Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
File:                     50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (raw, json)
Hash identifier:          7AoMz8H6zHHdV8IPpxWlOn2xVFqVFr83q+XexoYNuOw=
Subject key identifier:   36:4A:A8:21:F0:C1:69:CC:92:DE:25:01:67:7D:8C:F6:70:25:96:18
Certificate issuer:       /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial:       60
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 07:38:00 +0000
ROA not before:           Tue 03 Jun 2025 07:38:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132839
IP address blocks:        45.117.192.0/22 maxlen: 24
                          103.57.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
                          rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
        Validity
            Not Before: Jun  3 07:38:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683ea658-4461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:03:bf:34:84:93:71:44:1a:11:97:37:0c:
                    59:20:9a:ef:48:e9:bd:f4:fa:f2:7b:aa:04:7a:94:
                    2d:67:78:19:ae:d7:88:4c:3a:8f:b9:78:75:5f:b0:
                    50:cd:30:7c:38:76:c2:42:6f:6c:14:d3:26:18:9c:
                    7f:21:8c:32:74:bb:a7:15:c0:49:42:08:fa:c5:ce:
                    59:6e:59:e4:d6:54:4c:34:d3:07:fa:08:58:9f:d1:
                    5e:ca:42:14:18:b8:3e:64:60:96:a1:3d:34:20:fb:
                    3e:24:0e:e4:c9:67:e3:45:eb:72:9d:cb:68:ce:c1:
                    10:f1:8e:f1:df:d1:ac:5d:6d:ec:14:f5:45:a0:af:
                    21:b6:9d:50:61:8c:2d:2e:93:56:11:d1:6d:16:50:
                    eb:b4:49:92:81:3f:2f:6a:6a:1b:98:ca:36:0f:c5:
                    a7:74:bf:11:30:a7:41:62:e9:c9:2f:22:39:02:a2:
                    e7:2f:2c:c8:f7:83:6f:3a:ea:b4:08:07:31:bb:25:
                    fa:af:f1:4d:93:5d:b1:79:33:c9:c6:3d:0c:fe:b3:
                    e7:19:e5:f8:c3:b4:a3:17:cb:e7:66:bf:67:a8:1b:
                    39:2b:36:b1:41:9e:24:14:b4:67:c4:c3:8f:f4:c8:
                    a7:1d:4e:11:39:b2:92:7e:d7:25:b5:b8:74:e8:81:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4A:A8:21:F0:C1:69:CC:92:DE:25:01:67:7D:8C:F6:70:25:96:18
            X509v3 Authority Key Identifier:
                keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.192.0/22
                  103.57.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:d4:0c:1d:46:09:6b:5a:c7:23:13:71:64:e5:51:08:1f:
         b2:ea:b6:77:75:9d:c6:7c:19:8a:a2:8e:dc:8b:ea:59:9a:0c:
         7e:60:90:51:8d:61:8e:c9:f2:ad:75:25:16:0d:41:e3:27:63:
         a2:52:80:8f:7a:c3:1d:1e:d7:74:b3:f2:bc:c7:b6:75:a6:1c:
         7b:3b:bc:fd:d5:42:99:9d:41:29:1c:9d:c8:ef:d2:06:97:59:
         ea:2a:c2:e9:3f:56:b2:7c:c0:40:cd:7c:8c:6e:79:49:d5:02:
         eb:45:20:9e:ff:2a:db:aa:0d:14:de:64:71:92:bc:33:97:4f:
         2f:95:06:b0:3e:b9:7a:12:8b:4b:90:4e:63:65:af:9b:ab:1d:
         16:67:7a:63:88:fe:7b:c4:e4:7e:6c:1f:5e:61:5a:db:9d:68:
         7b:9d:30:aa:e3:31:18:1b:03:23:e6:17:ac:7e:b8:f9:18:4b:
         3f:ca:ef:ea:4f:61:92:12:85:5e:a2:a8:de:a7:89:5d:cc:02:
         67:9f:6c:2f:9f:04:33:ce:62:6d:8e:9d:b7:e2:47:d1:fb:13:
         33:b7:bd:38:75:b3:ef:5b:ff:6f:15:65:8d:cf:59:6d:a5:89:
         29:cc:f8:9d:de:f9:e8:36:4c:17:dc:7a:2c:9b:59:00:15:f4:
         27:dc:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:19:38 2025 by rpki-client