Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
File:                     D5981734217611EE9EBE2F70C4F9AE02.roa (raw, json)
Hash identifier:          Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=
Subject key identifier:   27:AE:F0:2F:97:1A:67:B7:36:6A:40:BC:FE:F9:83:14:0A:A2:DA:A3
Certificate issuer:       /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial:       0174
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 04:08:32 +0000
ROA not before:           Thu 03 Jul 2025 04:08:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151410
IP address blocks:        103.227.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
                          rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
        Validity
            Not Before: Jul  3 04:08:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6866023f-bb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:13:a0:7f:49:98:cf:2b:be:b0:17:ca:c0:
                    84:e4:cf:7d:74:7c:d4:04:e1:7a:9c:ad:47:58:3b:
                    8a:1f:c5:a1:df:d4:94:d9:63:20:46:1c:96:d2:ad:
                    b2:9c:9f:67:32:fb:32:85:c2:7f:c6:b2:43:24:49:
                    8d:80:0b:11:d4:89:ef:c0:c8:48:cb:00:2b:69:84:
                    af:d8:ee:46:22:32:e4:bf:44:8a:35:68:35:a7:00:
                    1b:36:12:67:fd:31:41:c4:ee:6f:6b:95:62:b5:1d:
                    7f:47:0a:10:25:2b:bc:cc:fa:26:10:f2:97:17:2f:
                    03:d1:8d:72:55:32:66:0f:32:37:47:fd:10:f7:93:
                    58:84:40:dd:d5:54:d4:9c:33:a7:58:c3:31:6c:60:
                    bd:d8:e6:67:9b:6d:61:eb:34:c1:00:78:0c:b3:dd:
                    27:58:ee:98:8b:ae:af:d5:49:7e:44:0a:08:1f:93:
                    9b:32:49:cb:32:96:b6:32:f4:d3:eb:21:6b:b0:0b:
                    3b:86:9c:0f:0e:0b:e9:ac:8f:48:79:ef:d7:fa:11:
                    68:2c:70:ed:3f:29:1f:ec:12:7e:9e:34:f9:74:58:
                    7c:ee:14:f6:11:76:00:d9:2d:99:22:c7:4f:9c:c7:
                    76:46:b9:f8:15:a4:07:94:78:b3:5a:f5:e5:43:76:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:F0:2F:97:1A:67:B7:36:6A:40:BC:FE:F9:83:14:0A:A2:DA:A3
            X509v3 Authority Key Identifier:
                keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/D5981734217611EE9EBE2F70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:44:34:5c:d2:1d:7d:87:90:9e:f0:35:ab:51:29:11:22:
         66:98:62:7e:01:91:19:56:5e:04:47:3d:54:03:28:3f:bd:e6:
         d6:c1:d6:18:7d:6c:aa:31:20:a2:14:77:75:80:08:7e:18:6b:
         d0:8a:c9:77:60:4b:77:07:cc:95:df:f1:45:b5:ea:6d:1c:95:
         43:76:ac:04:50:37:7f:3f:19:9b:4a:97:1e:da:ed:23:0f:74:
         fc:12:9a:7c:9a:73:c6:22:7a:81:d2:39:c4:f6:75:4d:4f:f1:
         f9:32:06:b7:e0:68:92:9a:72:94:c4:cd:8b:37:85:e5:82:c8:
         0c:cb:e2:48:48:8d:50:2b:f0:e1:bd:5c:64:8d:bd:bf:a7:d9:
         71:03:44:27:bf:bb:02:ab:e1:84:58:5c:1c:78:10:60:c1:68:
         47:e5:5d:24:3f:14:0d:e3:92:68:08:24:2b:85:c0:fa:99:d7:
         a1:62:19:b1:e4:eb:7f:85:e9:64:16:18:16:d6:0a:8a:7b:92:
         61:9a:e8:71:b7:a5:48:29:6f:0b:b4:71:3b:6e:11:a0:d7:0a:
         9b:e5:83:83:5c:06:c7:4f:ff:93:59:0e:1f:1d:6a:24:70:88:
         45:3b:6d:fc:57:0c:db:14:8b:8e:4b:c7:56:b9:3f:ef:eb:a7:
         56:58:5d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:12 2025 by rpki-client