Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
File:                     E869880C500511EA98307A59C4F9AE02.roa (raw, json)
Hash identifier:          vj3M9GWIecNQbzYctkTLvK5haUmE73bb2B+bBqSBJ9A=
Subject key identifier:   F7:2C:55:B1:30:12:5D:2B:89:BE:18:92:41:43:B3:56:4A:6F:39:30
Certificate issuer:       /CN=A917E832/serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
Certificate serial:       0AD7
Authority key identifier: 20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 19:54:54 +0000
ROA not before:           Mon 30 Jun 2025 19:54:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136534
IP address blocks:        103.91.232.0/22 maxlen: 24
                          2401:1540::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E832, serialNumber=203D1E2DA852BE5B643A99BEF564D774BDDCC7F4
        Validity
            Not Before: Jun 30 19:54:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6862eb8e-4c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:ba:ed:db:98:ad:3a:a5:c7:ae:49:fa:ef:
                    ac:55:97:a1:11:47:ef:f2:a8:78:7b:c0:e1:d7:2c:
                    68:72:da:1b:65:9b:f3:96:b2:ec:2a:e1:ea:fe:43:
                    17:21:1e:b8:be:1a:da:71:b5:ca:f0:e4:25:34:c9:
                    aa:21:c7:af:da:d5:66:94:82:17:d7:6c:ff:eb:f3:
                    c6:5e:59:53:49:f5:bc:39:c5:e5:7a:26:e2:76:ca:
                    68:e0:39:30:69:7d:44:f6:8f:66:d3:e3:5d:98:c2:
                    b2:ee:37:b4:48:b9:5a:df:1d:05:28:a2:0d:49:28:
                    bd:d7:db:55:26:1d:91:f3:98:ca:3e:c2:10:62:a1:
                    b4:df:29:13:0e:93:2b:db:92:c4:ab:78:dc:c0:d6:
                    ed:13:56:68:75:c1:f4:97:48:af:f8:da:df:49:34:
                    f7:a3:11:bf:c4:80:08:ad:3a:05:ea:80:0a:3a:53:
                    2b:23:cc:bf:ec:d6:98:c6:fa:2c:70:81:39:8b:c7:
                    fe:6c:eb:dc:6a:66:33:ad:17:f8:c9:bf:6a:54:07:
                    a4:af:4b:b9:73:0c:41:be:0b:09:d4:e6:28:f1:00:
                    48:23:26:ab:f2:c0:7e:46:c8:8f:38:e1:04:35:7e:
                    76:da:ba:32:3d:85:99:04:ba:28:b8:cf:26:a8:62:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:55:B1:30:12:5D:2B:89:BE:18:92:41:43:B3:56:4A:6F:39:30
            X509v3 Authority Key Identifier:
                keyid:20:3D:1E:2D:A8:52:BE:5B:64:3A:99:BE:F5:64:D7:74:BD:DC:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/ID0eLahSvltkOpm-9WTXdL3cx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ID0eLahSvltkOpm-9WTXdL3cx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E832/3B47108C500411EAA6D93054C4F9AE02/E869880C500511EA98307A59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.232.0/22
                IPv6:
                  2401:1540::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:6a:a8:d9:d2:b4:6a:f2:d5:2d:a1:38:85:ad:29:bc:db:
         74:2a:2d:d1:0f:ac:dd:f8:30:f2:b4:46:23:8a:f1:65:3d:8c:
         20:6c:13:97:4a:35:16:68:e8:c8:0c:cc:c9:71:ed:09:ac:c7:
         04:1f:ed:05:30:19:73:fc:ed:53:db:0e:09:11:7b:c9:75:9f:
         86:e3:32:32:2e:a5:01:37:e8:eb:a2:e4:64:91:f9:80:79:b5:
         98:57:af:e0:76:51:9e:c5:df:9a:02:b3:0e:10:c1:91:47:48:
         27:44:4f:08:51:b4:65:96:38:5c:50:5a:8c:cc:5a:23:c1:62:
         4e:cc:00:35:9a:e9:e7:75:be:db:7d:40:22:73:a0:71:40:36:
         29:42:d4:30:c3:70:ff:a0:ea:72:67:82:a9:95:c6:5b:d4:d3:
         19:89:02:e8:8f:ba:38:2c:0a:0d:68:27:ae:8e:ad:b0:94:b1:
         c5:e6:c4:72:78:2a:a6:84:93:31:94:f2:57:51:42:08:a8:52:
         23:c1:c2:ea:7f:9b:34:e3:40:ff:ae:95:19:d5:d3:56:b5:51:
         68:15:44:07:61:cb:5d:ad:54:fd:e9:cc:2a:77:c5:bd:2a:ae:
         5d:47:04:fc:c7:ba:f4:4f:69:d9:39:05:d7:b7:f6:c2:71:b1:
         0e:df:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:00:52 2025 by rpki-client