Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
File:                     507476EE6BD811EFBDD72932C4F9AE02.roa (raw, json)
Hash identifier:          pdzJ5okYmWLfXDpKnMd4R/Lx/tQtmRyHcTZA/k863ZA=
Subject key identifier:   C6:8E:24:5C:EB:81:FD:6A:DD:CC:5B:1E:F2:4B:72:02:A6:78:FB:AC
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       FA
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 05:43:18 +0000
ROA not before:           Thu 03 Jul 2025 05:43:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137185
IP address blocks:        103.230.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Jul  3 05:43:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68661875-df84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:3c:f8:0f:01:db:8c:d5:57:d0:69:c8:f2:
                    11:6a:0c:ac:6c:19:27:06:38:6f:e6:96:5d:b4:9d:
                    aa:66:04:ca:1a:fa:2d:90:f4:50:d0:03:d8:f1:5c:
                    8d:3a:c4:e9:f6:d7:73:da:c9:13:4d:df:4a:98:ff:
                    9a:63:df:a3:e9:6e:dc:e5:98:77:af:c4:76:ba:54:
                    54:97:3d:e1:56:3d:9c:be:d4:48:4c:19:66:13:39:
                    40:74:59:6d:6b:db:a9:87:bc:df:7e:cd:e6:b4:14:
                    8c:26:d9:c0:74:5a:fb:70:5c:7f:db:64:ba:4a:73:
                    0d:f4:eb:23:0f:bf:81:69:9d:f8:0f:21:02:07:14:
                    21:a9:9c:33:8c:84:bc:ea:51:91:64:0f:06:f1:7f:
                    6d:ee:23:75:71:38:75:2e:c7:fc:38:5d:49:3d:02:
                    fd:67:1e:dc:62:f2:64:8f:49:cd:da:d0:80:b0:f9:
                    15:1b:ac:23:84:b7:57:90:23:36:d6:10:4d:f3:10:
                    e6:9f:0a:8d:25:5d:52:15:6a:1c:c3:a0:5f:3f:aa:
                    e5:43:5a:35:53:fd:ed:89:44:ee:32:8c:94:43:11:
                    fb:a3:5c:23:88:ff:02:7f:ad:26:86:9a:d4:66:e9:
                    bb:24:2d:df:c4:7a:a0:01:0a:f4:00:4d:61:6b:cf:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:24:5C:EB:81:FD:6A:DD:CC:5B:1E:F2:4B:72:02:A6:78:FB:AC
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/507476EE6BD811EFBDD72932C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:54:a9:36:e6:1e:e1:aa:55:f0:b4:48:6e:52:be:9d:29:
         ac:b6:18:52:c1:75:0d:99:00:0c:e2:e4:f2:cf:d5:d4:33:7c:
         39:0d:51:ac:82:5b:80:c0:18:bf:23:b0:ee:d6:53:44:2a:c7:
         7e:0e:2b:26:8d:a6:5f:0e:d5:13:8f:bc:3c:38:fe:49:1f:5e:
         19:e3:2f:ab:76:db:09:9e:7d:88:16:0c:b4:24:0f:11:47:0f:
         eb:ba:12:ea:49:ba:71:bc:12:59:85:b4:dd:1c:99:3d:72:fd:
         2f:42:f2:17:14:bb:5c:eb:09:46:f3:04:66:db:c6:df:67:b3:
         51:14:ed:23:10:07:f2:64:7a:6b:33:f3:67:9b:c1:cf:0c:80:
         21:ef:2e:11:9a:15:aa:6a:cf:56:79:53:bd:1d:7c:8f:27:ce:
         26:b6:41:7b:25:74:54:ba:c9:d7:4f:73:80:41:ab:5a:bc:f5:
         31:38:3a:ad:d2:37:8f:73:e2:78:e6:9d:f6:72:52:31:d5:35:
         7b:4a:dd:62:27:fa:f8:7b:a8:4b:5c:02:16:99:4e:b0:65:46:
         b8:c2:3b:ff:67:a7:28:e4:43:cb:fb:e6:2e:6d:65:74:33:ff:
         60:f7:84:f2:22:98:01:5b:31:02:ea:6c:88:ce:92:b8:49:2e:
         79:82:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:12:15 2025 by rpki-client