Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/272313529ADA11EDAA08043BC4F9AE02.roa
File:                     272313529ADA11EDAA08043BC4F9AE02.roa (raw, json)
Hash identifier:          Tkj82GzJ16obkJIFo6Exr0H47jGo2TnUKRA7738GYK8=
Subject key identifier:   E0:1A:0F:0F:4B:70:66:A8:5F:93:B2:5C:DD:83:70:63:0E:E8:0A:AB
Certificate issuer:       /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
Certificate serial:       01C5
Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/272313529ADA11EDAA08043BC4F9AE02.roa
Signing time:             Tue 17 Jun 2025 02:18:58 +0000
ROA not before:           Tue 17 Jun 2025 02:18:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149846
IP address blocks:        103.188.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl
                          rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
        Validity
            Not Before: Jun 17 02:18:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6850d092-85e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:00:4e:7f:a2:37:e9:a6:ec:c6:9e:26:b1:
                    0c:f4:df:52:5c:65:84:55:29:d6:a4:95:be:bd:96:
                    c1:4e:5b:77:48:de:c3:b2:23:f4:14:29:2c:d7:e3:
                    af:57:20:bb:0d:6e:b3:8c:82:83:3f:71:01:c0:69:
                    fc:87:4f:a8:de:42:5f:c0:d5:46:23:21:93:9a:03:
                    ff:dd:30:2e:b7:c5:2a:20:a6:3a:46:92:8f:3f:45:
                    7b:54:95:7a:61:1b:b3:6f:68:98:3d:92:cc:4a:e1:
                    c6:0b:c9:f0:3d:14:e4:e2:84:07:28:9b:c1:a9:48:
                    71:ba:9e:60:af:db:b0:e4:37:66:18:45:e0:e4:0f:
                    40:20:f2:72:6d:10:f6:f0:3b:c5:63:c7:4a:d7:e3:
                    64:a0:ac:f1:ea:58:47:f4:23:52:d3:56:9e:12:7a:
                    0a:77:01:a1:08:50:f9:1b:c5:76:c5:1d:26:1e:46:
                    aa:45:4b:4a:57:4b:10:80:7e:ca:8d:16:9c:3e:02:
                    e6:5c:11:10:64:cb:b7:ca:0b:b1:98:0d:14:31:53:
                    c7:04:75:05:a7:42:ca:33:9c:53:55:dc:5c:aa:46:
                    85:b8:57:14:e2:aa:34:6e:70:b8:32:aa:65:d6:e6:
                    35:67:35:ef:a9:3f:ad:be:63:64:5c:e7:94:6c:c5:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1A:0F:0F:4B:70:66:A8:5F:93:B2:5C:DD:83:70:63:0E:E8:0A:AB
            X509v3 Authority Key Identifier:
                keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/272313529ADA11EDAA08043BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:19:25:d5:cd:30:e5:40:8b:00:fd:3e:c3:9d:c5:fc:47:d3:
         59:1e:bb:db:9a:7a:a3:fa:fc:2b:02:f4:f1:b5:ea:4e:3b:4c:
         04:49:c6:0d:fd:e6:d5:e9:a8:71:87:13:dd:63:7b:b1:e6:cb:
         2d:97:b1:dc:91:68:93:54:2b:14:a2:6f:c2:e2:c5:ad:5d:df:
         9a:57:90:13:04:70:3b:da:48:a4:53:70:c0:9e:bd:68:73:a3:
         84:8f:83:ad:49:bc:52:4d:7a:2f:d5:ab:4d:52:f6:da:0c:27:
         81:20:fa:ff:da:0e:ae:c5:21:de:34:fa:e0:4f:0d:6c:75:2f:
         81:2e:f8:db:1b:97:f2:1d:71:5b:a7:a5:a0:64:3a:73:d9:43:
         9e:f9:8f:44:56:0f:03:bf:7a:a0:63:ef:23:b1:d0:eb:75:cc:
         ec:4d:0f:20:0c:1f:8d:4b:f5:99:ef:34:75:d5:02:e8:27:76:
         b7:1f:b7:4d:fc:68:c4:6c:15:39:75:9a:c2:44:53:f9:04:12:
         94:cb:19:5b:b0:6f:cc:98:cb:72:2f:e4:59:0d:83:7a:33:2d:
         50:6c:ac:78:3a:dc:22:e5:d5:e8:ad:53:39:c9:cd:ad:af:a6:
         b8:b7:f7:dd:61:c7:ac:5e:57:2b:cb:46:42:00:6b:72:36:20:
         e9:3a:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:59:47 2025 by rpki-client