Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/6014E88A257E11F08DB64644C4F9AE02.roa
File:                     6014E88A257E11F08DB64644C4F9AE02.roa (raw, json)
Hash identifier:          nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=
Subject key identifier:   98:06:C4:CB:22:AC:E0:2E:D4:5B:C1:69:6C:22:C2:BC:57:EF:F5:F6
Certificate issuer:       /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial:       0D
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/6014E88A257E11F08DB64644C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 04:48:36 +0000
ROA not before:           Wed 30 Apr 2025 04:48:36 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134999
IP address blocks:        103.90.3.0/24 maxlen: 24
                          103.205.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
                          rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 07:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
        Validity
            Not Before: Apr 30 04:48:36 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6811aba3-ace8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:33:a3:43:e2:ad:59:f1:fb:1d:ee:8d:e0:
                    f5:77:d0:6a:84:1e:65:20:36:d9:d6:03:d4:85:ea:
                    bc:88:c5:aa:23:cf:ed:d0:2a:14:bb:80:10:42:b8:
                    1f:ea:9b:cc:96:d2:c1:8c:ca:76:35:d1:08:8a:94:
                    fc:b5:3f:45:7a:6a:34:8a:18:a1:a4:c0:10:3f:3d:
                    f4:e5:e7:01:dc:e5:29:c0:5d:4a:fd:41:ed:5b:0a:
                    b1:83:fc:2a:88:72:a5:4b:a9:a7:40:e7:99:96:62:
                    53:94:55:90:e0:73:a3:7c:12:bd:a4:c0:50:73:92:
                    98:38:11:32:5e:8f:07:3f:ed:f6:2f:5f:a7:34:d7:
                    98:47:aa:64:3b:7c:23:53:bc:41:77:be:d8:fd:d9:
                    b8:8d:a4:89:96:0b:2f:54:4f:6b:3c:f3:91:fc:e0:
                    64:e5:ab:32:d8:aa:1e:f9:b8:17:0b:5b:40:9c:5a:
                    fa:46:19:01:d7:5c:b4:cf:8c:d8:a5:78:3e:72:6e:
                    90:33:93:56:47:83:92:0e:1a:5b:3c:ea:f6:5a:cd:
                    f9:3d:31:ef:75:5f:59:d8:99:b1:be:19:9e:9e:f2:
                    62:79:92:d3:3c:c2:d8:57:cc:39:96:ea:d9:38:a4:
                    a2:e4:3e:47:8c:cd:6d:d9:b4:88:4b:a2:26:f7:c5:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:C4:CB:22:AC:E0:2E:D4:5B:C1:69:6C:22:C2:BC:57:EF:F5:F6
            X509v3 Authority Key Identifier:
                keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/6014E88A257E11F08DB64644C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.3.0/24
                  103.205.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:be:b7:b0:16:dc:3b:94:e6:04:29:4e:62:c8:f7:19:b9:fa:
         86:2d:49:02:e3:4e:ee:71:24:36:cb:ed:64:8f:89:d8:15:82:
         6d:10:52:2a:5d:9d:1c:f0:ee:2b:07:75:50:c9:cf:f7:12:aa:
         b5:ab:8b:6e:3a:b2:54:13:c4:7f:d4:f4:2f:7f:b1:8a:5f:44:
         a4:ad:d5:fe:8f:b2:b7:26:ab:12:42:3e:bf:34:00:92:2f:da:
         eb:2a:3c:b6:c0:d6:eb:95:c4:4f:9d:90:99:3b:67:b6:c9:85:
         07:5b:37:db:6e:c3:b8:b8:5c:27:54:a1:ab:ba:f0:ae:2a:58:
         8d:31:f7:92:42:9a:08:2a:17:2a:2c:60:18:74:18:53:9d:27:
         74:44:ff:54:5e:2e:f1:96:3c:04:80:11:23:e2:3b:b8:d8:4b:
         fb:6c:24:9b:e7:a1:84:33:d1:32:50:93:e4:7d:8d:4c:09:d6:
         38:12:6d:c2:40:18:7f:9a:e2:86:d8:e2:fc:32:32:cc:de:05:
         24:e4:f6:73:75:78:f0:6b:70:67:6d:f3:5c:07:8a:10:40:99:
         76:ed:f2:55:d9:e5:32:d3:14:0a:4c:e5:f9:06:34:de:fb:08:
         8d:bd:36:b0:e8:e1:3f:67:3b:f7:22:08:e8:95:ec:e2:37:6f:
         30:66:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:27:14 2025 by rpki-client