Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
File:                     BA7F7BA892C211EBBBF0055FC4F9AE02.roa (raw, json)
Hash identifier:          DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=
Subject key identifier:   CB:9A:60:83:CC:1D:D0:62:E6:D2:D4:C0:6A:A1:47:B7:D3:8E:94:EE
Certificate issuer:       /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
Certificate serial:       0644
Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
Signing time:             Tue 10 Jun 2025 22:51:39 +0000
ROA not before:           Tue 10 Jun 2025 22:51:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136256
IP address blocks:        103.165.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
        Validity
            Not Before: Jun 10 22:51:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6848b6fb-ef32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:74:c1:93:e6:38:f7:3c:3e:d5:cf:ad:39:bc:
                    e2:b6:92:6e:9f:99:4d:21:9f:ea:89:7b:3d:bd:00:
                    e7:f7:fd:54:8e:65:6c:d8:4e:44:5e:26:39:60:d1:
                    77:0c:83:1d:84:26:07:f7:4b:3f:da:a0:fd:17:42:
                    89:7d:71:39:83:28:49:8e:d8:43:8a:6f:52:de:5e:
                    c0:c1:6a:26:9b:0d:f3:60:24:88:c8:48:a5:1e:31:
                    b0:fa:b2:06:67:03:ba:d7:10:d6:cf:c1:82:01:d2:
                    19:7d:ad:5f:80:9f:8c:2b:91:0d:2a:70:d5:0d:a2:
                    13:ef:98:38:e3:3c:62:15:00:27:55:20:0c:5a:b1:
                    96:a2:6e:10:3a:a3:90:c8:de:1a:f6:b9:68:59:6e:
                    61:28:fe:80:6b:b0:7f:d8:f3:c8:d9:40:14:f5:c6:
                    3a:82:27:42:b7:01:44:1d:ab:3a:ba:e2:87:ed:a0:
                    87:8c:4d:7c:86:4a:22:72:68:6a:62:03:2c:9f:6d:
                    12:ba:3e:4f:77:d2:87:72:9c:b5:52:4c:92:8e:4f:
                    08:27:44:2c:12:f0:11:78:72:f7:fe:dd:e8:93:ef:
                    c7:93:5a:a1:34:90:c8:19:93:9e:f1:b3:ac:f2:9e:
                    5a:33:da:52:58:a6:5b:31:dc:e3:0f:95:c8:59:51:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:60:83:CC:1D:D0:62:E6:D2:D4:C0:6A:A1:47:B7:D3:8E:94:EE
            X509v3 Authority Key Identifier:
                keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:54:f4:92:7e:0a:4e:2f:2e:21:2d:7e:77:be:6f:fc:e5:56:
         8e:1b:25:6d:67:9a:2e:e4:46:01:83:7e:ee:19:f4:d8:53:e2:
         e0:2c:35:7d:5d:16:b3:9d:c1:c3:3f:dd:49:8f:8f:ca:42:95:
         a7:18:5c:e6:54:d6:dd:2d:5a:8f:4b:95:5d:b2:fb:d7:6a:c8:
         4d:6b:d5:e7:c1:76:a0:f8:13:89:00:4e:9d:2a:7e:60:be:bf:
         84:de:8c:35:9c:ad:ef:ea:16:10:40:2f:b7:a6:4f:6f:08:ee:
         4c:f2:b9:b8:15:c2:14:ec:fc:e2:77:53:e7:b3:79:71:3b:37:
         af:66:9c:bb:73:6b:43:08:ef:19:23:ca:aa:50:47:09:ca:d7:
         e1:ef:09:e9:05:c0:ee:27:96:86:f4:60:e7:bf:dc:be:bf:51:
         6c:e7:d4:13:44:a5:cf:33:9f:97:ad:a5:f4:cb:61:a6:83:1c:
         3e:74:cd:17:a0:1b:3c:7c:8c:0d:b5:92:12:70:44:ea:e9:f6:
         2a:59:55:89:ce:07:e4:b7:bb:3e:ae:89:82:9c:44:5c:a5:a2:
         15:98:6c:b1:78:68:3e:9d:14:47:63:5a:5e:58:96:c9:94:1f:
         f3:31:99:7e:3e:e2:c7:10:67:fb:ae:e1:d3:5c:52:f4:b9:90:
         ce:fe:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:34:16 2025 by rpki-client