Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/6808AEBA278511F09AB25F80C4F9AE02.roa
File:                     6808AEBA278511F09AB25F80C4F9AE02.roa (raw, json)
Hash identifier:          wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=
Subject key identifier:   A9:7C:7A:2C:56:89:8C:0E:C5:8E:54:8E:FC:D1:5C:D9:78:45:6C:B4
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       0389
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/6808AEBA278511F09AB25F80C4F9AE02.roa
Signing time:             Fri 02 May 2025 18:43:58 +0000
ROA not before:           Fri 02 May 2025 18:43:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138658
IP address blocks:        103.183.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: May  2 18:43:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6815126e-329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:da:61:1b:7b:06:7c:b5:57:79:b0:82:56:
                    c2:37:ff:2a:4f:b6:34:6f:3d:20:c8:57:32:ed:63:
                    92:1e:52:ee:91:1a:2d:0e:b4:85:34:f0:b2:36:00:
                    69:c6:40:f1:fb:e1:9f:9f:04:dc:5e:74:bf:45:9d:
                    0f:c0:9c:8a:b6:d1:59:36:b5:e7:61:b0:6e:20:bc:
                    b2:53:59:b0:20:12:b9:86:43:15:4f:46:2d:7c:72:
                    ff:a5:5c:2b:fa:25:c5:9f:df:16:b0:95:e8:8e:4a:
                    3c:f3:c4:05:7d:11:7d:3d:cb:49:a7:16:f2:2a:27:
                    31:a5:a4:fe:7f:1e:02:26:00:51:00:f5:22:68:02:
                    37:3a:e5:38:55:b7:ea:13:4d:3b:ba:49:c0:96:a4:
                    e0:4a:36:7c:35:cc:bc:05:a7:2e:11:19:85:f0:7c:
                    3b:31:73:cb:0c:be:21:72:15:1a:0c:a8:be:d6:7e:
                    60:20:26:cb:1e:ec:23:4c:9f:4a:4c:dc:4a:b5:bb:
                    da:8b:2b:9c:2e:f1:7a:23:04:90:4e:38:75:2a:cb:
                    57:3a:f5:27:90:5b:c9:db:17:1d:8a:1a:03:3f:74:
                    d8:0a:38:6a:63:63:ea:65:b6:81:21:14:5b:a2:a5:
                    e5:0b:3e:28:3d:d3:47:b5:84:b9:f0:30:16:6e:60:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:7A:2C:56:89:8C:0E:C5:8E:54:8E:FC:D1:5C:D9:78:45:6C:B4
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/6808AEBA278511F09AB25F80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:05:97:cf:71:cc:b4:91:2e:d6:b4:81:3a:4a:c6:89:e2:
         8a:6d:aa:a2:44:4d:70:87:ac:96:1d:32:24:8e:d2:6b:7d:59:
         38:b4:05:c5:bf:08:8a:81:06:88:39:97:5a:83:1d:7b:52:a7:
         c4:21:6a:8d:f5:ef:2f:4a:09:c2:05:61:1b:6b:0b:68:43:46:
         fb:22:eb:f3:04:39:4a:01:21:8e:3c:ea:11:52:e6:9f:f8:98:
         3f:5a:bc:81:5e:ba:92:1b:85:41:c2:4e:fa:e3:e1:dc:6d:d6:
         57:30:f3:c4:b9:72:d6:ee:2a:3b:ff:b3:55:b6:56:ba:a7:cb:
         4b:23:ba:30:4d:08:cb:3e:8f:7a:16:f6:e9:b6:f1:52:ff:f2:
         41:ca:a2:29:6a:c7:4b:78:e1:12:cc:0f:f9:93:06:79:36:3c:
         2a:9a:f5:ff:44:5a:53:7f:46:f0:dc:ee:20:63:73:a3:3f:e2:
         4d:bf:78:03:c0:c5:c3:9e:1b:57:52:e2:60:e1:4a:19:35:b7:
         89:38:fd:5b:8c:9c:e3:be:cf:8a:ad:f8:e9:e4:49:3b:44:2b:
         b3:ca:89:eb:95:b9:e5:e5:02:de:df:1f:ed:c0:84:3b:3c:7b:
         ee:95:83:a7:6f:6e:80:c1:a3:42:63:99:7f:75:56:2d:4b:a9:
         11:a8:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:44:10 2025 by rpki-client