Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
File:                     08CA5724E2B111E9A73CAB51C4F9AE02.roa (raw, json)
Hash identifier:          MGzEWIZ/EdtTbp6/FRF/2CJMkfaDmSh75fKXCwfETHM=
Subject key identifier:   DB:4E:AA:E7:8A:BD:BF:49:5E:49:FE:22:92:05:44:9A:2A:9E:1E:E9
Certificate issuer:       /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial:       0D1B
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
Signing time:             Thu 10 Jul 2025 18:27:46 +0000
ROA not before:           Thu 10 Jul 2025 18:27:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132341
IP address blocks:        103.14.73.0/24 maxlen: 24
                          103.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3355 (0xd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
        Validity
            Not Before: Jul 10 18:27:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68700622-d1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:29:98:93:71:88:3a:aa:2d:ad:12:f5:40:
                    17:fd:79:1f:49:2d:90:14:23:84:d8:bd:48:71:e6:
                    69:ec:79:44:49:da:b7:2c:4d:c9:96:a8:47:fb:ec:
                    39:0e:61:ae:3c:ab:95:f3:2a:03:48:a1:34:9f:fa:
                    2d:b3:0b:22:1f:97:97:f3:38:02:62:3b:04:f1:70:
                    62:c3:99:b8:ad:81:24:43:56:95:49:38:24:f6:47:
                    f1:37:6c:ac:9e:72:e1:8f:6a:53:42:8a:0a:92:ad:
                    62:3c:24:18:de:a5:55:d5:ac:b8:04:59:24:9a:7a:
                    91:e0:b2:f0:40:56:bc:99:dd:2e:15:93:b2:3b:30:
                    a5:4a:2b:ea:1c:c3:3e:df:39:30:cb:4b:e0:85:f3:
                    12:06:70:ff:b3:36:a8:d1:92:5d:a1:bd:a3:02:57:
                    91:b5:8d:2b:1c:5a:8b:70:b4:03:14:b2:4c:62:63:
                    ea:70:a3:ef:cd:df:6e:8a:2c:85:70:c8:e7:ac:85:
                    ed:b1:96:6a:fa:e5:1c:a1:6e:22:2f:fb:28:5f:a4:
                    a6:56:47:4c:a6:c3:c6:2d:ab:05:c5:81:f5:89:fa:
                    5d:2a:c1:ae:cc:62:0b:c1:a0:18:87:9e:8e:2b:e2:
                    7d:d9:a6:fc:70:e0:b9:56:37:be:07:d1:58:68:b4:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4E:AA:E7:8A:BD:BF:49:5E:49:FE:22:92:05:44:9A:2A:9E:1E:E9
            X509v3 Authority Key Identifier:
                keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.73.0/24
                  103.59.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:63:76:e3:f3:0b:ba:96:82:82:a3:b5:04:e8:6a:f6:3a:03:
         a1:e3:6c:77:2d:aa:af:a5:6a:8e:6d:2c:70:4c:96:43:e6:9f:
         7f:bb:8d:41:b5:10:93:da:78:ce:64:90:cc:6a:52:b2:c4:3d:
         fb:e1:d1:21:41:41:14:c7:4f:b6:01:0f:e5:ee:5d:6b:9c:8e:
         2b:b7:88:48:82:a4:ac:e4:58:02:42:66:10:22:5a:f4:5a:ef:
         71:27:c9:67:79:2d:a7:a8:a5:5e:7b:c9:6f:43:d0:88:f3:ca:
         3a:2e:1e:6b:93:29:93:b8:c5:b9:36:5e:cd:76:22:a8:1a:24:
         7a:14:aa:61:3c:c5:31:de:18:c4:40:1c:5a:46:d9:74:19:b4:
         1e:05:60:b5:76:c0:b6:76:97:59:84:67:28:42:ab:62:2b:2e:
         dc:23:9a:f6:94:8c:ec:8b:6c:1c:43:84:68:32:d1:ce:80:9d:
         1b:56:2d:80:0f:62:43:31:a8:40:82:f6:30:f6:8a:b0:44:55:
         09:b2:b5:5c:ca:2b:de:08:2e:03:3e:8b:f2:b5:cd:44:41:c7:
         c1:7a:3e:9a:6d:d5:fe:23:1e:6b:60:42:6c:50:d7:b2:9f:fd:
         5c:b6:8d:45:30:48:51:e8:58:bc:21:28:a8:aa:0f:0d:72:41:
         a0:9a:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:07:44 2025 by rpki-client