Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/785EB284773D11F0AB969921C4F9AE02.roa
File:                     785EB284773D11F0AB969921C4F9AE02.roa (raw, json)
Hash identifier:          8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=
Subject key identifier:   87:35:09:4B:23:58:1E:1B:73:27:45:4C:12:BC:65:D2:36:E3:D0:FB
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       0480
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/785EB284773D11F0AB969921C4F9AE02.roa
Signing time:             Tue 12 Aug 2025 05:34:42 +0000
ROA not before:           Tue 12 Aug 2025 05:34:42 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     149050
IP address blocks:        103.177.122.0/23 maxlen: 23
                          103.177.122.0/24 maxlen: 24
                          2001:df0:21c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Aug 12 05:34:42 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=689ad272-7221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:b1:3f:f4:34:14:2c:e9:cc:06:ac:e8:5a:
                    14:79:ea:ec:b1:e0:12:f9:a9:22:bf:1a:a7:14:62:
                    b8:09:a6:fa:df:69:ca:da:7d:c3:2e:97:ad:aa:6d:
                    ca:c9:3c:62:da:3a:dd:91:b9:5c:86:06:c6:c9:34:
                    67:eb:75:cc:0a:e1:9c:47:97:60:f5:3f:59:5c:69:
                    c5:b7:8d:8e:64:1b:d9:a9:30:a9:a9:d9:fb:d2:e8:
                    40:22:50:86:64:5d:a4:7d:89:42:46:86:13:8d:e3:
                    ee:47:d4:b4:10:c9:54:21:37:d0:80:1f:64:8c:4b:
                    78:78:bf:70:f3:3e:4b:43:c9:ed:70:63:14:f0:e5:
                    43:ed:e4:77:12:91:bc:4b:46:fa:d3:07:bd:9c:8f:
                    5a:c8:57:c9:07:cb:b8:94:cd:b8:07:e3:45:83:0a:
                    9d:62:14:ff:21:3e:b1:10:c3:72:28:e7:9a:7c:e5:
                    7c:fc:b6:c9:d2:f0:16:5f:99:2b:d9:fe:9a:41:ed:
                    af:12:77:c8:52:b6:de:a7:1a:f8:a1:c0:04:15:09:
                    07:2d:7a:ce:4b:66:11:08:f9:ea:f9:e9:63:c3:cf:
                    c9:50:1c:d3:39:59:a0:69:fb:13:1b:75:90:06:1f:
                    47:97:c4:a5:98:1e:da:39:eb:56:0f:49:32:33:b5:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:09:4B:23:58:1E:1B:73:27:45:4C:12:BC:65:D2:36:E3:D0:FB
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/785EB284773D11F0AB969921C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.122.0/23
                IPv6:
                  2001:df0:21c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:28:43:87:d9:c2:e5:6d:25:4e:00:de:c3:cc:32:3b:1d:
         96:ca:6f:c9:57:b9:60:11:20:68:8c:76:74:f7:5d:7b:e1:4e:
         f3:cb:7b:28:d9:c2:fd:58:5a:db:d8:07:32:37:fd:af:ff:04:
         77:4b:22:3f:1d:90:cb:0e:ba:df:e3:3e:6d:4e:5f:e4:d8:ef:
         8d:2a:4e:9f:96:21:bb:25:85:db:30:40:cb:17:4f:e3:93:b6:
         4a:73:0a:a4:03:06:f8:78:05:ff:b1:bd:92:26:84:e4:7f:0e:
         f7:4d:16:62:aa:35:6e:49:85:95:6c:0e:81:fe:1a:3a:d6:ed:
         23:30:e9:cc:6f:ed:3a:4b:61:e6:e1:35:2e:cb:d2:6f:07:c7:
         df:c9:3e:c6:b0:87:f3:a7:92:80:df:64:b3:bb:be:f2:8d:0c:
         29:63:79:0c:69:2c:80:ec:dd:5c:0c:d0:54:d9:63:00:b2:07:
         68:39:e3:9c:89:dd:05:d7:6a:df:50:52:0e:01:9c:b9:e6:59:
         2e:d4:03:9f:73:f8:f4:1c:ce:5c:9d:1f:9a:fb:47:a3:20:b7:
         58:ee:69:b9:9e:70:2d:b1:a9:d8:ff:3e:7c:aa:07:79:5c:b3:
         e6:ea:8a:3e:4e:cf:82:48:15:8f:69:99:c9:60:3f:73:8f:9e:
         7b:70:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:41 2025 by rpki-client