Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
File:                     9746A47821DD11EBBEEF997DC4F9AE02.roa (raw, json)
Hash identifier:          wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=
Subject key identifier:   0A:55:41:1C:96:EA:7C:1D:7D:20:43:5F:AD:A8:00:2A:59:83:2C:92
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       09ED
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
Signing time:             Fri 20 Jun 2025 20:26:51 +0000
ROA not before:           Fri 20 Jun 2025 20:26:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.150.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 20 20:26:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6855c40a-e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:12:e9:88:c0:ae:03:ab:44:36:6f:95:54:
                    9f:05:52:62:69:f3:ba:4a:29:a8:ed:ff:27:13:cf:
                    d0:5e:ec:17:00:c9:5e:5a:e9:b7:d7:4b:17:c9:2b:
                    2d:fa:23:43:91:27:86:3d:ee:05:84:37:2f:2f:e3:
                    91:fe:f0:22:7c:fd:49:ef:b8:e2:af:20:c2:b8:be:
                    c2:bb:0b:3a:c6:11:aa:8b:78:4f:4d:72:e1:a2:bf:
                    f0:d3:ba:02:7c:8e:fc:5e:cd:0e:e7:74:fe:03:22:
                    a1:af:fe:07:bf:f4:cf:f0:0d:17:11:2a:68:76:f8:
                    7e:29:3c:f8:d4:e8:e1:7a:91:4b:be:9b:c2:ee:56:
                    e0:d8:6e:ec:c7:95:0b:bc:ae:43:2c:93:38:fd:ee:
                    a5:70:5f:0c:a0:06:ce:55:10:cf:1e:0c:14:e0:db:
                    84:20:e4:b3:6e:31:00:70:a9:3b:34:c6:c6:e4:38:
                    46:b7:0e:df:40:40:40:2f:20:bb:09:61:91:6c:59:
                    03:6a:6e:48:6e:bb:2a:6a:29:4c:a3:bf:47:f1:49:
                    ca:13:41:5b:5d:9b:91:82:af:e2:8e:0c:09:b8:56:
                    a9:c2:59:5c:57:ae:ca:c2:c1:10:5e:38:c3:b3:3f:
                    af:d0:0c:65:e5:2e:e7:fb:d9:83:ea:f7:78:f7:79:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:41:1C:96:EA:7C:1D:7D:20:43:5F:AD:A8:00:2A:59:83:2C:92
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:ac:08:46:7c:de:71:07:5e:ba:90:fd:f2:d5:95:29:fe:
         c1:45:0d:4c:83:1f:76:45:82:f7:73:a2:93:71:46:2e:24:39:
         21:0b:2a:5a:ea:9b:2a:06:e3:d7:9a:8f:51:cf:6f:5f:84:20:
         1a:f9:11:f4:8c:1a:cb:1f:51:30:a7:4c:14:5e:2a:7c:3f:e5:
         ad:c4:86:68:f9:b6:14:4a:23:2f:39:be:7d:59:91:aa:1e:72:
         b0:c0:7a:f1:09:77:7f:2a:e9:0b:8b:61:eb:31:92:7d:c1:ac:
         61:a0:53:c0:e0:44:2c:1f:22:29:bd:37:4f:bc:97:f6:c6:24:
         8e:a0:74:40:97:9f:de:a3:87:46:24:bb:ae:16:b5:b9:a0:ca:
         77:21:33:89:d2:81:a0:1e:6c:a6:a3:74:0e:c2:bc:94:b4:31:
         a5:8a:5a:9c:bb:88:2b:7a:7c:c4:9a:81:15:30:c7:c0:50:78:
         b4:3d:c0:14:5d:86:51:4b:0b:d9:27:ea:82:c7:e1:20:82:58:
         7d:32:2d:a7:5f:72:1e:16:e8:4b:37:94:9f:66:59:5c:a5:c4:
         8f:73:9f:aa:62:4c:5c:8e:ef:b4:10:e8:8b:b6:7c:f2:45:76:
         5e:61:77:b7:68:e4:d7:61:8f:4f:ec:96:1f:3d:1e:b4:29:fd:
         ac:a2:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:35:21 2025 by rpki-client