Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/966F906E55AE11F0B578B836C4F9AE02.roa
File:                     966F906E55AE11F0B578B836C4F9AE02.roa (raw, json)
Hash identifier:          0n1zPL4rVbVCk5gwzWvN1WDwMGw6EDJeAlAYWGk44Ec=
Subject key identifier:   6A:06:E4:F3:63:EC:6E:03:8F:2B:B7:F8:18:F0:75:02:93:4D:11:97
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35F1
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/966F906E55AE11F0B578B836C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 12:34:39 +0000
ROA not before:           Mon 30 Jun 2025 12:34:39 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     150142
IP address blocks:        103.230.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 14:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13809 (0x35f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jun 30 12:34:39 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6862845e-b169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:12:f0:13:6c:f3:18:22:04:cc:17:5d:6c:
                    95:37:60:e0:81:33:f3:a9:a9:5c:12:df:66:52:02:
                    14:69:b0:3e:c5:1f:fd:ee:63:0a:4d:ad:29:e7:4d:
                    74:37:b0:bb:d6:9c:46:ec:e9:6d:ba:8b:19:8b:a5:
                    1b:73:92:fa:39:67:e3:a2:35:e5:53:11:07:d1:22:
                    bb:02:90:71:17:7c:15:c1:e6:d0:be:3c:5a:39:98:
                    ce:a9:0b:d3:4f:32:72:26:20:0c:ea:b9:68:4a:db:
                    ce:92:a6:7b:c9:30:83:41:69:ba:fb:b4:f3:55:fb:
                    34:4f:f3:ce:96:7c:c1:4e:5a:ca:bc:4d:e0:79:68:
                    41:30:93:c6:79:c1:0f:e3:37:4a:af:8b:1f:2b:59:
                    e3:25:fb:ec:59:66:49:fa:43:d8:64:2d:18:8e:58:
                    e4:3c:58:da:af:af:e1:ce:ed:db:7d:52:18:4b:7f:
                    a4:62:fa:fd:cf:f9:59:42:66:ff:5b:24:c3:75:cc:
                    c5:9d:dd:73:62:f8:68:54:46:4f:06:5b:4a:cd:8b:
                    25:49:c7:9f:be:2a:90:2d:9b:6d:7f:d1:7c:de:0e:
                    8b:9f:84:8f:ae:37:95:e3:31:0e:89:1c:ef:6b:f7:
                    0a:01:d2:3c:f3:f0:1f:86:fc:c7:97:ed:f6:48:2d:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:E4:F3:63:EC:6E:03:8F:2B:B7:F8:18:F0:75:02:93:4D:11:97
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/966F906E55AE11F0B578B836C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:9d:d0:24:0f:38:42:4b:93:33:ac:83:6d:6e:bc:a6:45:
         0a:8c:88:26:5d:30:36:4a:0d:02:36:12:41:3c:b0:6e:cd:7f:
         e7:bd:e7:ea:4c:56:31:66:80:b4:a0:50:4d:31:95:7a:1b:17:
         f3:91:80:a6:8a:df:54:6d:5e:09:5e:88:72:4f:30:82:5a:73:
         64:92:8b:a6:6b:de:6c:54:0b:b0:13:73:5c:29:fc:67:de:15:
         0a:22:e7:da:b1:78:1b:05:c1:43:eb:16:55:da:26:bf:a3:a9:
         11:60:7e:f7:91:63:69:ff:bd:70:a7:08:51:d4:18:a5:c1:51:
         15:db:32:a2:a3:3f:d8:59:eb:82:37:d5:b3:62:7d:95:94:ee:
         5d:9a:1c:a7:77:37:1b:ea:b1:5d:41:5f:c4:65:3a:a7:a6:d5:
         91:85:3e:04:40:4b:6f:dc:ba:6e:3f:71:a6:eb:e0:11:51:4e:
         3b:88:49:21:52:0e:47:4b:23:09:8b:36:1c:ac:14:bc:d9:e6:
         47:1e:3c:37:c6:bf:72:9c:d7:4b:d1:7c:a2:34:8c:9b:3a:b6:
         be:fb:38:c0:b3:6a:de:06:fe:01:d5:d3:fd:ed:69:e9:6e:84:
         8a:19:14:4b:66:2c:d6:f7:0e:5b:73:69:30:bd:dc:d1:96:dd:
         1a:ab:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:21:42 2025 by rpki-client