Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
File:                     18BDABD2537F11F0A9531C09C4F9AE02.roa (raw, json)
Hash identifier:          jBvkqb6jI6ollOqdN8B9OtpQXSI083YHITbt77mXBK8=
Subject key identifier:   C7:07:D2:9A:4C:48:49:71:CD:06:D0:46:6B:1A:09:7E:5A:67:1D:5B
Certificate issuer:       /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial:       19
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
Signing time:             Fri 27 Jun 2025 17:49:39 +0000
ROA not before:           Fri 27 Jun 2025 17:49:39 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139029
IP address blocks:        103.78.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
        Validity
            Not Before: Jun 27 17:49:39 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=685ed9b3-9e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:13:2b:e1:a5:42:43:c1:fa:26:cd:01:5b:
                    20:61:7d:91:53:a5:79:f4:07:b3:c8:38:6f:ed:34:
                    1b:78:98:fb:d4:91:31:b1:79:be:c5:b5:50:f3:8d:
                    16:e9:9a:21:b4:1d:d0:d3:c0:2b:1d:e5:02:45:2d:
                    bf:66:4c:63:3a:60:e3:69:a8:0c:e1:ea:50:24:59:
                    ed:40:da:38:6c:0d:da:77:f0:95:e4:a6:94:b0:42:
                    32:32:ef:f0:7f:0e:4f:5e:f8:b4:16:6c:7d:f0:33:
                    d3:5e:6a:a6:42:0c:2f:c3:a2:d4:0d:2f:0b:75:4b:
                    4f:69:19:fd:6f:17:4a:57:59:c6:83:18:8c:50:8e:
                    f2:33:d9:01:ab:6f:5d:91:b4:66:f3:3d:8a:e5:21:
                    24:dc:76:8a:65:98:a3:84:d5:f2:89:6a:e3:8a:e1:
                    79:2c:0d:be:96:6d:02:61:d5:0f:10:1e:36:51:87:
                    34:57:f3:59:56:aa:0c:52:96:df:a6:81:1d:4f:7c:
                    70:11:25:f7:2a:52:cd:d4:50:82:14:a0:17:ec:6d:
                    b2:6b:9b:61:d2:b7:32:78:cf:3d:b0:ec:7d:61:9f:
                    ff:63:dc:fe:25:cc:7b:ef:b5:e2:53:44:4f:fe:f1:
                    88:58:4e:b1:81:46:49:0a:c6:26:9f:54:01:b6:56:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:D2:9A:4C:48:49:71:CD:06:D0:46:6B:1A:09:7E:5A:67:1D:5B
            X509v3 Authority Key Identifier:
                keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:d2:e9:7b:09:cd:09:0e:82:d0:ad:60:0f:92:e9:fe:1e:
         78:1c:3a:38:01:9b:44:0a:ce:fb:7e:82:c2:0f:cd:c3:c6:65:
         54:7d:f9:cd:72:5f:34:ff:a8:b3:5a:9d:0d:f5:a9:38:c8:9a:
         dc:83:c2:4b:31:5f:11:28:80:37:f2:ac:c9:da:da:9d:75:41:
         c5:93:a9:e8:73:b5:40:87:2e:15:b9:64:a3:55:f4:2c:84:f7:
         0a:d1:74:f9:00:00:5b:aa:93:72:52:9e:9f:48:91:f5:00:31:
         fd:c2:d7:90:72:70:58:e3:90:c7:ab:8b:8d:95:7e:a5:14:04:
         05:c9:a1:e8:0c:74:6a:d8:14:5f:97:f0:f7:c3:ba:06:13:12:
         ea:4b:c7:9a:c3:2b:12:1c:d9:71:c1:0a:81:4b:ac:ee:51:39:
         47:35:73:85:5d:1d:69:3b:38:34:a6:74:51:78:ed:bf:a7:7d:
         d5:99:b8:1d:e6:1b:cf:74:ae:9d:b6:83:cc:e5:4e:58:dd:27:
         c1:6c:1b:b5:a2:c8:4f:6f:6e:4a:c0:65:a2:22:b9:3d:d4:7b:
         22:c4:d2:6b:0a:21:24:af:53:ec:cc:af:94:4e:21:9f:7b:71:
         04:8e:df:26:58:0f:50:4b:54:61:27:1f:de:53:3f:26:ec:28:
         f3:e7:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:51:03 2025 by rpki-client