Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/A26FA1DC51B811F0B1C0B748C4F9AE02.roa
File:                     A26FA1DC51B811F0B1C0B748C4F9AE02.roa (raw, json)
Hash identifier:          +ia9FDkk8XhHZAjnVE6jiqT+IAX2KrKqfIZK/zSEFO8=
Subject key identifier:   22:AF:8E:10:58:FD:81:AA:70:71:84:66:59:16:04:39:75:7D:FA:08
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0E23
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/A26FA1DC51B811F0B1C0B748C4F9AE02.roa
Signing time:             Wed 25 Jun 2025 11:36:29 +0000
ROA not before:           Wed 25 Jun 2025 11:36:29 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     397373
IP address blocks:        103.83.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3619 (0xe23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Jun 25 11:36:29 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=685bdf3d-16b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:70:e6:ea:1c:82:7b:cb:cf:ec:8d:fe:a3:
                    34:73:93:78:ae:e7:04:79:fe:98:56:88:e4:50:db:
                    5e:3d:89:f4:84:fc:91:fe:8f:9b:4b:c4:38:89:b7:
                    2b:73:b1:1f:dd:7e:1e:c2:58:e1:c8:6e:76:fb:73:
                    c5:d8:50:b7:6f:2f:af:c7:05:5c:ed:52:92:e8:cd:
                    39:a9:f6:62:cf:9d:6f:a1:0c:4d:71:6b:36:f2:bc:
                    94:7d:33:39:35:44:f6:34:f9:93:87:35:d3:63:79:
                    5f:91:31:59:ff:81:6e:3a:7a:8b:24:37:35:f5:2e:
                    19:3a:b6:b1:5e:64:cc:55:d3:82:32:ad:71:61:5b:
                    8b:d5:8e:5e:44:a2:61:a5:f8:85:ea:78:79:cc:b5:
                    cb:35:6c:0a:16:b2:89:fc:ee:7d:a2:dc:50:49:75:
                    8a:ef:8c:42:b3:13:59:71:df:40:87:0b:85:0e:96:
                    99:bf:7f:52:4a:46:87:0d:a0:5a:e5:60:7d:2a:35:
                    db:40:e3:b8:3f:e2:86:da:82:d9:a3:20:77:46:e1:
                    99:91:14:77:57:5b:05:0f:e5:51:f5:37:8d:5d:91:
                    f0:0d:f7:f7:45:97:8f:89:6b:fa:4d:e3:90:ff:70:
                    f9:5a:e8:b1:72:70:ec:37:47:3b:20:fb:d7:8f:20:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AF:8E:10:58:FD:81:AA:70:71:84:66:59:16:04:39:75:7D:FA:08
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/A26FA1DC51B811F0B1C0B748C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:02:0b:9a:86:45:31:c3:57:1c:ab:56:73:40:1c:a9:43:96:
         ba:de:5e:42:27:91:6d:02:fc:a1:82:d4:f6:a5:c1:6a:45:01:
         b3:79:f2:94:88:54:47:75:ef:e8:88:de:96:63:e5:5e:52:f7:
         ae:0a:d9:05:62:c0:33:1a:36:3c:ca:e0:04:29:c2:3b:cb:c8:
         ad:16:bf:fb:c4:d4:6a:93:45:d9:c3:86:c3:b3:a7:15:94:eb:
         e3:38:f9:0f:29:8f:68:69:c7:19:d3:25:fe:38:5f:1d:53:b5:
         8d:8f:7a:0a:0e:1e:07:b3:21:7f:f9:24:56:b8:64:ad:82:f9:
         bd:96:ab:87:8b:b3:09:a5:84:21:76:82:56:45:6f:ca:3d:ba:
         54:b9:49:8e:a7:ca:1b:77:de:e5:51:31:a7:91:2d:55:ce:e9:
         99:8d:74:9c:db:71:d8:e8:19:36:e0:f3:97:ac:d6:4e:ab:94:
         68:a1:39:7e:ee:74:db:9b:82:0f:3b:f6:07:39:77:d6:b4:b9:
         2e:3e:5c:01:6a:fa:84:ae:ce:3d:33:c2:cc:60:40:88:30:e7:
         d5:fd:2b:eb:62:7d:0d:01:c4:04:cc:a8:6a:2d:7e:3b:6d:ea:
         e4:40:8c:80:a1:05:e9:17:05:d6:f6:60:ec:06:91:94:98:f5:
         49:f7:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:23:55 2025 by rpki-client