Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
File:                     A7E91DCE275A11F09892587AC4F9AE02.roa (raw, json)
Hash identifier:          9DCYF62RrlJKaHq2Fa56Ekta+qQ8x2TCp6y7wohIGUI=
Subject key identifier:   32:A8:F8:26:1E:07:9B:DF:04:DA:D7:85:AB:C5:7F:21:15:51:50:D0
Certificate issuer:       /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial:       02
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
Signing time:             Fri 02 May 2025 13:37:56 +0000
ROA not before:           Fri 02 May 2025 13:37:56 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        203.99.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
                          rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 06:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
        Validity
            Not Before: May  2 13:37:56 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6814cab4-10da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:84:1a:e4:31:29:e1:b2:15:1c:75:2b:43:
                    54:bd:ca:db:fe:fc:04:90:86:3e:22:9b:0e:7d:60:
                    d2:9f:71:f0:38:bb:cb:17:81:f9:80:92:14:9e:99:
                    7c:fb:6d:d4:80:a2:88:52:06:0c:31:e1:16:3a:8a:
                    31:d7:d5:76:01:08:bf:24:3f:e4:04:4b:c8:43:ed:
                    46:fe:32:91:81:fa:c6:d2:e8:52:b7:7d:38:fb:b0:
                    6b:1b:d6:84:fc:64:51:d7:95:c2:b8:7c:e3:d6:30:
                    6c:56:54:ee:df:ba:bf:38:86:41:a2:f9:2d:b3:56:
                    1c:97:0c:d0:59:b1:03:0e:6c:5b:e8:52:57:3a:6d:
                    dd:f7:ac:84:e6:b5:4a:d8:86:10:63:88:48:b9:b9:
                    4d:a3:f4:59:1f:46:16:aa:53:3b:17:36:65:f6:9e:
                    2b:15:d8:cc:fd:28:91:0a:04:84:ab:48:69:22:d7:
                    f5:dc:ed:8f:76:3b:8e:30:66:09:0c:28:3d:e0:30:
                    b4:78:6f:4a:43:ef:52:aa:42:71:74:f4:c8:b9:5f:
                    a4:71:87:e5:3b:63:0c:3b:53:bd:d4:ac:a9:59:33:
                    23:75:5e:46:de:c5:dc:df:5b:b8:f5:3b:da:df:1d:
                    9e:b7:16:63:c4:e9:43:5e:32:f8:7a:98:5c:e9:0e:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:F8:26:1E:07:9B:DF:04:DA:D7:85:AB:C5:7F:21:15:51:50:D0
            X509v3 Authority Key Identifier:
                keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:a1:16:f4:10:86:7c:47:fb:cf:ff:65:9e:75:4d:70:f0:
         9b:92:d9:8e:1f:7a:2d:51:fa:b4:38:43:ed:46:27:94:72:d1:
         8e:4c:7d:20:72:c7:8c:58:4c:06:81:37:b7:0d:93:af:87:d7:
         b2:c1:12:80:fc:bd:e0:83:71:18:db:dd:06:86:48:61:ed:08:
         7f:4a:0d:8f:52:11:fc:74:01:4e:c9:9a:61:51:bb:58:9e:7e:
         3a:1e:5b:52:27:d8:10:02:ed:db:ed:f8:70:db:67:9f:14:6b:
         51:e8:cc:5b:4d:5e:bc:51:18:c6:4b:c5:d6:4a:21:a0:7f:d1:
         16:ca:ba:89:1b:0b:e4:60:21:de:b5:08:8d:a9:f9:90:fe:5c:
         c1:c0:ff:08:58:7b:37:6b:02:b2:e1:3d:aa:92:d1:d8:85:47:
         e5:7f:88:cb:37:c3:2b:9a:77:46:3d:db:d9:d7:19:f3:b5:cf:
         74:85:9c:34:07:cc:e8:d9:1c:51:a9:e1:56:8b:0f:16:db:9f:
         e1:1f:4e:f5:8e:53:8e:50:8c:78:a3:cc:60:bf:4e:6b:c5:a5:
         5b:16:63:06:1d:c1:26:06:18:30:ab:cd:2f:e6:2c:ae:fc:b0:
         a1:3f:c0:f5:e2:9a:ed:95:21:3b:6e:39:94:f5:0b:19:84:bb:
         5a:97:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:33:17 2025 by rpki-client