Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa
File:                     F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (raw, json)
Hash identifier:          RNLRzQRn83cGoWXhxHuljK6RYAeQYTlxrkWaUDZ8G44=
Subject key identifier:   2F:60:18:21:6E:8D:28:1F:10:78:61:5F:AC:4A:6C:DB:17:B3:80:F5
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       12B8
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa
Signing time:             Mon 30 Jun 2025 17:48:36 +0000
ROA not before:           Mon 30 Jun 2025 17:48:36 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.113.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4792 (0x12b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Jun 30 17:48:36 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=6862cdf4-d59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:4d:25:47:65:9c:53:a7:c5:4e:e9:56:9e:
                    50:81:6c:8c:9b:b0:d2:86:88:9e:9c:4f:b7:d5:1a:
                    94:9f:c1:e9:e2:5e:95:03:f7:15:f4:15:dd:39:c6:
                    c5:64:d6:80:26:db:f3:b7:80:aa:79:54:2f:97:35:
                    08:65:bc:05:9f:77:19:c7:1f:51:38:4d:13:f6:70:
                    ad:77:8e:c2:8a:af:85:7e:fe:e6:d7:ef:fb:cd:11:
                    6f:b4:81:68:21:e2:89:41:fe:9a:94:44:cc:64:ad:
                    33:7b:c8:b5:b4:ca:47:ec:67:b8:0f:99:dd:19:ce:
                    f8:b3:d0:db:3f:b2:92:42:0d:1e:fe:b5:e5:b2:4e:
                    75:ed:d5:5a:cf:ae:29:56:3b:8b:ce:2f:95:d4:5d:
                    91:9e:e9:e0:b6:ac:1f:fc:9d:25:30:5b:da:17:d9:
                    2b:ef:1c:de:5f:06:86:2c:10:f7:44:aa:55:51:91:
                    84:7f:e7:59:4c:b2:fd:1c:c2:28:b3:68:4c:4b:16:
                    b5:12:1a:38:97:67:ef:87:37:d9:4e:12:7f:c5:7b:
                    53:18:0d:06:33:87:48:8b:52:3f:f1:8d:fc:ea:27:
                    5d:24:ae:4f:48:cf:55:d9:c2:d0:cd:fc:d2:fe:89:
                    5d:fb:8b:41:70:ad:67:81:a2:c5:d9:f4:b5:bd:59:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:18:21:6E:8D:28:1F:10:78:61:5F:AC:4A:6C:DB:17:B3:80:F5
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F7B1497E987F11ED9E1F4D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:1e:3b:70:e1:1e:37:c7:9b:d7:db:bc:5d:bc:44:2f:16:
         0e:1e:23:0c:9f:39:4b:ec:3b:5f:2d:7c:14:a6:6b:c8:c5:e3:
         50:6e:ad:4e:06:28:08:b5:19:b4:c1:bf:61:9e:db:8e:85:b1:
         56:43:a7:bc:e1:29:99:ea:5f:a5:1b:aa:9a:b1:9a:50:4f:00:
         1d:38:e8:cb:9b:ac:b5:eb:67:f7:27:ae:40:f4:a2:ea:62:86:
         c3:89:3e:8b:6e:f9:4a:93:d2:dd:af:7e:07:d2:34:0e:9e:d9:
         da:20:a0:7e:19:57:cf:5c:d4:65:3f:d5:5b:b9:c3:e0:bd:65:
         61:ca:19:24:51:12:21:37:7e:0c:d0:37:37:7f:a7:f3:8e:95:
         1d:4f:38:13:2f:77:98:7b:ba:39:f1:a7:84:d3:60:5b:31:31:
         05:77:c9:97:a3:8d:ca:cc:aa:a4:cc:ef:c7:2d:4c:53:a5:a8:
         dd:b1:1b:11:3d:c9:32:3d:54:3b:79:45:ba:3a:79:f0:52:8f:
         a9:17:16:2e:e4:9b:d0:4e:b2:20:ed:0d:26:58:a6:e9:b3:6a:
         b5:ca:06:bc:f1:0c:37:13:ea:a0:62:8b:d1:7c:cb:a8:1d:38:
         93:ec:e6:22:d8:81:62:1c:72:86:92:d4:77:0d:c7:34:45:7b:
         dc:a3:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:47:43 2025 by rpki-client