certificate issuer:       /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial:       019C
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 04:12:01 +0000
ROA not before:           Wed 13 Aug 2025 04:12:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     398704
IP address blocks:        103.233.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
                          rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
        Validity
            Not Before: Aug 13 04:12:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c1090-cf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:d2:fc:0b:a6:47:e4:17:6b:98:5f:cc:df:
                    63:2a:00:9a:34:b6:b4:05:46:84:47:41:43:3d:27:
                    63:fd:ab:5b:54:9c:fb:b2:a2:e7:95:c1:2b:e4:b8:
                    53:75:15:c9:f2:16:82:60:4c:eb:44:58:26:2c:d8:
                    69:fb:f1:da:da:1f:86:7c:99:49:32:52:67:d7:0b:
                    50:a9:ed:1c:c8:03:e1:79:e9:8d:ee:83:6f:25:c5:
                    59:09:e7:74:53:68:46:b6:58:01:00:c9:26:12:7b:
                    92:8b:bb:19:f1:0b:1c:71:dd:fe:2f:8e:c9:c4:09:
                    e6:ee:41:55:37:38:99:3e:a3:34:bc:9a:66:9f:3f:
                    4a:77:af:71:8b:c7:97:2b:00:b9:a0:a2:c9:9b:cc:
                    12:64:1a:af:2d:44:94:56:78:56:8a:2d:bc:0d:54:
                    6e:96:63:23:71:ae:6d:a2:4d:0c:86:b4:72:1f:88:
                    77:e8:dc:ec:b9:c3:ab:db:df:46:f0:6e:84:34:af:
                    68:5f:32:60:d1:a1:22:26:56:79:66:0a:2e:b8:6b:
                    b8:38:d8:59:cd:98:bf:b4:39:53:1a:c0:4f:ad:11:
                    75:aa:a6:94:31:00:5b:00:eb:fb:72:25:46:04:d3:
                    ab:22:b9:d5:31:1e:6c:9c:9e:81:8b:73:5e:b4:c9:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:6C:85:A6:19:F1:04:7E:7F:10:4B:BA:4D:45:C5:DA:22:B3:59
            X509v3 Authority Key Identifier:
                keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/7893F3DC0B8511F086B2C121C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:1c:c2:96:2a:a4:dd:bd:91:ef:ef:ee:16:6c:cb:11:c1:
         fa:69:fb:57:3b:e4:ba:e3:e4:02:3c:75:ec:d5:b6:64:d7:59:
         3a:48:76:43:03:2e:d0:e9:de:58:f0:c5:03:a2:06:58:e8:86:
         6e:be:83:b7:9d:7d:77:0c:f9:23:e7:68:9f:e0:44:7b:00:17:
         94:91:ca:ff:dd:d5:5d:69:93:04:ff:e8:1d:72:49:1b:d7:92:
         35:ff:db:ff:0b:b6:b0:bd:ac:1b:7e:ca:64:22:4d:64:5a:8a:
         75:07:29:c7:47:bc:24:e8:41:08:1c:f5:38:f9:c2:9b:1b:8c:
         f7:0f:d3:34:d2:5e:51:a1:a4:41:22:24:d5:f9:b4:ef:23:02:
         6a:87:c8:d1:2a:71:25:04:ad:b9:f6:56:e6:74:f2:3c:8c:02:
         24:48:ba:39:4b:d5:4b:7c:1f:bc:fa:00:01:22:e8:09:57:0c:
         32:5b:1f:9f:da:92:74:11:80:69:75:20:cd:0b:05:01:36:b9:
         87:8d:16:bb:e1:c4:00:7f:d4:68:1e:e8:d0:6d:21:78:14:4e:
         91:49:e4:97:7b:36:0d:dc:2a:dc:6d:d2:01:ee:81:cc:fd:53:
         d5:03:3d:68:66:35:ee:19:25:9d:d3:5d:61:e3:bb:e1:85:cc:
         65:5f:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:16:29 2025 by rpki-client