Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/39275D0C232511EC925DF318C4F9AE02.roa
File:                     39275D0C232511EC925DF318C4F9AE02.roa (raw, json)
Hash identifier:          kMA98lH1wtLYavwio/f29E4JAww9w+abzPZIVQ6M1dk=
Subject key identifier:   66:0E:01:5A:E5:66:CC:34:1A:9F:6E:13:75:B4:7A:81:72:DA:4E:64
Certificate issuer:       /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial:       0F25
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/39275D0C232511EC925DF318C4F9AE02.roa
Signing time:             Sat 28 Jun 2025 17:50:06 +0000
ROA not before:           Sat 28 Jun 2025 17:50:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138358
IP address blocks:        103.138.150.0/23 maxlen: 23
                          103.138.150.0/24 maxlen: 24
                          103.138.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
                          rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3877 (0xf25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Validity
            Not Before: Jun 28 17:50:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68602b4e-c8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:fb:d7:78:9c:55:92:73:89:c1:30:01:af:
                    d9:92:24:c7:30:8f:4c:ad:10:76:c7:58:22:de:04:
                    c8:81:da:f4:cc:72:53:0b:3f:b4:7d:72:6d:4c:2e:
                    30:55:89:c3:98:66:a1:53:b1:b5:51:fe:90:1c:14:
                    63:18:fe:70:83:d2:0a:f6:a6:7c:43:9c:36:69:57:
                    34:c3:e0:1c:70:ff:a4:33:7a:b4:4f:b0:82:46:91:
                    54:ed:10:fc:fe:24:4a:62:bb:da:42:5e:24:15:52:
                    fb:31:6c:3a:e4:67:f2:e1:96:8b:8b:68:cd:f4:3e:
                    f7:05:14:64:88:92:ce:e4:80:4b:7f:79:e7:1c:ec:
                    5d:3e:9e:1f:7f:f9:07:c6:a0:09:24:4e:82:a1:39:
                    8c:48:78:20:78:1b:b7:25:b4:2b:17:94:fd:6d:f9:
                    ec:91:15:9a:7e:2a:5e:b4:b1:89:17:63:3b:ab:e5:
                    95:22:35:16:84:13:6e:2c:3a:c4:22:d9:d7:7f:c2:
                    d6:91:52:ba:03:29:73:82:22:0f:ad:a2:c0:8f:a6:
                    5d:5a:b0:24:80:85:61:90:0a:e4:0f:44:5e:10:c5:
                    f0:a0:aa:d1:ae:1a:f8:ca:1f:2b:fb:1c:52:60:82:
                    ad:57:b4:43:b3:5e:26:b5:93:bc:87:be:2d:71:56:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0E:01:5A:E5:66:CC:34:1A:9F:6E:13:75:B4:7A:81:72:DA:4E:64
            X509v3 Authority Key Identifier:
                keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/39275D0C232511EC925DF318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:fb:c8:00:df:eb:50:eb:1c:a7:76:17:a8:cc:ef:e3:41:99:
         84:87:97:4c:0b:54:f8:d6:7f:39:9c:a3:6a:4e:ee:e6:f4:8a:
         6a:f4:53:11:08:d2:9b:7a:ee:c2:c7:8a:eb:6c:58:fb:0a:ca:
         2f:23:0b:cd:df:67:08:d3:fb:d0:17:24:d0:31:07:91:8d:73:
         a9:8e:ea:88:b2:1a:cb:88:c9:86:f6:16:16:51:f8:d7:1d:e9:
         44:92:12:61:dd:f5:46:87:30:22:a7:64:eb:c2:9d:03:6f:55:
         ae:eb:f9:8d:f0:73:6e:86:09:87:45:26:db:4a:b5:dd:74:8b:
         26:aa:a9:21:d9:92:69:0c:e0:7b:04:c8:3f:ad:84:32:fd:0c:
         d1:ec:46:d7:57:5b:17:c2:73:06:c5:17:19:54:19:18:38:7c:
         42:3b:b1:6a:ac:da:80:7f:61:65:56:cb:ec:d9:9e:7a:ab:e7:
         40:5a:d7:db:85:fa:43:47:f2:15:c2:d5:7c:82:c0:d7:b5:db:
         60:0f:a9:9b:35:cd:3c:9d:23:67:a8:af:74:c2:4b:e8:93:7e:
         32:31:82:11:9a:e1:9c:95:e9:6f:30:39:0a:7d:91:2c:22:e2:
         46:e7:30:b9:ec:f0:0d:68:9c:32:0c:08:37:f6:fb:72:fa:da:
         d8:b9:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:29:25 2025 by rpki-client