Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/465066A44AD811EEB55E2071C4F9AE02.roa
File:                     465066A44AD811EEB55E2071C4F9AE02.roa (raw, json)
Hash identifier:          73wrv7x4YPGy99ya4+iMnamUM2z0k51yTt5jsKTDYUM=
Subject key identifier:   8B:4E:B0:83:37:59:92:85:96:F9:FA:27:43:7E:69:96:E1:B2:9C:0A
Certificate issuer:       /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
Certificate serial:       03A0
Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/465066A44AD811EEB55E2071C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:06:47 +0000
ROA not before:           Thu 05 Jun 2025 01:06:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     63139
IP address blocks:        103.152.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl
                          rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 00:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166CD3, serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
        Validity
            Not Before: Jun  5 01:06:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6840eda7-de98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:e6:a7:14:e7:60:5e:bd:d0:fe:59:bd:56:
                    72:08:63:66:a7:81:3d:e2:b2:57:eb:09:9d:5c:45:
                    63:b0:78:a1:a5:77:d0:06:02:58:86:19:59:4e:43:
                    49:6a:f7:84:61:2f:45:b1:d6:44:46:fb:12:71:24:
                    ac:4e:12:0c:00:f6:a6:96:d9:b2:48:c4:2f:98:18:
                    4b:6d:ae:8d:25:c0:fe:5b:18:85:64:17:45:52:28:
                    4f:f4:96:d9:68:15:bb:f8:b6:fa:81:65:43:d3:d6:
                    1d:c2:e9:51:99:6f:f4:cf:38:4f:b8:79:a5:e9:b7:
                    9e:e4:40:58:e9:ee:f9:5f:b3:b1:5c:6c:e0:94:80:
                    10:e0:78:fb:7c:b1:09:31:59:81:9f:02:4a:01:e8:
                    d6:e8:fd:36:3e:58:5c:c0:86:93:d8:de:bf:85:24:
                    be:2f:b5:fe:b8:6c:f8:99:7b:c0:5f:0c:b2:40:9e:
                    67:1a:38:8f:51:03:46:5b:55:0e:78:4c:2a:d0:e0:
                    ce:55:00:93:b1:7c:ea:e9:1e:a3:c1:b1:ab:22:12:
                    81:62:45:da:53:bb:0d:09:dc:cd:16:0f:2f:43:f1:
                    cf:6a:8e:51:4b:91:fb:77:79:6a:5a:35:f4:74:c8:
                    77:4b:75:c3:22:a4:aa:9a:8a:65:9a:15:73:81:28:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:B0:83:37:59:92:85:96:F9:FA:27:43:7E:69:96:E1:B2:9C:0A
            X509v3 Authority Key Identifier:
                keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/465066A44AD811EEB55E2071C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:73:af:b1:0e:7c:67:73:a1:3a:5c:bc:cc:87:1c:69:4f:4a:
         cd:7a:82:36:b6:ae:aa:ef:cc:ef:42:36:26:80:68:0d:f7:a5:
         ba:90:d4:d8:92:99:8f:22:12:ea:f3:4c:3a:57:82:2f:89:16:
         f4:4c:8e:12:4b:57:5d:6f:b0:f7:2d:e0:fc:a4:8a:6e:8a:da:
         b0:86:ac:61:1a:8d:06:01:cf:9d:6b:77:88:c5:b0:a8:26:e8:
         1f:f6:61:fa:df:a7:c2:d8:03:d4:cf:a8:fe:e2:68:94:5b:c5:
         f6:35:ee:25:bf:03:8e:80:c7:c6:25:b6:4b:23:c5:fd:40:80:
         f7:72:55:ad:53:0d:e6:05:4d:a8:ae:c2:54:29:72:a3:14:8a:
         53:82:13:8d:59:f3:a2:a1:07:1e:92:3a:84:6c:68:ba:2c:84:
         1d:dc:e0:ee:34:47:ba:57:0f:21:cf:13:4c:b6:88:ea:d5:f1:
         aa:e6:42:c7:95:fa:a9:f3:9d:8d:62:e7:d1:30:01:a4:91:a2:
         16:d3:69:99:c2:29:4e:dd:90:fe:d2:96:f7:56:62:78:b8:03:
         4e:a5:4e:30:77:86:d7:77:b1:0c:dd:e9:c4:fb:d5:c9:70:6c:
         d7:68:45:35:de:48:26:86:37:0f:52:7f:a5:b0:8a:94:79:78:
         66:65:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:29 2025 by rpki-client