Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
File:                     DFC9BF30F14E11ED992E1316C4F9AE02.roa (raw, json)
Hash identifier:          PzV7dQ/Ntjwe4VwuBgo5nWo9sWxiEDa03H8RbyLVUfw=
Subject key identifier:   C1:42:AB:A6:7F:1B:D7:26:63:FD:8E:9A:AA:39:09:81:00:BB:5D:3A
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       017A
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
Signing time:             Tue 13 May 2025 03:12:42 +0000
ROA not before:           Tue 13 May 2025 03:12:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138493
IP address blocks:        103.69.58.0/23 maxlen: 24
                          2001:df2:5440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: May 13 03:12:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6822b8a9-4944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:74:7b:6a:e1:d8:ae:10:e9:aa:f9:0e:2c:
                    06:a5:aa:3f:e6:9c:ad:f6:e2:de:e3:a5:71:21:c6:
                    b6:77:6b:fe:08:2b:6b:bd:97:89:54:69:45:be:04:
                    3f:25:c6:a0:b4:d3:d2:74:a7:97:6c:23:5c:ab:da:
                    3b:70:a9:29:08:ba:9b:cf:59:82:41:ac:b8:e0:58:
                    76:56:81:36:e9:af:59:c0:87:d4:4d:7d:3a:a7:fa:
                    7c:b2:09:f4:59:52:c0:94:4c:7a:bf:c8:eb:e7:a4:
                    a3:62:d8:06:e5:2b:70:cd:9b:58:ba:a6:9d:49:89:
                    a8:4b:7a:ae:11:c3:fc:6b:95:90:d4:6d:05:c6:f7:
                    19:e5:51:f8:b5:ea:0f:3a:6c:e7:c2:a8:bf:4d:35:
                    04:38:7a:95:9c:3e:1c:40:ef:6e:ae:31:ac:d4:25:
                    bd:60:f3:42:47:34:07:86:e3:2a:64:98:b2:42:7a:
                    ba:ab:90:09:06:c7:dc:7b:a5:82:9d:b2:9d:0e:e0:
                    02:07:aa:26:81:8e:8d:a9:1f:0b:31:00:22:34:06:
                    22:09:9f:53:27:4d:f9:73:92:c0:39:db:4f:fa:de:
                    8a:66:58:46:6d:05:33:df:33:b0:17:d0:bb:d3:6b:
                    cf:06:4f:5e:2f:a2:85:8a:22:03:56:4c:f4:c4:96:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:AB:A6:7F:1B:D7:26:63:FD:8E:9A:AA:39:09:81:00:BB:5D:3A
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/DFC9BF30F14E11ED992E1316C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.58.0/23
                IPv6:
                  2001:df2:5440::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:10:f9:3c:a6:37:0a:fd:9b:5e:04:dd:ef:47:6d:f1:ce:
         e8:ca:d6:4e:a8:7d:fc:5a:77:3f:b9:2d:58:bf:c6:3a:0d:03:
         47:1a:83:2f:31:38:bd:23:f7:fe:81:fe:80:ae:8a:07:6b:d8:
         33:e0:dc:cc:53:93:ad:e8:cb:cc:f5:e1:8d:f6:a9:13:b2:ea:
         95:ad:45:d9:1e:7a:6d:3b:55:33:96:e9:9b:05:78:bb:12:d8:
         fa:03:5a:85:60:11:b9:c1:02:fb:98:55:ea:92:86:c9:b0:53:
         df:84:54:75:2f:24:ce:34:09:e2:38:da:d1:22:ca:17:4c:86:
         ba:a3:d8:c3:bd:42:12:9e:e5:e1:50:6d:08:48:e6:3d:8f:63:
         41:4f:ed:50:d7:0d:15:9d:c6:82:4d:b3:85:d9:cf:9e:8c:5a:
         c9:76:cd:50:c4:c8:ef:cd:44:a0:fe:e0:f2:d5:d5:16:72:8b:
         cc:ff:32:1f:8e:b2:df:4a:01:cb:a9:60:5e:ff:66:57:54:33:
         5f:c4:00:26:05:da:f9:06:85:ab:f8:b9:c5:dd:72:35:cd:cf:
         7a:61:19:15:b5:ed:de:13:5a:0d:a3:c2:a4:11:81:9b:57:a9:
         ed:c0:61:22:f0:90:72:68:15:73:31:c6:8b:25:4a:a5:cd:0c:
         0d:4a:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:35:34 2025 by rpki-client