Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          u++8Du0OcgpVvi9qZC9/QhCSfa3UqwhLillltKBdVHg=
Subject key identifier:   70:64:47:5D:BF:54:60:7F:81:D4:EE:ED:73:84:3B:E0:FB:0F:9A:37
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       07A6
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 21:58:06 +0000
ROA not before:           Mon 30 Jun 2025 21:58:06 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Jun 30 21:58:06 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=6863086e-05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:6c:d1:c9:7b:1e:f3:8b:1b:e3:8b:db:aa:
                    fd:ea:c7:c6:38:36:b7:14:86:47:63:b8:4e:0a:36:
                    3b:ac:40:d6:92:d9:3d:dd:32:d3:fc:33:ae:4d:21:
                    1e:c3:31:34:2a:8e:81:bb:5e:57:71:44:fb:09:ba:
                    dc:36:5b:f4:ca:48:f7:19:35:d9:d4:36:64:2c:f2:
                    ee:0a:cd:c4:2f:df:37:5f:78:db:1f:ec:41:c7:58:
                    4b:8e:49:79:1f:3b:28:62:78:5c:95:6a:33:35:3b:
                    ae:a0:2e:94:0f:eb:e0:98:47:61:7c:ca:a0:9d:05:
                    f6:e3:14:39:68:17:46:22:30:ef:68:16:e2:72:45:
                    a1:c4:b3:40:bd:58:ff:40:ca:42:09:00:96:71:ac:
                    44:ec:23:f7:44:26:30:0c:4b:c0:b6:2e:ed:12:fe:
                    96:ce:40:e2:e4:a4:c5:1d:a5:8a:ca:08:e5:19:30:
                    c6:4a:4c:6e:76:d0:db:dc:67:45:26:6e:93:df:ec:
                    c5:51:8e:6e:52:de:7b:75:fd:02:6f:25:e8:b4:51:
                    f7:b1:e9:c3:f3:a5:27:fc:5d:f5:8e:d1:a0:c4:2d:
                    6e:1c:0e:51:e2:94:ca:ba:fb:34:9a:23:70:e2:ba:
                    a2:b6:88:ed:ac:84:76:69:c1:e0:6c:93:8a:66:1a:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:47:5D:BF:54:60:7F:81:D4:EE:ED:73:84:3B:E0:FB:0F:9A:37
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:8a:9e:6b:e4:47:9d:e6:67:2c:cd:8c:68:a1:4f:15:6f:
         ad:74:cd:4e:5b:bb:08:20:bb:30:46:c5:0a:d2:51:40:c0:89:
         d1:69:63:d8:06:91:f6:06:1b:55:19:95:9f:19:d1:d5:02:52:
         a4:e9:5d:b7:0b:fd:98:d3:94:5b:c1:84:d1:c6:79:5c:bf:c3:
         8a:02:62:5f:48:28:5f:ec:a4:7d:42:60:1b:f4:3a:6d:9b:a0:
         da:49:33:09:68:ac:93:57:2d:95:15:00:ee:14:aa:53:54:ab:
         8f:43:f8:b1:4b:e4:a7:e0:27:68:de:d7:64:92:ff:eb:3f:42:
         93:b7:55:ff:c3:ff:c4:38:f2:99:9f:8b:c9:81:f4:7e:51:d6:
         f1:e6:ba:f3:35:c3:46:ae:31:af:17:3e:82:18:26:ce:cf:18:
         bd:7f:c9:03:d5:d6:58:40:e0:c8:9c:82:73:c7:8b:d0:af:13:
         4a:f3:1b:13:d3:25:24:00:8b:2d:e5:79:1f:90:34:3d:b6:6c:
         d0:27:5b:86:c3:41:0d:1f:da:af:94:b8:28:37:6a:92:3b:15:
         2d:d5:ad:da:67:bc:48:61:7c:3a:c6:89:0e:e4:58:a0:78:82:
         b3:90:45:65:52:5f:7d:4b:8d:78:fa:cd:80:2f:b0:8d:4b:9b:
         53:a0:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:02:03 2025 by rpki-client