Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa
File:                     5E6EBAF64D0611F09396603CC4F9AE02.roa (raw, json)
Hash identifier:          T7YSg4O6XdsHdCRu0Ytt2yzH0YgQZroHBRbYY6Lzb10=
Subject key identifier:   57:C4:88:93:85:39:81:62:24:F3:25:6C:AD:61:74:5E:4E:76:5F:B5
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       41
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa
Signing time:             Thu 19 Jun 2025 12:10:20 +0000
ROA not before:           Thu 19 Jun 2025 12:10:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141159
IP address blocks:        103.117.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: Jun 19 12:10:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6853fe2c-84ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:f8:59:2b:38:8f:4d:80:82:75:e1:ce:75:
                    4a:74:ba:09:d9:e7:5f:15:84:60:d6:54:b7:7d:d8:
                    1c:e6:59:2e:bf:e3:64:21:a1:d7:04:99:14:ff:b1:
                    df:5d:f3:36:b3:92:4e:51:5a:b9:a7:ce:de:2f:3b:
                    ec:a1:68:06:bd:72:5c:33:11:f2:56:c6:70:70:eb:
                    83:fd:41:00:63:b0:62:12:10:5e:e9:5e:8a:ef:4c:
                    3b:57:b3:a8:08:9c:68:e4:17:17:19:b7:ff:5f:3f:
                    f3:62:13:df:5b:a5:dc:49:8a:fe:cd:a2:69:a3:0e:
                    33:a6:b8:6e:3c:9e:2e:57:72:22:c9:89:28:e1:1b:
                    85:a6:ed:1a:61:62:cb:6c:17:3b:d2:a2:e9:38:91:
                    e6:40:05:38:7e:fd:78:5a:a0:1b:65:ad:94:ed:84:
                    68:60:4d:6a:dd:31:38:08:a6:17:8d:9a:54:d5:eb:
                    a2:2b:81:3c:b1:51:b9:5e:ed:99:59:6d:70:6a:b4:
                    56:3f:4a:80:8c:e3:eb:da:43:80:92:6c:e8:7c:a2:
                    ea:85:6f:a2:b7:95:a6:ea:74:f0:62:8b:be:62:36:
                    1b:37:9a:bb:86:18:05:b5:1f:c1:47:f5:cc:ad:9a:
                    a3:2d:37:f5:b2:d9:a8:8c:dd:ee:71:62:2f:ac:f3:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:88:93:85:39:81:62:24:F3:25:6C:AD:61:74:5E:4E:76:5F:B5
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/5E6EBAF64D0611F09396603CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:33:12:f1:9d:8e:a1:1a:35:a8:ab:db:ca:1a:b4:84:53:
         c6:fc:0c:f2:78:bb:48:c3:02:eb:97:b7:f6:7e:e6:b9:82:d6:
         e8:5f:7f:b7:02:33:cc:7b:d0:25:f4:53:dc:b3:5a:f3:e6:98:
         c5:32:7f:f0:26:ae:97:40:94:54:bb:5a:4c:d1:02:18:47:97:
         db:e0:91:94:b6:18:1d:1a:35:a4:42:31:df:50:dd:c0:e4:f3:
         84:c2:84:c3:8b:82:b1:40:10:71:36:ec:18:0d:9f:49:18:7c:
         7a:b3:f8:04:d3:11:39:ce:c7:d1:28:ad:df:ce:c6:e9:fe:86:
         fd:84:d0:a9:97:48:8a:e3:5f:95:48:17:c3:69:56:b6:f6:aa:
         37:df:96:54:18:73:28:6e:90:7e:2b:3c:1a:90:8f:27:6c:19:
         17:1b:f0:7f:ed:f2:d8:2f:fa:a7:5b:99:4b:3d:79:63:3e:8a:
         c7:5b:9d:3c:c7:ea:11:2d:41:3e:47:96:fc:2d:33:99:0e:32:
         82:1b:59:35:79:4c:da:48:75:08:fa:41:7e:91:b3:e4:96:ea:
         74:d9:2b:b4:a4:ca:7b:55:1b:17:5f:d2:6f:5a:42:f8:67:9b:
         36:27:a1:4e:eb:0f:67:fd:f6:9f:92:b9:79:c0:cc:98:5b:89:
         ff:5c:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:08:26 2025 by rpki-client