Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/EE63EB2A59A611F0959E0C63C4F9AE02.roa
File:                     EE63EB2A59A611F0959E0C63C4F9AE02.roa (raw, json)
Hash identifier:          GsLnRLdogxstpaApcoyc6Zg1nnApMAJYYma2C41kKMY=
Subject key identifier:   7C:DF:13:3B:AF:F7:25:75:D7:AF:93:C6:7B:F8:1E:A2:C4:45:09:C1
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       104C
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/EE63EB2A59A611F0959E0C63C4F9AE02.roa
Signing time:             Sat 05 Jul 2025 13:50:49 +0000
ROA not before:           Sat 05 Jul 2025 13:50:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24511
IP address blocks:        103.138.131.0/24 maxlen: 24
                          2405:e40:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
                          rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 17:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4172 (0x104c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Jul  5 13:50:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68692db9-19fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:3b:89:21:9d:7c:da:7c:d7:4c:b7:73:74:
                    2f:8f:33:3f:ef:ac:b7:32:0e:6d:56:fc:9f:47:64:
                    72:f7:b7:1b:6e:88:b7:61:0f:79:d6:96:ea:74:bf:
                    4b:7d:ae:bf:7d:b3:2e:37:12:f7:53:af:dd:ec:b4:
                    59:65:8b:e0:fc:cb:bc:e8:34:7d:75:bc:40:1b:a9:
                    e1:e6:97:8f:9d:02:2d:d8:c1:79:6b:e5:a7:a1:ab:
                    5e:eb:fd:d8:dd:26:c4:b9:fe:1a:82:50:46:7d:73:
                    da:35:5a:06:a8:45:c2:10:2f:3c:52:62:f2:00:27:
                    03:dd:0f:8d:76:bb:87:45:8f:50:f2:16:06:d0:91:
                    a6:83:bb:e8:2d:fa:a4:b0:2f:6e:e7:9a:d6:c7:5e:
                    b4:eb:e3:51:b2:03:bc:94:be:4e:dc:c8:b6:d9:73:
                    14:50:c9:ef:01:b8:28:1a:ab:64:88:ff:17:14:18:
                    79:f9:b5:90:64:15:7b:7a:ac:e1:49:d3:b3:19:1d:
                    45:36:3b:cc:01:08:49:49:4a:40:8b:cd:8a:fa:b7:
                    cf:66:0e:58:bb:10:c0:e4:99:79:e0:7e:6e:48:75:
                    5c:8d:05:92:ff:44:e7:17:dd:60:09:af:8b:fe:05:
                    7e:3d:ad:f6:1d:67:2a:fc:35:1d:4e:32:c9:14:71:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:13:3B:AF:F7:25:75:D7:AF:93:C6:7B:F8:1E:A2:C4:45:09:C1
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/EE63EB2A59A611F0959E0C63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.131.0/24
                IPv6:
                  2405:e40:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:6c:52:8b:c3:b8:4b:d4:88:9f:5f:8c:f3:3d:0f:24:bb:
         f0:2b:fc:90:6e:44:90:16:2f:b7:7c:3c:22:68:7e:d9:e5:29:
         e1:46:ae:1d:24:c8:8e:aa:76:c6:b2:c9:cf:9f:2d:91:a7:f6:
         f4:45:15:df:48:93:1c:cd:81:a3:59:8e:17:dc:47:cd:95:90:
         a6:68:b6:83:3f:b8:1b:3c:fb:be:bb:89:90:49:7e:5e:44:bd:
         1e:ca:7c:4e:ee:51:5a:71:d8:94:40:a9:37:9c:e8:89:85:41:
         44:15:b9:5e:b9:eb:5d:16:77:5b:1b:61:cf:e9:36:90:fa:b0:
         34:bc:17:30:6d:0b:3a:0d:78:d9:05:35:51:17:7b:35:ab:85:
         ea:b6:35:81:29:7c:b6:3c:81:f4:cc:a3:03:c1:7a:0a:f6:cb:
         85:f8:1b:bd:29:6c:0e:36:5d:df:d6:58:56:bf:c9:79:7e:2c:
         f8:4a:f5:45:62:38:c6:36:9c:bc:39:73:97:81:75:37:5c:3d:
         ec:82:66:99:4c:8c:2b:be:3d:d9:33:b8:e7:6d:89:79:83:6a:
         7f:ff:b5:f6:58:7d:e6:18:16:48:77:55:de:4f:43:c2:57:bc:
         9f:27:6c:38:d0:33:20:c8:76:24:07:fc:f8:5d:fa:16:28:6c:
         3f:9d:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 12:01:10 2025 by rpki-client