Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/55D339CA493411EF859C1D49C4F9AE02.roa
File:                     55D339CA493411EF859C1D49C4F9AE02.roa (raw, json)
Hash identifier:          jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=
Subject key identifier:   22:E4:2C:AB:22:60:16:15:12:81:F6:E1:A1:F3:79:73:39:97:C3:A6
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       34C7
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/55D339CA493411EF859C1D49C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 14:50:48 +0000
ROA not before:           Sat 02 Aug 2025 14:50:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135291
IP address blocks:        103.212.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13511 (0x34c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Aug  2 14:50:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688e25c8-156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:18:72:02:8c:80:68:86:36:a5:7f:17:6f:
                    10:ab:20:9f:6b:00:a3:53:61:88:c3:36:9a:22:48:
                    ce:27:c2:24:0e:b6:58:0b:3c:ee:89:2b:f9:98:ea:
                    2f:6a:f3:c6:1d:60:35:3b:5a:d3:8f:63:c1:48:a4:
                    e4:ec:44:f7:83:4e:2e:6d:a5:35:be:d3:13:44:d6:
                    bb:f2:a5:3c:36:51:11:9e:e2:46:77:ba:17:38:eb:
                    09:cf:bb:0c:58:9f:e5:8c:e4:f6:1a:ba:dc:ed:80:
                    a4:02:10:01:2e:fb:5e:86:50:b5:62:2e:9d:fa:d5:
                    4f:f9:87:cd:31:0a:61:77:f4:45:b7:4f:e7:a6:77:
                    83:f4:79:c0:c2:28:f2:50:6e:b2:17:dc:d8:39:59:
                    fa:ed:7c:bd:ef:38:a6:a5:fa:02:e8:87:ec:1a:f2:
                    3a:2a:d8:23:2a:ce:6b:86:3a:e8:5f:61:28:68:b3:
                    a2:13:68:f8:a2:35:0c:e8:00:84:e7:1d:65:67:8c:
                    8a:36:89:12:fb:eb:8a:7d:b7:1e:a4:c7:f6:61:ea:
                    ab:1c:f8:57:89:7f:63:3f:60:b2:30:18:db:98:36:
                    00:01:ea:a4:3e:a0:10:c4:8f:b9:bf:f2:92:b3:ab:
                    5e:c7:73:8c:d1:71:5d:ca:2f:c3:7f:de:17:fe:0a:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:2C:AB:22:60:16:15:12:81:F6:E1:A1:F3:79:73:39:97:C3:A6
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/55D339CA493411EF859C1D49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:cf:ce:0a:fd:b1:f1:11:93:db:ba:fe:ed:a9:ef:3f:14:
         3b:2e:c3:8f:47:1d:9d:43:e6:36:d9:7c:a5:f2:94:53:f8:9d:
         4e:a0:c0:41:d0:cb:cf:f8:d7:4a:f8:96:31:7d:6a:20:6f:0a:
         4d:7c:55:18:8a:00:a6:36:b4:52:58:7c:11:63:21:36:4e:e1:
         98:6d:f4:11:e4:c2:74:f9:90:86:cb:91:16:3e:10:6d:5c:cd:
         43:52:9b:c0:f8:11:99:71:50:a5:39:26:99:2b:9c:90:fd:b3:
         0c:db:f4:b1:83:89:22:43:e0:a9:f8:f2:8a:68:12:34:96:c4:
         7f:05:f9:19:d8:93:16:a6:48:42:f3:88:52:d9:31:1a:98:bf:
         16:dc:19:b2:83:08:81:cf:b0:2c:fa:43:4f:d7:a5:6a:54:7e:
         c9:36:f4:7f:22:3f:6a:b7:28:53:ee:51:a1:da:c7:11:8c:73:
         7b:b3:43:9e:d4:bd:56:c2:cc:de:a3:88:71:d7:c6:6a:04:f8:
         66:df:b9:bf:e9:98:d0:56:a7:a0:43:95:ad:d6:7f:78:6a:7d:
         81:3b:5f:f6:70:0e:14:8a:32:da:68:7d:07:49:e7:67:f4:e0:
         d5:8e:99:61:28:6b:df:7c:e7:15:fc:50:ed:9e:f1:a5:04:3c:
         dd:78:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:46 2025 by rpki-client