Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
File:                     87A141747A5511EBA4258A7DC4F9AE02.roa (raw, json)
Hash identifier:          rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=
Subject key identifier:   29:D9:FF:9F:46:03:D8:64:5A:90:96:C0:B7:79:13:9C:8D:1F:BC:9A
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       0942
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:59:25 +0000
ROA not before:           Wed 02 Jul 2025 20:59:25 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132825
IP address blocks:        103.151.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2370 (0x942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Jul  2 20:59:25 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68659dac-64c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:b3:98:ce:a3:d5:9c:8c:ea:7d:28:0f:0f:
                    50:3d:81:92:c8:fd:c3:45:12:09:5e:64:42:5b:9d:
                    2c:a9:6a:11:50:19:3c:28:e5:0f:4a:d8:88:87:ad:
                    99:38:fb:00:2d:e8:31:8c:28:fc:fe:b3:23:35:92:
                    25:f7:18:22:0b:d7:2f:72:0d:fd:2b:37:c2:52:1e:
                    65:d1:81:38:d8:53:a6:0b:10:3d:95:56:7c:a2:64:
                    05:3d:18:93:05:53:5c:aa:e7:6a:83:3a:21:25:84:
                    46:1c:d5:b5:98:2f:cf:e5:e5:6a:78:cf:0d:bf:33:
                    de:1b:ef:94:ea:ba:a6:f3:22:ef:0d:4b:15:92:b8:
                    89:62:98:73:10:0c:ad:e9:eb:7f:10:79:ce:6b:9a:
                    af:f5:06:ce:59:18:ba:7a:90:4e:50:c1:3a:fc:e2:
                    3b:e9:91:14:b6:1c:4e:3e:c5:17:a8:00:68:43:16:
                    c9:51:90:3b:b7:f1:ef:a2:f5:b2:03:0d:c8:40:3b:
                    cf:d3:8a:6b:4b:59:9b:61:df:d1:09:05:00:b1:2f:
                    32:91:25:fb:21:bd:56:f4:0c:f9:64:e5:66:e5:2d:
                    db:17:54:ea:16:ff:61:fc:af:6d:a4:87:00:95:ff:
                    f6:f7:ee:99:89:40:eb:41:3e:e1:32:d6:1e:a2:52:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:FF:9F:46:03:D8:64:5A:90:96:C0:B7:79:13:9C:8D:1F:BC:9A
            X509v3 Authority Key Identifier:
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/87A141747A5511EBA4258A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:3b:00:a0:39:ed:17:80:a9:b5:e6:1f:bf:25:e1:37:83:7d:
         e9:7c:0e:62:62:f8:ee:ec:cc:db:7b:ba:a6:90:b6:02:51:2e:
         72:e5:a5:ad:d7:97:57:f0:6c:55:68:d0:20:49:e0:d1:b7:65:
         90:9b:8c:8b:7c:4d:09:22:7a:6e:80:18:ef:91:e4:6a:f8:02:
         b1:d1:4b:59:58:f2:5b:77:eb:2e:f8:97:0f:6a:c3:82:06:45:
         5c:2e:69:5d:22:1f:c8:bf:77:e6:4a:96:78:bc:eb:98:42:49:
         b3:a3:20:99:af:26:3b:13:9f:7a:da:35:bd:69:48:32:7e:c8:
         12:b3:68:07:07:73:15:34:86:13:14:01:e3:99:12:a7:e4:ce:
         68:a5:45:ef:53:61:3a:16:70:e9:a3:d5:67:11:64:bb:92:71:
         19:c8:b4:84:1e:40:f4:66:64:8e:3e:7e:94:41:6b:cc:f6:87:
         e7:0b:29:93:73:16:86:2a:e0:82:2b:4f:08:2f:ad:e3:72:60:
         c8:f0:73:a2:8e:1d:91:75:4e:ec:47:cd:05:93:04:95:e5:f8:
         2c:91:db:5e:e7:3a:22:ce:c7:1a:6b:37:cd:91:c7:07:98:5f:
         bb:ff:ad:65:4b:bc:4b:21:b4:05:c8:ff:b3:18:df:3d:ad:3e:
         11:77:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:21:29 2025 by rpki-client