Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
File:                     FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (raw, json)
Hash identifier:          Bv4wN8OF2Bm5se8xe4Mu+kG3hxKKklF4aauYgHDM/QE=
Subject key identifier:   CB:82:29:8A:23:CB:FE:0B:2C:61:E3:4B:11:19:2D:96:60:42:43:5F
Certificate issuer:       /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial:       0DAC
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
Signing time:             Fri 20 Jun 2025 18:41:45 +0000
ROA not before:           Fri 20 Jun 2025 18:41:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139089
IP address blocks:        103.139.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
                          rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
        Validity
            Not Before: Jun 20 18:41:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6855ab69-1cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:92:fd:0a:c8:0f:8b:25:47:90:59:76:33:
                    4c:ff:6b:82:e7:d8:53:96:95:71:17:35:18:35:dc:
                    c0:21:63:a7:fa:fb:dc:12:f9:22:c8:af:15:a3:2a:
                    28:9c:f0:77:5d:e7:ac:9f:8a:14:79:f3:1a:c1:77:
                    b8:58:17:f2:f2:73:a2:fb:58:ea:f9:52:e2:a1:64:
                    94:cf:d0:32:e3:ff:68:b1:a9:ee:b0:37:9b:8e:d8:
                    fd:9c:19:71:f6:82:e7:bf:34:cd:b6:9b:b0:4a:0d:
                    b5:b4:6a:d0:6f:63:1d:b7:a1:ef:9b:3d:f2:36:02:
                    57:af:77:6f:31:42:eb:19:ab:bd:22:38:a3:ff:e5:
                    c3:07:55:96:0e:9c:5d:4e:6f:16:0d:b0:1f:a6:ac:
                    01:e0:5c:8c:bf:45:a7:a0:ba:b9:38:ee:a5:59:c8:
                    8d:10:a8:25:38:47:49:8e:60:8b:10:9a:fb:cf:59:
                    8e:9d:f1:6a:84:d0:86:67:66:77:f1:8e:28:35:a6:
                    ae:36:4d:46:38:b5:13:8b:18:83:4c:f4:38:3c:d5:
                    aa:4f:1f:4d:7f:a1:ad:a6:2a:82:e5:aa:cc:98:0c:
                    60:5b:5d:2a:20:84:12:13:cd:5e:c7:95:a1:b2:48:
                    69:98:82:34:bf:aa:06:10:f5:fd:be:47:78:0a:21:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:29:8A:23:CB:FE:0B:2C:61:E3:4B:11:19:2D:96:60:42:43:5F
            X509v3 Authority Key Identifier:
                keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:4c:f8:0a:68:2a:c8:28:0e:c7:f1:35:ed:3c:fc:33:8d:e5:
         82:c2:8e:31:24:23:24:80:0a:ee:1a:db:76:9a:cc:4a:d1:59:
         27:9a:af:2a:f0:c6:82:00:1a:97:7f:d0:d7:53:9c:87:a5:9b:
         38:c1:5a:06:91:b2:ed:86:57:20:8f:d1:76:b3:b2:15:91:7e:
         6f:3e:c6:f9:02:ad:b3:11:fe:31:43:49:f9:34:bd:d2:25:c8:
         33:5d:1b:4e:7a:97:8e:ea:09:26:ab:f1:d8:f6:2d:c6:d3:b9:
         a0:dc:5d:e9:fe:5d:32:3d:08:f9:57:4e:8f:95:12:01:fb:f8:
         94:6b:ac:4d:19:2b:8a:bf:94:8a:fe:a4:9e:e6:e2:f6:0f:c5:
         27:b6:ea:9c:04:27:cb:07:f5:aa:be:00:d4:7b:18:5d:08:14:
         21:44:9a:f0:1a:97:9a:73:ae:4d:8e:39:12:6f:45:d0:eb:da:
         b6:32:b5:60:0a:6c:41:53:ce:57:03:c4:7d:05:2e:9d:23:8e:
         b6:d6:6f:4b:cf:98:eb:18:06:1f:60:97:22:d3:e5:54:a8:d7:
         6a:ec:94:5a:e1:e2:48:8e:d4:40:99:d8:d0:68:cb:e6:5b:51:
         e0:17:28:ac:8f:e1:e6:31:1f:bd:f4:bc:f0:f3:c4:f0:be:30:
         4a:b3:a3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:10:11 2025 by rpki-client