Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
File:                     B8BB04788D0E11EF9759C171C4F9AE02.roa (raw, json)
Hash identifier:          ziqkS/uS0bV8N47pgwrjsdLrHiWSJcSBhbH8fskYULw=
Subject key identifier:   D9:28:7B:49:70:75:22:0F:9C:96:20:E8:EB:76:4E:90:D1:A3:C7:59
Certificate issuer:       /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial:       07C3
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
Signing time:             Thu 26 Jun 2025 21:29:09 +0000
ROA not before:           Thu 26 Jun 2025 21:29:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        45.123.100.0/24 maxlen: 24
                          45.123.101.0/24 maxlen: 24
                          103.9.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
                          rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
        Validity
            Not Before: Jun 26 21:29:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685dbba5-1511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:29:c5:08:5f:f5:72:70:2c:1f:0b:13:fe:
                    29:e8:ff:6b:92:64:56:dc:97:00:3e:86:cd:56:de:
                    a5:10:30:be:8b:59:46:71:c1:fd:e8:52:b5:e3:61:
                    88:f5:78:e0:fd:20:d9:f9:36:32:34:5a:31:d6:d5:
                    8d:b4:a0:46:3e:66:22:46:3d:f0:57:24:65:4e:76:
                    94:8e:a4:f7:b3:ed:05:ed:84:e6:29:b7:6b:7d:8f:
                    94:a0:40:23:50:f0:fd:9a:5c:2b:a4:0d:fb:92:c0:
                    77:2c:51:20:a7:b2:52:df:23:4b:b2:cf:ad:e7:a4:
                    a7:59:54:0c:31:09:4f:83:6f:92:72:87:f8:60:8e:
                    6e:b1:62:9c:52:6e:a7:8d:3e:4b:7c:97:25:54:ed:
                    43:2c:23:a1:12:f8:b5:c2:a0:6e:da:11:aa:0a:8c:
                    cf:ba:dd:04:97:00:af:2b:ea:e1:ce:79:0e:0a:ca:
                    3a:4f:22:81:4f:4a:88:93:dc:e2:99:09:a1:04:60:
                    2b:21:3f:e3:72:c2:f4:33:19:33:c5:60:6a:e6:24:
                    1c:ee:e7:a4:8e:f2:ff:2b:96:61:e7:1f:f4:eb:f1:
                    57:39:5f:bb:23:df:9c:44:23:86:9c:80:d9:74:f7:
                    4b:7f:fc:d5:42:b0:c0:e9:d6:e4:2b:21:74:27:46:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:7B:49:70:75:22:0F:9C:96:20:E8:EB:76:4E:90:D1:A3:C7:59
            X509v3 Authority Key Identifier:
                keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.100.0/23
                  103.9.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:1e:d3:6b:4b:43:c3:51:eb:d3:9c:a8:d7:04:29:b1:e1:
         71:77:28:8f:29:28:71:5a:85:a2:e5:a3:ad:ff:9e:dd:5c:5b:
         88:ee:e8:ca:79:05:22:6d:e2:53:11:1d:11:98:6e:3d:e9:fb:
         92:f9:24:a3:cc:73:65:71:65:bc:28:e8:f1:d9:64:05:49:31:
         f0:cb:34:00:67:72:64:f6:fc:5f:85:e7:00:2d:c1:4b:66:99:
         46:ea:94:fb:18:4e:a8:ba:14:0f:35:86:ee:d9:9f:f4:73:1b:
         0d:28:4e:43:1d:e5:16:d1:37:f0:0e:ae:58:5e:27:5d:a4:e2:
         cc:81:1e:4c:e3:b7:38:ca:79:49:e9:95:8f:75:a7:2c:ee:a1:
         1f:e0:5d:0d:f5:b8:16:47:17:90:ed:ba:c9:61:56:18:cf:f1:
         2d:56:c3:c3:16:e4:c5:72:04:15:d1:39:50:41:de:67:91:50:
         83:4b:2f:9f:28:71:44:20:de:04:cc:4f:77:7b:7f:fa:c3:c4:
         ef:6b:5e:19:71:d7:be:bf:24:ea:5c:7c:e3:48:a6:b3:de:40:
         89:58:40:06:b2:54:ca:16:e3:20:61:e3:9f:27:ce:04:e7:dd:
         44:05:85:d7:f6:1e:68:a4:28:1c:8e:a2:ac:df:f2:d3:13:c0:
         90:86:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:26:43 2025 by rpki-client