Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DD00CA4768611F08998521AC4F9AE02.roa
File:                     0DD00CA4768611F08998521AC4F9AE02.roa (raw, json)
Hash identifier:          c8y89LyG6b+250uspuDTEMcZBqvjFij/jxS159cZxHs=
Subject key identifier:   06:50:36:08:7A:79:99:1C:A0:1B:F7:C3:FC:F2:1F:58:BA:34:37:41
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       360F
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DD00CA4768611F08998521AC4F9AE02.roa
Signing time:             Mon 11 Aug 2025 07:37:38 +0000
ROA not before:           Mon 11 Aug 2025 07:37:38 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     138160
IP address blocks:        103.230.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13839 (0x360f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Aug 11 07:37:38 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68999dc2-119f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:60:33:25:84:2f:3f:41:6a:75:5d:55:b6:
                    c1:0a:3c:6f:86:96:66:8d:34:48:93:49:63:f8:dc:
                    57:48:43:5c:67:0e:05:9b:77:e5:51:51:8b:67:e5:
                    4b:80:a2:4f:f2:f6:f4:a1:34:9c:ce:18:69:2b:70:
                    92:59:59:10:25:af:5e:e5:1d:ef:06:29:da:1e:3c:
                    42:06:0d:a6:db:23:ed:64:a6:e6:42:fa:d1:2c:55:
                    15:92:f4:81:a0:a4:bc:72:25:39:5d:8d:70:9e:29:
                    4c:6a:0f:fd:83:00:93:4e:62:f0:9a:b8:75:73:81:
                    81:7b:51:7e:3f:95:53:82:35:bb:a2:73:0a:dd:1f:
                    40:39:ec:c6:53:2a:6e:b0:30:d1:f2:f6:ae:e2:7f:
                    95:a9:c1:08:2a:28:3d:0e:2a:06:2d:02:c4:6b:7b:
                    f7:a2:a2:ab:24:75:ee:a0:e4:37:3b:8e:5d:71:4c:
                    4e:f0:1b:64:d1:4d:bc:85:6c:d7:36:36:f0:f5:ec:
                    5c:07:d7:17:4d:1e:c5:cd:a9:e1:0f:24:57:ac:a0:
                    f2:da:52:c2:df:a3:c9:5a:c3:9e:49:7b:0f:ca:c6:
                    a8:47:55:ae:db:23:48:81:b8:ea:db:cf:d3:64:77:
                    5a:3c:45:c3:d7:36:68:79:db:8c:04:64:29:18:af:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:50:36:08:7A:79:99:1C:A0:1B:F7:C3:FC:F2:1F:58:BA:34:37:41
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DD00CA4768611F08998521AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:2b:8f:f6:f3:fc:fa:ac:b1:51:fb:5c:cf:db:95:93:04:
         2d:ca:e3:7a:36:41:f7:b1:c4:7b:01:74:ba:38:05:01:22:54:
         34:24:c9:23:1c:a8:85:8e:24:38:12:29:68:1d:f3:47:60:f8:
         b5:d4:33:d0:50:32:d0:8d:00:49:37:55:93:e0:1e:55:5a:d6:
         0f:a3:66:d7:80:52:73:de:4a:6e:ec:e2:41:db:3a:0e:38:fd:
         6a:0a:20:d4:ad:17:bb:b0:25:80:76:e7:ad:80:76:a2:7a:c8:
         76:e1:f0:11:c4:1d:a0:1d:84:70:20:97:50:9f:e9:59:bb:a7:
         65:52:0d:5f:39:97:e5:a2:2a:19:7e:74:cf:56:50:3f:1f:6a:
         a6:40:77:aa:06:bb:64:35:bb:cc:d9:83:62:dd:07:c3:73:c3:
         df:30:cc:34:77:33:50:bf:09:b1:63:49:39:fb:e4:db:6d:35:
         79:52:a8:14:ee:e1:86:dd:27:54:0b:78:90:cc:07:2b:34:8c:
         0a:3c:55:46:4b:c4:c8:f9:68:4b:cb:e8:ff:4b:25:51:e0:75:
         c9:31:7e:a2:f1:76:f4:00:f2:00:8f:71:93:b3:e2:ac:77:8e:
         74:33:aa:6a:55:8e:cb:5f:cb:b8:0e:28:cd:59:33:b3:84:03:
         b0:82:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:29 2025 by rpki-client