Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
File:                     79A8653C32AB11EE8EEB9940C4F9AE02.roa (raw, json)
Hash identifier:          mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=
Subject key identifier:   10:07:0C:B7:A6:EA:F2:DD:51:4C:73:23:93:3C:92:56:53:12:C4:33
Certificate issuer:       /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
Certificate serial:       0185
Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 04:09:49 +0000
ROA not before:           Thu 21 Aug 2025 04:09:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151644
IP address blocks:        103.247.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl
                          rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
        Validity
            Not Before: Aug 21 04:09:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a69c0d-00c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:78:e0:02:b7:c4:d3:c2:17:1d:c0:da:ba:
                    c3:cf:8e:4b:ab:41:0a:ba:95:15:c7:8a:cf:61:20:
                    aa:47:9d:9d:01:6e:93:fc:ed:b5:38:a1:80:47:02:
                    48:56:5e:c8:5a:bd:dd:3a:8f:b5:79:4e:6b:e1:61:
                    cc:c2:75:bb:e7:6c:39:1b:18:48:01:e2:45:df:3f:
                    c2:9c:8b:69:ad:78:d9:6a:db:4f:c9:81:32:34:e9:
                    8b:74:e8:3b:16:30:3c:10:6c:92:72:49:59:7a:39:
                    c1:9d:74:c2:27:45:ce:4b:58:ab:4b:aa:f8:68:ca:
                    dd:c8:8b:b0:2d:77:64:47:67:18:83:d0:6c:15:86:
                    65:01:a6:d5:1d:3a:25:7e:a0:9e:95:ac:ce:5d:de:
                    e0:bb:0c:ac:e1:12:ed:1e:b6:5d:9f:18:d3:cf:d1:
                    4e:4f:32:47:b4:ee:c6:06:2c:a6:49:35:a4:07:3b:
                    47:de:47:01:5b:c3:c7:22:a6:b4:aa:89:4b:b0:c9:
                    f2:1c:0b:83:52:f9:dd:46:2e:f6:83:a7:3c:7c:1f:
                    a9:c6:af:ac:d0:ca:5a:40:a7:06:1e:b6:c0:c5:c5:
                    25:fa:79:da:90:c7:79:e0:ec:6e:43:94:05:f9:3b:
                    72:0f:2a:55:7e:da:43:02:1e:b4:c1:02:50:90:54:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:0C:B7:A6:EA:F2:DD:51:4C:73:23:93:3C:92:56:53:12:C4:33
            X509v3 Authority Key Identifier:
                keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:83:56:8b:52:ce:ee:2a:31:25:b9:b5:73:dd:09:8e:50:b7:
         da:8a:1c:44:fc:4e:65:04:5c:ea:74:c6:bd:40:3a:f0:2f:8b:
         c5:d0:24:38:39:d4:b4:28:bc:a9:97:52:ae:7e:4f:74:f4:df:
         3d:f1:15:31:b2:4d:24:bc:02:30:5c:cd:83:df:5b:2d:37:15:
         6f:cf:28:d6:10:3d:e6:df:ae:02:6d:7a:d0:8f:47:cd:08:b7:
         9a:bc:ea:ee:16:92:48:c1:c3:68:cd:e6:5a:79:72:6c:d5:3e:
         6c:93:39:bf:39:bc:f0:a7:15:7a:9d:94:60:c2:93:19:30:d2:
         41:05:b0:da:51:e0:c5:38:a3:f2:44:88:50:fc:dc:3e:35:e7:
         48:a5:fd:6d:7a:da:3b:1a:9b:ca:56:bf:14:b9:8e:2a:09:38:
         d5:79:ac:91:0b:61:e6:b7:21:d9:89:80:f8:cf:c2:5d:a9:47:
         95:21:e3:1f:5a:a2:ad:6a:28:38:e9:ad:15:9b:2a:3c:99:25:
         75:af:a4:39:72:b9:c1:15:9f:3d:8a:a6:5c:7b:38:cd:64:50:
         d4:6a:c7:65:96:ad:d7:f4:ec:0d:1e:8d:81:20:aa:9d:a6:9b:
         12:e6:1a:24:d8:89:cb:c8:58:4d:f1:9d:40:52:20:6c:ca:45:
         ff:f9:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:57 2025 by rpki-client