Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa
File:                     993EAAD4522911EFA600C035C4F9AE02.roa (raw, json)
Hash identifier:          1rxTRx00g7mzqt5brNlauI0eIjIAqtvwJViBr5z6wUY=
Subject key identifier:   CB:E5:31:A4:36:3E:2F:DD:76:DB:B4:52:5E:67:16:12:F4:8E:F0:78
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       074E
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa
Signing time:             Sat 28 Jun 2025 22:41:24 +0000
ROA not before:           Sat 28 Jun 2025 22:41:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58717
IP address blocks:        103.165.159.0/24 maxlen: 24
                          202.94.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
                          rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Jun 28 22:41:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68606f93-ce36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:2b:2a:5b:55:93:97:03:ea:de:2c:ba:57:
                    2d:37:2f:ff:f1:e1:48:75:26:dd:3b:c3:c6:bf:47:
                    f1:11:b7:1d:32:7c:44:fd:11:71:3e:74:6f:a7:20:
                    57:2e:86:51:b3:28:cc:33:e2:52:a7:03:ff:e5:34:
                    cd:fe:5f:79:68:c5:dd:7c:19:ba:10:5e:e0:d1:f0:
                    2e:7a:be:57:ef:c1:68:3f:ef:26:5b:95:3f:2e:49:
                    51:5c:f3:cb:15:08:3c:9a:3f:a2:47:be:05:83:03:
                    c4:05:40:2b:20:87:e1:c1:10:2b:b1:1b:9e:25:91:
                    ff:e1:58:09:5d:3c:28:6e:c8:40:70:72:68:26:2b:
                    ed:60:c5:a9:b3:d1:28:18:1e:6b:d0:6f:77:28:25:
                    04:63:e1:fd:a0:48:83:4a:59:cd:fa:6c:1d:d5:4c:
                    f8:d1:4c:45:54:b6:d5:9f:73:f3:98:43:8c:d2:11:
                    92:cd:70:08:f1:64:27:e1:3a:49:40:ed:e0:43:2a:
                    25:8c:e4:f0:98:66:df:ed:2d:5d:2c:b6:95:92:41:
                    17:a6:43:3d:37:52:cf:b4:14:38:46:18:88:84:71:
                    e5:9b:08:23:f8:91:94:90:b2:6c:a3:ea:2f:14:aa:
                    89:8b:ba:dd:48:45:d4:67:35:f2:f5:cf:89:92:2a:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:31:A4:36:3E:2F:DD:76:DB:B4:52:5E:67:16:12:F4:8E:F0:78
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.159.0/24
                  202.94.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:97:5e:be:5a:55:32:b6:86:45:da:a2:0a:64:da:5f:21:11:
         82:e2:dc:11:90:71:a2:50:e2:d1:88:07:6b:eb:0f:33:c0:a6:
         47:7d:84:7f:6e:04:2b:92:21:48:63:65:15:b6:f2:4a:d3:16:
         a5:70:9e:7b:13:9c:40:78:d0:5f:81:ae:64:81:38:89:f4:33:
         a1:11:1a:5b:b2:74:64:ef:54:24:0b:b5:29:21:33:81:92:bb:
         29:a0:0e:bd:34:b8:58:6c:33:79:0e:eb:99:6a:60:77:a8:cf:
         a3:4d:19:20:51:a0:31:13:15:5b:2d:e5:7b:c0:a7:9c:fb:9c:
         22:92:89:02:f8:e4:17:d0:14:95:0a:1c:bf:59:af:ac:cd:dd:
         59:48:9d:aa:03:ff:49:2c:89:39:ab:45:b1:e5:55:a7:43:1e:
         82:e4:d6:3d:fe:42:95:a9:fd:0c:9e:03:04:7e:72:0b:65:42:
         a6:e6:73:aa:14:1b:8d:6d:a2:19:a7:09:a6:c4:1c:70:1e:53:
         b2:0b:44:d5:1e:ef:5e:5a:15:f2:dd:f7:e2:13:ad:aa:d6:20:
         bc:65:c8:1b:a0:98:81:d2:1f:c0:dd:4b:89:50:6b:9b:88:00:
         92:33:66:39:15:e9:48:a6:2a:e9:87:cf:b1:d4:7f:24:da:48:
         3a:d2:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:03:01 2025 by rpki-client