Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
File:                     1295ACC8511811F0BC16C641C4F9AE02.roa (raw, json)
Hash identifier:          84OKZziZJhzWPyx/Qu58m71qp96Ia8UIPI3npSmJSak=
Subject key identifier:   42:76:7B:04:B7:6B:FF:1C:54:20:53:7E:F8:9B:BE:BB:41:AE:F3:3F
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       1908
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
Signing time:             Tue 24 Jun 2025 16:27:08 +0000
ROA not before:           Tue 24 Jun 2025 16:27:08 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139875
IP address blocks:        103.99.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6408 (0x1908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Jun 24 16:27:08 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=685ad1dc-1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:79:71:af:c9:5a:77:27:14:f8:84:ce:fc:
                    f4:f3:58:3e:51:d7:44:4d:e5:28:2a:c3:03:39:5f:
                    e5:f4:fc:ef:e6:2c:3d:26:03:6c:e8:9a:96:e5:e5:
                    4a:f7:86:44:89:94:a8:22:39:f4:8f:65:b2:46:5f:
                    e9:cf:66:8a:f4:3f:f5:29:b1:cd:ca:74:da:4e:28:
                    59:f4:c8:dc:1c:d4:23:6a:9c:21:d7:dc:35:bf:9b:
                    02:15:93:e7:a5:4b:21:ba:91:06:90:21:25:4b:aa:
                    16:09:4e:b8:d6:e9:ac:96:8f:64:90:56:d4:01:43:
                    e5:28:80:01:0a:21:30:10:96:61:c1:9b:06:78:d6:
                    49:3d:95:08:8c:d4:46:5c:7c:a5:14:64:4a:e6:d4:
                    02:69:cd:93:a3:37:43:ce:c5:4f:20:c6:8b:1b:df:
                    01:54:e4:6c:f8:ca:5e:56:eb:5b:ee:1c:45:46:f6:
                    c2:ed:c3:8b:4a:ed:8d:7a:22:92:a2:b6:e4:00:f2:
                    93:da:41:ac:e4:e4:cb:66:f5:6a:e9:a9:4b:cf:27:
                    21:ea:35:ac:87:62:49:3b:fa:80:3e:0c:3e:54:17:
                    50:5e:70:3a:65:34:74:a3:08:9e:5d:0e:43:ae:8f:
                    bc:7a:e9:e9:fe:4a:0a:4c:a1:ac:e3:02:d1:6b:27:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:76:7B:04:B7:6B:FF:1C:54:20:53:7E:F8:9B:BE:BB:41:AE:F3:3F
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:28:40:46:62:c6:e4:ed:de:f0:9a:31:9f:c9:7b:f1:33:40:
         a8:26:36:2c:da:4d:94:70:29:d1:11:7c:cc:8e:2c:9a:25:10:
         63:4e:e5:52:a4:98:57:15:4e:af:80:bf:38:de:c6:3a:4a:85:
         b1:0e:8e:a9:85:2d:bc:87:58:41:4c:02:c2:e3:d1:5b:2c:35:
         52:77:47:9c:b4:11:26:48:ce:a8:d5:60:d8:88:76:cc:6b:f8:
         5c:ed:54:fd:05:06:5f:d8:30:cc:32:a0:60:70:a1:3d:7b:ed:
         4c:f5:20:4c:2d:d9:fd:ce:80:cf:f3:1e:b2:60:29:96:2a:e5:
         32:65:e9:30:f5:87:36:b9:02:b1:46:73:ab:03:73:0b:4c:44:
         e0:ac:b1:c0:5f:05:10:1c:f7:4a:3d:e6:c1:e3:74:b1:0b:4d:
         48:d9:7e:aa:04:e6:f2:7e:dc:9f:40:6d:28:47:18:05:78:ea:
         e1:1a:37:ab:fe:fd:5b:c3:d5:ce:ad:0b:f3:85:49:72:a3:18:
         de:f9:9b:c0:54:b6:95:17:0d:b0:19:84:8d:4e:fb:df:f1:c1:
         14:b5:86:c2:bd:0b:ae:13:0e:ea:da:0f:02:47:53:d5:4f:ed:
         81:4e:37:0d:95:7c:4b:d0:a0:bb:35:8d:2a:2e:e3:5e:94:14:
         8c:24:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:52:09 2025 by rpki-client