Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
File:                     A6A9297A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          ALVZOeZqg2fw/RE1f7nW2JzwgJJllDEIcQtNxszAmnQ=
Subject key identifier:   17:50:4F:84:B4:FF:37:C0:17:D6:B9:5A:A8:D3:A7:CA:56:D8:87:6C
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       01A2
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 03:22:29 +0000
ROA not before:           Mon 23 Jun 2025 03:22:29 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136393
IP address blocks:        103.14.10.0/24 maxlen: 24
                          119.110.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Jun 23 03:22:29 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6858c874-d6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:c5:51:b1:00:8b:34:82:9a:9a:74:d2:65:
                    93:d6:fd:4f:ab:e0:b5:aa:d8:f2:87:c4:50:e9:fa:
                    14:57:21:3c:5a:63:d5:a8:3e:71:1a:88:11:10:c3:
                    5e:16:91:a7:7f:95:01:8f:97:be:ba:0b:23:6e:e7:
                    94:b3:5b:95:88:39:5c:fc:a8:32:91:4d:16:1b:19:
                    99:a9:91:7f:ae:f7:d6:0d:a1:1a:ea:82:63:1b:f1:
                    c7:90:cf:e8:60:92:23:af:67:76:f5:5f:aa:b9:40:
                    f2:ea:58:23:48:e0:b0:48:fe:fc:74:1e:ab:23:6f:
                    a2:8b:94:88:87:2b:b0:17:d6:91:ca:3e:2a:fc:6c:
                    9c:b0:a8:a7:6a:8f:38:47:bb:75:d8:c2:48:a1:2a:
                    53:dc:bf:d8:0c:b9:84:94:db:ed:9d:c9:2a:5d:60:
                    41:af:7d:e0:00:90:5a:eb:ef:ff:cd:5b:d6:03:9c:
                    8b:12:cc:06:36:e7:35:0a:04:65:ab:d0:74:81:87:
                    9e:c5:f0:46:9e:8a:d2:9a:65:2f:39:70:4b:24:91:
                    6e:24:0e:b3:b5:de:4d:c0:5f:e3:d7:f2:67:6f:96:
                    45:1e:30:af:11:76:d4:51:3c:d6:31:4e:c6:15:4f:
                    58:bd:56:fb:21:96:1b:f5:0e:32:26:9b:ea:f3:79:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:50:4F:84:B4:FF:37:C0:17:D6:B9:5A:A8:D3:A7:CA:56:D8:87:6C
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.10.0/24
                  119.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:80:21:3d:58:b4:b8:75:77:76:93:ab:fe:6c:75:54:2e:80:
         f9:a6:e0:56:5f:f6:6c:59:8a:75:eb:ae:3a:d2:9c:14:31:85:
         86:97:54:6e:13:07:22:c6:7e:70:48:09:87:e5:98:dd:52:ed:
         a4:7c:85:2e:c3:05:b6:ab:6d:e7:4b:d1:5e:91:75:54:3d:c7:
         19:5b:81:d0:85:e0:21:d3:8e:a9:82:c6:f7:4e:14:94:fd:64:
         d9:3f:67:3b:4a:8b:60:71:6f:97:b0:c0:1b:d6:68:82:d4:54:
         42:f0:32:bb:12:82:14:c1:08:30:9b:68:61:54:45:3d:2e:2e:
         fb:40:97:fe:7c:88:45:16:cb:64:05:2f:9e:ab:cc:7f:ce:03:
         19:6b:bf:4c:54:0b:94:28:77:47:ad:e8:91:21:95:57:66:f4:
         ea:fa:1f:92:51:39:a6:fc:77:3c:71:a9:45:09:24:d4:dc:df:
         d0:bf:34:cf:a9:f6:40:94:61:91:d8:6c:ff:48:69:d0:c6:cb:
         ee:dc:b2:a7:fa:42:af:21:00:89:29:64:1c:b3:dd:da:ae:40:
         4c:df:29:aa:77:5a:09:dc:71:ef:61:f4:2f:0b:0e:8b:1c:92:
         05:f9:ae:2c:ee:13:ce:e1:06:5d:d3:73:c7:bd:df:ee:c6:6e:
         6c:17:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:12:48 2025 by rpki-client