Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa
File:                     B7E47C68C02511EC93BB8865C4F9AE02.roa (raw, json)
Hash identifier:          8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=
Subject key identifier:   CF:B5:F1:77:ED:3E:7C:E2:E2:96:53:CF:A8:FC:75:71:F1:B9:D7:E9
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       0364
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 02:08:42 +0000
ROA not before:           Tue 29 Apr 2025 02:08:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139218
IP address blocks:        103.184.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Apr 29 02:08:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681034a9-f1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:53:96:07:2c:12:b2:64:86:3d:87:2b:ca:
                    55:58:80:f5:07:0e:86:68:56:28:5e:92:75:9a:68:
                    1c:c5:b2:3a:55:19:94:68:82:3c:17:31:55:49:ae:
                    33:e1:1d:2e:8d:3f:db:7f:17:ad:f8:c6:0e:9e:36:
                    ab:e0:e4:d8:6d:04:ad:25:f9:b0:a3:18:49:56:72:
                    22:bf:42:b6:51:d1:2d:a6:b5:11:a1:81:1f:c4:c3:
                    6f:09:4b:ab:9c:42:9b:f1:d0:88:44:bb:ef:85:fa:
                    8c:fd:c1:e9:9d:97:1e:9e:0b:d7:67:84:68:a8:d0:
                    51:0c:00:57:69:7c:a6:7a:ed:83:f3:c6:1e:93:57:
                    9e:1e:73:0a:d6:ed:3d:c0:52:16:9e:93:d0:c9:fd:
                    da:4a:34:a4:f6:82:56:e7:fd:05:0c:1b:5e:e8:46:
                    2b:57:ec:66:4a:70:f4:50:25:f8:ac:fe:a1:2c:70:
                    fa:cc:b5:80:46:4a:08:30:1c:a4:08:13:0d:7a:d4:
                    a8:39:1a:24:a1:27:31:ee:a1:b8:00:ca:4f:d4:69:
                    54:be:88:9a:ae:cf:23:8e:dc:22:90:d3:b8:28:9f:
                    a5:20:8b:ba:0e:1a:22:a6:36:6b:ff:2d:ad:54:f3:
                    ae:59:e2:60:27:b0:7f:a3:e5:0a:64:54:21:74:01:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:F1:77:ED:3E:7C:E2:E2:96:53:CF:A8:FC:75:71:F1:B9:D7:E9
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/B7E47C68C02511EC93BB8865C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:79:fb:45:a3:a1:af:75:2e:93:6a:55:8f:84:5b:8b:76:
         2e:76:de:1a:d8:03:e4:57:10:5b:68:c5:25:e9:76:c2:be:10:
         07:29:2c:2b:ea:51:c5:31:53:e0:e2:0e:93:57:c9:76:46:25:
         db:6e:68:d2:3a:1e:3d:02:95:0f:aa:83:cb:de:ab:cd:8c:32:
         e7:27:43:92:0b:6b:63:18:2b:53:cb:0b:4e:49:c8:87:35:25:
         f6:98:35:19:50:65:10:41:d5:45:41:ae:6c:09:50:76:bc:8d:
         0f:0d:f4:45:78:b4:a4:39:d4:a6:b2:da:cc:ce:f9:81:89:8f:
         ec:38:69:98:98:9f:bd:b1:29:77:77:d2:b3:11:18:e0:18:86:
         7a:f9:2d:32:66:8e:ab:e1:fe:b4:4a:58:76:ce:5f:3b:a4:16:
         84:ac:2f:68:cb:16:c1:da:6c:d0:64:30:0a:2b:44:5c:60:5c:
         bb:2f:70:62:66:e4:92:e5:16:87:ac:c8:22:d7:b1:e4:2d:09:
         1b:68:b5:1e:44:53:be:68:35:e9:ee:86:be:23:a6:ac:60:82:
         b6:c4:e2:a7:c0:d8:3b:ba:53:bf:b2:5a:7d:9b:f7:76:ae:d0:
         3b:e2:92:88:07:92:af:46:7d:b4:af:05:26:71:89:0f:c9:a6:
         1d:53:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:46:57 2025 by rpki-client