Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
File:                     99551366132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          C/qz1ChdaO2nCWQ6vWErfavJlbarpNHZxeEMEmeDtWI=
Subject key identifier:   7E:F8:54:68:A5:09:CD:F7:B5:83:E8:59:5C:15:98:B1:7F:F7:EC:45
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       07A7
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
Signing time:             Mon 30 Jun 2025 21:58:07 +0000
ROA not before:           Mon 30 Jun 2025 21:58:07 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     141234
IP address blocks:        103.156.244.0/24 maxlen: 24
                          103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Jun 30 21:58:07 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=6863086f-ecaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:b5:39:8b:e3:48:28:59:66:01:58:fb:45:
                    ae:da:30:9e:8c:c2:53:6e:cb:4e:9f:45:19:ce:a0:
                    28:9a:29:8d:7a:be:89:9e:dd:ae:1f:23:08:06:42:
                    c9:e2:f1:4d:43:74:87:6e:ca:7a:b8:cf:2b:07:3f:
                    60:c0:15:cd:ae:0a:ce:1b:b4:19:f3:53:9a:8a:aa:
                    50:2a:39:5c:69:4b:85:28:13:e8:da:dd:d9:96:1d:
                    a9:7f:d3:2c:6b:76:fe:b7:34:69:a2:8f:dd:d0:e4:
                    ac:b5:1e:bf:60:75:b0:b3:17:63:76:2e:52:df:78:
                    b7:0f:dd:c9:3d:12:2f:4f:47:e6:f7:27:93:bf:55:
                    af:73:66:f3:46:5a:8c:9c:47:f5:22:e8:83:50:a7:
                    88:29:89:f6:56:e7:e3:c9:ee:65:38:f6:01:24:d9:
                    35:11:3b:dc:6b:b2:2b:05:6d:c9:18:22:33:c0:62:
                    16:68:af:de:89:aa:91:0f:02:53:8a:cb:fd:d5:36:
                    db:da:0c:bf:97:eb:43:62:46:85:90:d7:38:6f:f7:
                    82:68:09:07:c7:24:07:9b:49:03:38:72:8a:9a:73:
                    4c:6b:36:b6:57:29:c8:3e:5e:65:cc:15:f9:ee:49:
                    36:bf:f6:43:4e:21:c8:67:56:d9:1e:e6:7b:a7:1d:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:54:68:A5:09:CD:F7:B5:83:E8:59:5C:15:98:B1:7F:F7:EC:45
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:bc:ee:1b:e9:45:84:8c:99:84:01:d3:9c:bd:85:d1:bd:
         bc:94:c9:00:dd:79:72:57:c7:25:a9:46:34:9c:97:94:bd:47:
         a4:e4:ac:15:ae:6d:95:75:be:a4:95:d1:f0:41:0b:b2:bc:de:
         f1:31:c8:36:8e:fd:db:9f:cf:3c:f8:7a:8b:5d:9d:69:30:66:
         cc:77:2c:13:e6:26:30:f2:43:a8:25:2a:f0:f3:e1:a5:27:76:
         bb:26:b9:ee:59:68:19:35:61:1c:b7:1e:eb:f0:72:1f:ca:9a:
         f8:d0:c7:7c:ff:6a:f5:a3:df:6a:59:b6:88:fb:29:d2:45:0c:
         30:00:cd:2c:94:3b:29:47:7e:e7:e4:a2:7a:34:81:64:fc:ca:
         f2:71:15:a2:1e:1e:06:62:22:0e:39:5b:90:d3:44:fa:1d:65:
         97:4d:96:86:54:04:c3:22:19:66:7c:e5:7b:0c:6d:5f:e3:13:
         c1:0d:8c:9a:e0:33:af:f8:95:df:95:7f:e2:0c:d3:93:ae:e7:
         d4:90:08:70:5d:52:49:64:23:28:54:e9:0d:b5:dd:e4:8a:80:
         90:89:bb:6e:ed:cb:9a:7d:41:19:5b:22:8d:a7:36:9f:c8:b9:
         09:81:35:cb:6b:31:2e:f9:08:ed:ad:cf:e1:e9:15:f3:b7:23:
         2d:68:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:22:27 2025 by rpki-client