Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
File:                     919ECCA8412C11F09E17FC56C4F9AE02.roa (raw, json)
Hash identifier:          bx4OdIF/hMTyewKQzRXbYDvV0LVN5invBqXfdlpkEUg=
Subject key identifier:   44:82:27:03:7A:7A:84:C4:25:9D:D8:01:F6:32:1C:F1:91:F3:65:F5
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       073C
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 10:13:33 +0000
ROA not before:           Wed 04 Jun 2025 10:13:33 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     141423
IP address blocks:        103.159.0.0/23 maxlen: 23
                          103.159.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Jun  4 10:13:33 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68401c4c-7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:47:ad:05:49:4c:a4:66:cb:b2:18:75:3f:
                    31:9e:d3:a0:05:96:79:5c:24:06:51:f2:f2:d7:3b:
                    9d:b5:24:60:ef:81:cc:b9:6e:c3:9c:b2:6a:28:7b:
                    ee:5b:83:b8:c8:52:ab:83:02:37:80:76:63:14:4c:
                    63:fe:8b:91:61:8e:14:59:06:cf:bb:43:8c:bb:aa:
                    19:b0:0e:ac:53:e0:c3:f4:e1:20:6e:d3:d3:17:31:
                    46:bc:7b:34:8c:d0:a6:e1:2b:51:27:d8:6b:35:c8:
                    d4:49:28:6f:58:c8:22:9a:0a:c0:1a:d2:3f:d0:db:
                    7b:a6:27:f9:76:2b:3f:ea:08:6d:49:a1:c5:7e:49:
                    93:d6:a7:bf:c0:55:97:bb:82:3c:54:d1:bd:9e:a5:
                    45:53:5a:81:3b:54:e9:9a:96:e7:f3:9f:43:25:9d:
                    56:4a:cd:d9:8e:64:03:9f:6d:a1:2e:9f:45:88:d0:
                    95:51:9e:e7:60:b9:53:de:62:c8:c2:87:09:bd:34:
                    42:eb:61:f8:46:d6:c9:30:f9:b8:11:41:44:dc:f9:
                    48:f0:d6:4b:2a:72:c9:cd:b2:33:59:99:d6:cd:4c:
                    a6:e8:59:e0:39:1f:4a:8d:5c:e3:54:42:dd:4e:8d:
                    5f:c0:fd:cb:d4:30:35:7b:cc:45:a1:45:9e:3b:dc:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:27:03:7A:7A:84:C4:25:9D:D8:01:F6:32:1C:F1:91:F3:65:F5
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:4e:3f:2e:fd:75:52:4a:b2:37:6d:d9:97:12:d7:ab:1f:
         f4:8b:fb:b2:36:83:8b:8f:aa:ab:47:1c:d3:81:f4:34:6b:d9:
         c7:cb:e5:cd:9e:63:11:aa:c2:4f:e8:67:89:53:29:9c:a6:db:
         ef:ba:22:f0:f9:d9:ba:33:a9:88:5a:b1:e0:c2:0c:e3:7a:d3:
         3e:fa:68:8e:a7:34:33:cf:77:ff:9f:90:ba:db:c7:0f:b8:a5:
         91:09:88:a3:82:55:a7:6d:ea:fc:0c:81:ab:12:38:09:b7:df:
         08:6d:f1:d4:02:37:43:6a:a6:6f:33:e8:62:e3:0b:b5:e6:29:
         7c:b8:3a:81:43:78:df:a4:bc:4a:8c:92:fc:0d:6e:38:1e:7d:
         e8:6e:dd:f6:0b:1c:04:6d:9e:03:a0:d7:1a:ea:7c:5c:92:a6:
         79:f3:a1:4a:46:83:74:8b:10:60:20:0f:5f:42:90:1a:f1:24:
         02:c1:33:aa:e1:99:14:11:c5:e1:3c:d4:14:0c:eb:64:e5:fc:
         90:70:44:4c:e7:e7:9a:d4:8a:4a:59:47:0b:07:92:2b:e2:47:
         3d:b0:cc:11:2c:02:04:24:28:23:c3:72:9c:47:57:1c:ed:4f:
         02:6f:6e:15:ba:0f:e4:b7:7d:29:7c:8f:52:58:b2:9d:75:ca:
         6e:67:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:24:07 2025 by rpki-client