Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/C7D60D34CC0611EC93451840C4F9AE02.roa
File:                     C7D60D34CC0611EC93451840C4F9AE02.roa (raw, json)
Hash identifier:          0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=
Subject key identifier:   25:6F:0F:86:12:73:68:9F:A7:5E:AA:52:81:57:52:D8:03:12:E3:C2
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1E72
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/C7D60D34CC0611EC93451840C4F9AE02.roa
Signing time:             Sun 04 May 2025 16:23:56 +0000
ROA not before:           Sun 04 May 2025 16:23:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     148968
IP address blocks:        103.74.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
                          rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7794 (0x1e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: May  4 16:23:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6817949c-0382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:1e:ce:03:c7:88:98:c6:7e:29:e5:ba:19:
                    8c:31:e3:84:4f:c8:cf:9d:be:9b:c3:d8:8a:eb:59:
                    bc:ed:e8:2d:32:24:a0:0e:46:57:69:31:80:e5:95:
                    4f:ef:d2:26:a1:ae:c6:00:fe:82:9d:e6:e2:eb:21:
                    07:3f:69:97:a2:8a:9f:67:b4:5b:ee:ce:38:65:60:
                    f9:c5:1f:1e:91:a7:aa:fb:ce:50:a5:cb:6c:27:03:
                    fe:c3:63:a6:f5:0d:6e:8a:10:75:f1:e8:9c:aa:b6:
                    73:4d:ae:59:df:59:55:a2:f0:2a:74:7d:3d:65:1f:
                    cb:d2:ef:8a:b3:1b:bf:c0:27:e6:45:d0:7f:06:9d:
                    c9:6d:72:25:6a:b2:ef:5f:2c:f6:09:29:0a:c2:c5:
                    d1:e5:f7:9c:dc:26:71:d1:9a:b0:13:51:9b:1b:50:
                    e6:45:eb:7f:ec:a8:11:83:ce:f5:af:df:88:6a:e8:
                    47:7b:11:42:1a:21:52:e7:c2:86:a1:e4:88:d6:09:
                    50:4e:77:66:02:e5:44:83:8b:f0:72:43:d0:af:7e:
                    9e:e1:f4:4e:f5:70:dd:4b:13:65:ae:ed:97:78:3c:
                    0e:50:ce:78:58:f5:bb:92:44:12:57:36:ed:5b:75:
                    3c:6e:70:f1:35:36:ff:14:ad:d6:32:96:33:3a:a2:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:0F:86:12:73:68:9F:A7:5E:AA:52:81:57:52:D8:03:12:E3:C2
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/C7D60D34CC0611EC93451840C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:3f:d9:25:e0:4a:ec:7b:60:6f:db:f7:b1:76:ce:da:3f:
         1e:b4:96:b6:bd:a0:d0:f4:0f:89:10:4c:af:6d:61:9e:23:ec:
         3c:24:ce:40:25:2a:50:ae:c0:62:13:62:7e:51:20:c2:d6:d7:
         3a:2e:77:f8:6b:c3:5c:fc:6a:dd:07:e9:2e:12:9c:d2:d8:e0:
         cf:5a:4a:2b:bf:85:a9:14:d6:d8:6c:28:f5:4e:64:83:03:ce:
         55:58:6c:5f:9b:bb:be:6e:e5:a0:11:61:36:d8:b2:8c:e3:bc:
         33:6b:d1:f3:3d:42:f3:24:17:68:01:f8:43:8c:27:5a:5e:f0:
         8a:be:9f:49:98:73:0a:cb:39:bc:15:4c:12:9f:06:48:06:05:
         bd:0b:3b:d4:a0:3c:fb:71:a3:25:3b:e3:14:11:5b:37:21:36:
         54:ef:54:dc:13:ec:a7:be:15:81:3f:2e:9c:c1:94:74:b8:1e:
         59:ad:31:03:92:af:77:57:e5:e8:ab:82:86:84:b8:d5:89:59:
         b5:1e:b5:d2:dc:36:47:76:1f:8b:81:d1:e8:8a:a5:63:49:37:
         c4:23:ef:fd:eb:6e:d4:5e:78:e3:64:cf:41:85:4b:13:bb:ce:
         37:e3:3d:1a:fd:e0:07:78:3c:97:39:f3:d2:3a:39:22:96:8e:
         1f:4a:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:04:46 2025 by rpki-client