Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
File:                     7447BEF0928411EFB854A522C4F9AE02.roa (raw, json)
Hash identifier:          8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=
Subject key identifier:   2E:34:ED:F3:E0:53:72:FF:2A:D8:B2:8A:E4:C3:05:84:14:8F:64:7C
Certificate issuer:       /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial:       EA
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
Signing time:             Sun 11 May 2025 04:45:26 +0000
ROA not before:           Sun 11 May 2025 04:45:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135858
IP address blocks:        103.79.116.0/24 maxlen: 24
                          103.144.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
        Validity
            Not Before: May 11 04:45:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68202b65-347e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:78:49:a5:73:bc:14:3b:cc:ac:94:d3:30:
                    77:03:24:37:3a:fe:76:fb:b4:b9:37:97:79:cc:f0:
                    ce:2a:e4:ff:e9:d3:09:87:e4:fb:07:14:26:2d:5e:
                    56:ac:a5:88:3e:66:b6:ad:22:96:30:86:7b:d2:7e:
                    63:ee:2f:83:5e:13:95:75:8f:0d:65:cf:09:8c:72:
                    cf:22:a5:a7:2e:8f:13:9a:47:51:9c:c5:24:df:ae:
                    36:de:4a:a9:c6:95:a0:ee:2d:1f:3d:56:df:c0:bd:
                    44:29:74:01:79:42:eb:53:79:16:b8:bc:da:16:5f:
                    c8:31:c1:78:15:94:d7:55:70:d7:06:d9:85:3d:e1:
                    07:0d:ed:08:bc:4f:aa:3b:5a:06:b2:83:c0:00:60:
                    75:ab:3c:a3:46:89:3a:69:d1:de:43:68:63:9c:11:
                    d2:bc:c9:2d:83:a5:e4:bb:4b:2a:cd:02:7e:12:0c:
                    06:31:3e:0d:b3:61:d2:7b:30:55:5b:16:db:a4:4e:
                    32:70:fb:ef:50:ca:84:4d:43:df:3c:0b:17:e5:33:
                    95:2f:b8:86:01:75:6d:a9:79:1c:f9:7c:a7:31:85:
                    b1:a4:ed:84:16:f4:fd:61:cc:88:d9:ca:9d:1f:e7:
                    22:7b:c5:32:90:d0:62:5e:40:69:26:64:6a:48:93:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:ED:F3:E0:53:72:FF:2A:D8:B2:8A:E4:C3:05:84:14:8F:64:7C
            X509v3 Authority Key Identifier:
                keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/7447BEF0928411EFB854A522C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.116.0/24
                  103.144.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:67:0a:dd:97:1c:8d:63:19:2c:e0:f0:49:3a:de:62:d9:0f:
         e6:b0:22:89:a0:a4:e9:62:98:a2:21:54:02:2d:a0:13:d9:02:
         4f:17:1d:85:36:b8:d8:c2:7c:87:29:9e:07:60:cb:01:12:fb:
         28:2e:03:a1:73:08:d5:61:a3:0a:42:a5:d3:bc:e3:4a:f6:16:
         28:dc:bf:af:17:e6:b8:77:8e:60:68:13:f4:bf:77:7d:b0:7f:
         b2:d4:1c:f0:36:6d:a4:14:73:c0:9e:3b:d0:ce:cf:eb:c3:dd:
         bc:43:47:1d:ce:a7:1f:26:38:f4:16:fe:d0:28:bd:be:ae:19:
         ed:76:90:d7:b4:c7:61:55:8f:d4:80:ca:66:79:0a:c6:26:e8:
         e7:fb:be:3b:4c:71:5a:77:a5:1b:9b:da:c9:3f:a4:b8:8c:f7:
         6d:b0:4d:12:bb:3f:4e:7b:24:6a:95:e8:07:16:4c:13:2f:e0:
         e6:55:cf:5d:90:10:69:a1:2c:73:25:9a:14:eb:10:d5:2e:17:
         e6:07:a3:20:af:56:4a:0b:1b:0a:4d:b2:0d:34:22:46:d1:ad:
         16:a4:d0:f2:78:7a:34:c5:d4:89:78:4b:d6:fe:bd:40:35:32:
         c0:ed:62:88:ae:e8:13:9a:bc:db:1d:3d:c9:53:a0:7e:88:4a:
         fa:64:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:20:42 2025 by rpki-client