Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
File:                     FF4F13D4448711ECA80CFC34C4F9AE02.roa (raw, json)
Hash identifier:          pvvlftNep3JGBrkiJAisunxpzryLA3gGytWzHa5BKMk=
Subject key identifier:   B3:7C:CB:BC:03:A5:E3:47:E6:09:11:84:F2:65:82:00:6B:AC:D9:2E
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0C5D
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 19:03:19 +0000
ROA not before:           Wed 18 Jun 2025 19:03:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137810
IP address blocks:        103.114.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3165 (0xc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Jun 18 19:03:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68530d77-7d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:08:d6:b0:6c:00:7b:e7:31:b9:49:cc:7e:4f:
                    eb:77:19:aa:40:71:3b:19:0b:a5:09:20:f5:41:e6:
                    40:62:42:a5:95:08:84:64:f3:dc:b4:bf:80:19:07:
                    10:44:c1:21:f3:aa:8a:60:e3:a8:5e:5e:a1:ce:17:
                    dc:08:45:93:2f:f9:05:fc:d7:aa:22:67:7a:47:d5:
                    28:74:de:96:a4:6c:ae:62:f1:46:b1:ed:88:79:2f:
                    7a:97:77:aa:db:a2:ab:23:ae:a0:52:eb:01:a9:63:
                    47:a1:f2:ee:64:bf:05:f8:03:38:21:f4:ff:eb:d0:
                    ff:e3:40:b9:93:41:30:cb:cd:81:6e:49:36:a1:b5:
                    33:85:9d:b2:8b:64:0f:f2:82:ad:23:c8:f5:fd:b3:
                    56:1d:bc:8b:60:1c:84:66:17:cd:63:f1:b3:ef:32:
                    64:0e:7b:c3:34:60:e7:06:5e:ff:9f:60:2e:f2:06:
                    08:49:df:79:fc:4e:17:29:3a:9d:25:26:fd:6d:4e:
                    31:08:24:d8:67:50:17:f9:ea:33:6e:a0:86:18:62:
                    22:49:4c:48:f7:fd:6b:79:c9:29:01:41:ff:7c:00:
                    e6:85:40:21:97:eb:bc:40:73:fb:d4:a9:6f:ff:1f:
                    e9:ff:fa:b9:6f:d3:45:36:f5:a8:a9:66:89:24:61:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7C:CB:BC:03:A5:E3:47:E6:09:11:84:F2:65:82:00:6B:AC:D9:2E
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:13:2a:04:23:88:a2:0a:6c:95:f2:d8:c4:e4:f0:26:5b:5d:
         25:92:c1:4c:8c:b0:a0:2d:6a:65:d5:3b:85:7b:45:e7:80:f2:
         97:f0:8a:5e:33:9c:f0:aa:53:f3:12:4f:cd:a0:4b:7a:ac:32:
         bf:09:44:32:b0:18:ee:94:51:48:8c:c8:80:64:b9:ac:20:f4:
         90:39:9f:b3:1d:21:5a:6b:67:14:d4:d8:f9:b7:7d:98:af:9d:
         5f:d2:c6:17:b9:6c:c8:b3:9d:c3:27:29:8f:ea:38:56:7f:a5:
         3d:05:4c:af:67:07:f1:bd:c2:46:67:e8:e2:45:24:8a:df:af:
         9e:1d:af:4d:67:21:b2:29:a6:0c:bf:27:e4:cf:95:07:a1:15:
         7e:46:54:7f:4a:3a:de:94:95:d1:db:31:f4:60:b9:ab:4a:34:
         06:98:c3:bb:c3:6f:5b:ce:96:6f:0a:90:3e:14:5e:b8:01:32:
         90:b8:73:37:75:03:a7:b1:ef:8e:a7:c8:2c:e5:80:15:1b:31:
         65:d1:7d:be:d3:4f:7b:5f:f1:7c:55:c6:e4:2f:ee:85:57:c9:
         20:33:15:fd:e6:20:df:1d:c7:55:e3:94:9d:0e:49:32:ec:bf:
         6f:5e:a6:25:89:eb:f1:41:b2:e1:b7:58:98:c2:74:7d:2a:81:
         76:40:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:14:50 2025 by rpki-client