Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
File:                     7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (raw, json)
Hash identifier:          ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=
Subject key identifier:   99:6F:63:ED:14:3D:54:5C:21:90:90:0E:F6:B1:DC:B8:3A:D0:86:11
Certificate issuer:       /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial:       0620
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
Signing time:             Sat 10 May 2025 23:02:13 +0000
ROA not before:           Sat 10 May 2025 23:02:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142053
IP address blocks:        103.165.184.0/24 maxlen: 24
                          2001:df6:7080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
                          rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
        Validity
            Not Before: May 10 23:02:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681fdaf5-6512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:58:bd:6d:57:58:18:05:d1:f6:11:bf:be:
                    2c:b3:b3:36:27:3f:92:9d:f3:43:a9:8e:70:6a:c8:
                    73:57:17:c6:40:8f:f1:85:e7:89:05:18:9f:1f:ef:
                    8f:98:de:76:dd:d1:21:37:76:53:7d:aa:46:68:94:
                    d1:c9:d1:b7:aa:24:3b:83:45:71:2f:47:a5:9d:e2:
                    8a:d1:3e:6f:b7:a8:9c:9e:a2:ed:9a:05:39:f4:08:
                    69:39:2e:0e:39:45:a4:da:99:78:68:03:f4:43:75:
                    1a:b0:83:b5:79:2c:a8:59:89:89:12:57:3b:72:1c:
                    75:9c:23:09:d8:f1:fa:c2:6c:4e:01:15:8e:65:f9:
                    3b:d0:99:89:9b:81:de:b2:a4:62:46:dd:4a:a0:54:
                    d7:77:e4:fd:f1:22:81:13:27:44:cd:5a:d2:3e:37:
                    cd:d3:57:3d:29:fd:48:2d:84:ac:a9:ab:02:ba:e0:
                    cc:41:c0:4d:cb:90:f2:34:03:e4:ca:d5:cf:c8:d7:
                    b1:d4:2a:0f:5b:48:c2:5c:97:49:ba:de:7b:7c:d2:
                    51:f8:da:7e:98:0f:fe:38:94:d0:10:da:cc:72:b4:
                    1a:c8:ae:56:84:8c:a4:1e:eb:77:7a:7e:7a:1a:95:
                    6d:65:4d:9a:f1:12:7f:4a:0e:80:8b:51:58:53:50:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6F:63:ED:14:3D:54:5C:21:90:90:0E:F6:B1:DC:B8:3A:D0:86:11
            X509v3 Authority Key Identifier:
                keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.184.0/24
                IPv6:
                  2001:df6:7080::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:26:83:e5:3c:b5:4d:d7:f2:a5:d3:33:1e:c0:7f:ac:97:
         32:60:ab:d7:dc:ac:8e:03:cd:e5:04:42:13:06:67:d4:80:37:
         33:5e:52:75:21:0a:13:81:2f:02:05:19:6b:d7:99:52:17:6f:
         79:e1:bc:ef:7a:b1:44:ee:b1:92:d7:b4:14:da:1e:21:be:1f:
         70:c4:46:32:32:89:56:40:32:a3:9c:76:dc:e8:d7:37:3c:56:
         ec:ab:c2:e9:ef:7b:0f:ff:1f:15:67:33:c3:f0:92:fa:d0:66:
         9e:ab:1b:b5:2e:be:f4:e8:cf:b7:59:f6:09:e6:bc:6d:2e:2a:
         20:a3:50:89:f9:01:6a:78:62:06:06:02:1d:af:4c:32:00:42:
         a2:4a:52:51:4e:d1:4e:00:b8:0e:a1:4d:10:20:3e:c7:f7:d1:
         e0:3c:c8:83:57:86:36:fc:75:a3:59:24:57:c2:7a:90:50:56:
         f8:d1:70:0a:5e:f4:f9:30:54:f9:00:d3:d9:85:1d:09:f2:81:
         ab:e1:fe:fc:66:31:9f:46:5e:db:0d:c1:2b:f2:36:df:ce:62:
         b2:c2:1e:55:44:52:14:0d:5e:79:f1:33:d5:88:4d:4b:5f:ac:
         6d:b8:1b:b2:53:e7:35:3d:37:c8:ef:ec:fd:3c:2e:8f:ad:84:
         c8:f1:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:32:31 2025 by rpki-client