Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa
File:                     D6250A324B6C11F094D55267C4F9AE02.roa (raw, json)
Hash identifier:          5vZdk5y5hH66cnJuPPqq7B41lwttMEzlOwASta3uWrs=
Subject key identifier:   47:70:78:91:B2:83:D3:BA:3B:05:3D:E3:69:C1:20:8E:A8:EB:65:45
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       04EF
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa
Signing time:             Mon 23 Jun 2025 05:08:55 +0000
ROA not before:           Mon 23 Jun 2025 05:08:55 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     9304
IP address blocks:        103.73.220.0/24 maxlen: 24
                          103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 00:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Jun 23 05:08:55 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6858e166-7268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8c:e8:c9:52:91:e8:47:b7:89:2f:f8:b5:82:
                    9b:19:70:63:e9:75:81:91:68:26:4c:ea:69:7e:6c:
                    f6:fb:60:e3:ac:d2:46:b6:af:01:b6:2b:05:a4:41:
                    20:e5:44:31:78:8b:97:e3:ee:f2:2c:ce:be:41:55:
                    69:df:53:80:bb:a8:56:44:37:60:5e:8e:df:45:4a:
                    20:6f:a5:de:df:4d:6f:70:4e:39:19:83:11:7c:6a:
                    21:38:f7:f1:4f:f5:e3:75:60:dd:9c:4f:cd:f0:86:
                    72:d7:ac:09:e7:d2:90:e9:d8:c4:9c:a1:62:9c:eb:
                    16:16:4e:e9:48:05:fc:13:4f:31:66:8d:e7:d1:b8:
                    ba:a4:84:5b:b3:81:7e:b3:a8:02:56:98:47:78:98:
                    46:a2:ac:76:5e:d5:88:ed:4a:44:13:89:74:2d:11:
                    c5:74:cd:ae:6b:07:75:a4:05:e2:35:55:8f:5d:bd:
                    bd:f1:eb:a8:94:8f:af:f0:2f:4e:2a:c7:4b:51:51:
                    52:5d:20:67:81:75:d8:be:6e:34:9f:d9:df:51:f8:
                    a9:84:5a:d5:fb:1c:c9:cb:3c:a2:9e:09:29:43:54:
                    86:2e:69:56:a3:c8:84:29:a3:b8:4e:87:23:35:31:
                    19:d6:b1:5e:f6:35:cb:ac:94:31:0b:78:72:6f:25:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:70:78:91:B2:83:D3:BA:3B:05:3D:E3:69:C1:20:8E:A8:EB:65:45
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:26:e3:56:f9:2a:7f:a3:02:b3:a9:18:f8:4a:b0:a3:1b:
         2a:ae:50:80:1a:8f:49:c1:e6:a0:de:d7:b3:92:3d:01:da:be:
         d5:86:77:78:e0:40:b5:f6:6f:4e:54:65:c0:79:e9:11:22:c7:
         9f:54:1b:ec:69:e9:f2:59:1a:70:3a:4a:7a:a2:5c:e0:2c:df:
         80:e4:78:ca:30:da:1f:c0:87:4b:dc:f8:fb:d7:a0:ea:09:6b:
         c2:8e:b8:0c:8f:a3:a3:f8:39:67:48:fd:b5:59:9a:47:bf:3c:
         78:24:2c:ae:89:a8:1e:e9:23:b4:b6:7c:e1:85:c4:26:63:bb:
         43:69:04:3a:03:ab:25:57:43:46:15:44:8e:63:81:1f:ac:af:
         f2:09:15:84:95:37:34:7a:c5:46:9b:45:4a:59:66:63:6a:17:
         9e:cd:49:51:7a:fb:c2:55:2a:fc:7b:cd:ea:66:bb:7f:1f:29:
         17:45:f2:b8:b2:96:80:20:f9:95:fc:eb:d2:bf:bb:9b:0a:98:
         55:cc:eb:58:92:a3:fd:5c:9f:68:07:78:52:8f:52:27:32:d1:
         ab:f5:18:6a:fb:1c:90:5d:4e:b1:a5:85:15:a7:66:88:aa:0c:
         74:5b:cd:03:ee:ce:00:4f:c0:bf:be:7b:df:67:5e:5c:37:65:
         33:28:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:02:17 2025 by rpki-client