Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
File:                     507C31C21D7211EFA095B25AC4F9AE02.roa (raw, json)
Hash identifier:          c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=
Subject key identifier:   7E:9D:BF:9C:58:DC:05:70:10:62:2C:A9:B2:F9:8B:CB:C8:96:A8:8A
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       BE
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
Signing time:             Fri 09 May 2025 05:17:06 +0000
ROA not before:           Fri 09 May 2025 05:17:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17559
IP address blocks:        203.14.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: May  9 05:17:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=681d8fd1-e4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:48:08:94:ac:8f:18:f3:94:5e:5a:80:91:
                    9b:e8:c9:7b:2f:96:b2:9d:e1:ab:e3:82:e2:cb:db:
                    b3:dd:51:07:48:a0:a0:51:5a:29:3b:f6:84:99:43:
                    06:07:a4:1b:2a:a7:d1:e4:a3:64:62:b1:6a:0f:6f:
                    d5:c6:07:ef:7d:d5:d7:ee:7c:d6:fa:ca:ef:61:e7:
                    eb:54:c9:8a:6b:37:cb:e1:a3:34:f0:11:b7:92:f3:
                    1a:0e:b6:81:22:4f:22:3f:d4:a9:f5:6f:14:05:22:
                    2b:63:f8:43:93:55:c6:ce:24:26:c6:fd:5d:d8:3f:
                    c1:89:6d:b4:a5:ae:c1:4c:fb:e9:91:63:3f:83:a6:
                    bd:1e:30:12:03:37:cc:ad:7d:1c:91:eb:43:0a:e0:
                    cd:15:40:ed:77:9c:88:c4:05:1d:88:ea:f4:b9:47:
                    b2:5e:f2:d6:10:d4:08:83:35:7b:ce:90:ac:46:48:
                    ed:0d:5e:2a:43:ff:ac:08:17:ae:00:9c:49:b7:41:
                    b2:35:92:80:62:97:27:21:f9:46:40:75:23:ed:39:
                    e8:73:66:02:ce:a7:82:e9:43:4b:76:c6:53:0c:75:
                    5d:c0:74:78:62:90:a0:37:a6:d1:27:2c:ba:7c:37:
                    5b:87:0a:dd:e3:cc:8b:8c:25:21:21:fd:35:95:3a:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:BF:9C:58:DC:05:70:10:62:2C:A9:B2:F9:8B:CB:C8:96:A8:8A
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/507C31C21D7211EFA095B25AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:f3:77:30:43:f4:4e:45:fd:5c:60:03:4a:43:81:0f:ba:81:
         fd:6e:78:59:c8:4c:ee:d3:12:f0:ff:c2:06:a9:12:2b:b2:e3:
         ae:36:29:a4:1e:2b:96:ff:c9:e4:b3:71:66:5c:42:91:82:cf:
         d9:82:50:82:69:c5:72:91:b3:84:46:b8:05:a0:2d:44:f6:fb:
         f7:a8:82:06:5b:a1:f5:6e:31:9e:c2:60:4d:bc:09:e4:ed:34:
         e6:14:a3:fa:7d:b8:1a:7f:a0:ee:1b:db:c8:23:76:49:91:a4:
         05:07:a3:5a:07:25:f6:b1:a8:33:2c:29:1b:3a:51:87:61:63:
         4f:32:35:8e:fa:92:22:5b:0e:74:9b:bf:84:1b:7a:af:af:a2:
         41:4c:8f:d8:93:f7:6e:30:e2:25:82:7a:5e:a4:92:e8:7a:6c:
         ff:3a:bf:f8:a2:cc:c0:dd:7f:8c:d5:c0:61:cd:4b:36:c8:d6:
         91:e9:a1:92:10:56:10:c9:e7:b5:64:af:78:6e:56:f4:0c:a7:
         21:b5:3b:c5:8e:45:22:4e:e1:d4:68:50:12:7d:52:90:e1:8e:
         40:b0:44:41:fe:c4:41:12:7b:2a:c1:43:b9:ff:e8:58:39:49:
         12:ed:90:06:11:e6:5d:00:e5:67:0f:a7:37:c9:10:99:44:ef:
         69:59:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:45:28 2025 by rpki-client