Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa
File:                     44059B50B10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier:          tgzdjQtElpqaAs+NwGXD0CYNNYYww+x76UBm9x49LhQ=
Subject key identifier:   0D:4B:36:80:79:D4:08:5D:DA:25:68:8F:65:71:B2:9C:68:3A:12:0D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       239B
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa
Signing time:             Mon 18 Aug 2025 16:23:43 +0000
ROA not before:           Mon 18 Aug 2025 16:23:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132379
IP address blocks:        103.15.168.0/24 maxlen: 24
                          103.15.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9115 (0x239b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 18 16:23:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a3538f-8577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:57:7f:db:36:25:00:69:0e:64:40:d2:49:
                    31:0e:3c:10:3c:27:4f:07:44:95:bc:99:42:e6:9a:
                    cd:ba:7b:d9:7e:b7:f4:2a:5b:1f:91:12:22:15:9c:
                    6a:9c:09:d9:12:e3:d3:72:e0:35:c6:d7:45:f3:da:
                    10:2a:42:d6:be:6b:18:98:87:e8:1b:2c:49:be:70:
                    db:ee:4b:bf:a4:a2:20:82:3a:04:7d:8e:34:fd:30:
                    14:bf:fb:ef:f3:07:20:2c:35:e0:f4:b6:dd:d5:8a:
                    65:0b:55:a1:87:34:66:ad:89:b4:d8:47:37:9b:85:
                    0e:43:e2:06:dc:e2:e9:95:bd:88:3f:8e:57:ae:57:
                    bf:58:1b:32:2d:ea:3f:83:ed:60:ed:fd:2c:df:9d:
                    43:f2:e2:50:1c:e9:be:e5:2f:ae:9f:82:f6:4a:c4:
                    f9:7c:e0:c4:13:d8:88:bf:e5:fa:0e:7e:24:d6:c2:
                    e2:27:e8:24:07:ab:4c:a3:48:89:6b:21:40:39:c4:
                    18:35:42:e6:6e:94:cc:9f:f7:bc:9d:de:d3:5c:5c:
                    d3:81:13:da:15:b5:78:eb:12:5d:5f:3d:9c:56:4f:
                    e3:f6:9c:63:37:55:7a:4a:c9:9e:0d:af:f8:f9:49:
                    fa:d3:d8:14:42:92:d6:24:e0:70:51:ff:8e:f1:6a:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:36:80:79:D4:08:5D:DA:25:68:8F:65:71:B2:9C:68:3A:12:0D
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/44059B50B10F11E5A010921EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:29:61:24:3d:51:86:89:cc:a7:ba:f2:28:53:70:49:52:0c:
         64:14:57:5c:48:5d:0c:14:ca:77:35:2b:8a:14:79:36:60:54:
         c2:96:57:4d:68:06:72:99:59:d7:bc:c3:47:32:17:b1:71:31:
         19:f4:18:db:4c:d4:dd:52:ed:93:71:c8:b2:77:0d:8f:68:94:
         b9:80:ab:34:5e:40:4c:a5:2a:6c:e2:52:59:da:35:0e:54:86:
         3e:4a:db:01:67:e5:e3:59:27:0f:92:6d:a0:09:3e:86:60:42:
         c9:d8:6d:c0:0e:20:d4:1f:fe:5b:56:d9:c4:54:33:d1:38:4b:
         81:2c:b0:52:4b:ce:c8:c6:b0:b9:fa:ba:4d:eb:ab:e6:41:5e:
         44:f7:52:66:f4:cb:12:62:f0:e6:19:69:96:b8:77:62:cd:c3:
         24:91:9b:33:b1:b2:e5:6f:ea:6a:ec:aa:b3:23:42:c8:e0:f3:
         29:ce:49:db:60:b8:f8:2f:95:37:3f:b0:8e:a8:99:9e:0f:aa:
         c9:8b:87:65:cf:b4:25:14:b2:0a:13:40:6f:2b:80:37:4a:b9:
         b0:fc:49:fa:53:88:9b:26:12:5f:52:2b:0d:08:6c:1f:2b:ba:
         be:3f:9f:34:41:50:95:a7:93:30:2c:c6:79:e6:55:b8:b7:bd:
         90:e3:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:17:38 2025 by rpki-client