Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/B56622C2638011ECAFDDDF20C4F9AE02.roa
File:                     B56622C2638011ECAFDDDF20C4F9AE02.roa (raw, json)
Hash identifier:          sspcJa/wwixauw7mP2qJtrkfB8t10qcZrFoCPRpkBt4=
Subject key identifier:   9F:62:9A:E9:A0:82:4F:7D:1F:FD:8B:10:64:7A:7C:91:57:24:D3:25
Certificate issuer:       /CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
Certificate serial:       041F
Authority key identifier: E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/B56622C2638011ECAFDDDF20C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 01:06:50 +0000
ROA not before:           Tue 29 Apr 2025 01:06:50 +0000
ROA not after:            Thu 28 Aug 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        103.227.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 00:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0416, serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
        Validity
            Not Before: Apr 29 01:06:50 2025 GMT
            Not After : Aug 28 00:00:00 2025 GMT
        Subject: CN=68102629-c665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:e6:ae:e8:14:53:69:ae:1a:fa:17:7e:fc:
                    28:93:f5:98:d3:12:fb:fe:ed:93:09:25:e6:69:33:
                    0f:50:31:7c:44:79:de:6b:b6:84:67:e5:33:17:be:
                    05:5a:89:d7:61:c6:57:f0:44:7f:39:98:20:ba:8b:
                    43:ce:77:b9:30:ad:7b:b8:c8:e9:2f:dd:ba:c2:f3:
                    b6:db:db:02:30:20:91:77:52:e6:b9:db:d0:56:65:
                    58:41:d4:a9:21:3a:d3:dc:e9:b8:05:a0:f5:4c:a5:
                    13:a3:56:e6:ad:f6:08:97:3a:27:de:81:15:e8:db:
                    53:89:00:4e:28:85:9e:73:e7:b1:2a:8d:f7:88:08:
                    ba:8b:2c:d9:8d:ce:c5:c3:e0:75:38:49:1a:95:99:
                    6d:ac:7c:3e:be:ab:67:cd:f1:98:7d:7f:df:cb:5c:
                    72:81:19:4a:0f:02:78:49:82:6b:cf:0f:da:82:84:
                    62:d4:8b:b7:3a:bc:29:96:90:8d:74:8c:4a:ff:92:
                    2e:87:55:f3:35:77:cd:56:11:0c:3d:21:e6:46:93:
                    ec:a6:8e:f5:56:17:e0:7a:bf:e1:20:f7:5e:1b:5f:
                    72:07:5a:88:ab:ee:e4:5f:14:2e:2e:e5:4f:2d:de:
                    bc:a9:29:10:22:b5:a0:16:1b:cf:c4:b5:d3:2e:66:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:9A:E9:A0:82:4F:7D:1F:FD:8B:10:64:7A:7C:91:57:24:D3:25
            X509v3 Authority Key Identifier:
                keyid:E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/B56622C2638011ECAFDDDF20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:11:7b:09:92:36:d8:76:d7:dd:6a:24:32:65:5b:35:09:22:
         35:3c:50:ce:9a:57:2a:23:b8:f0:f7:27:6e:6e:98:e6:77:4f:
         95:a1:b6:72:76:ed:19:61:d5:48:14:96:f4:83:b2:29:be:27:
         7f:5d:20:de:cb:32:19:14:63:0f:44:83:7b:e6:e9:2e:8e:09:
         f8:ec:95:f4:86:bb:be:a3:d6:bc:3f:54:f7:8d:20:94:f0:49:
         76:29:d6:4a:58:0f:af:dd:3c:23:33:76:ff:6a:68:3b:4c:95:
         b8:4c:0e:d6:be:e2:48:5c:7a:95:a8:04:d7:fe:45:05:8c:ad:
         5e:a2:c2:37:ce:fb:21:1a:fd:f8:69:95:92:9a:41:c8:65:83:
         ce:cd:47:20:21:57:18:a6:e6:a0:3c:01:01:60:cd:7d:e2:22:
         8e:cb:ac:7a:f2:48:8c:31:71:4f:2e:f7:54:64:8f:62:0f:67:
         75:9f:fa:88:b7:28:60:a3:88:54:ec:32:dd:08:48:3e:f1:4a:
         4d:c9:84:b2:fc:19:30:9d:12:9a:db:e2:44:9f:87:87:33:34:
         14:13:10:91:bd:ab:6c:2e:81:42:e5:d6:3a:bc:e3:52:6c:25:
         cf:f4:d5:9f:d1:16:8d:8f:a5:1d:79:ca:d5:9d:64:97:d1:1e:
         ac:17:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:13:48 2025 by rpki-client