Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/0EE376F8BF7111EEA53E4981C4F9AE02.roa
File:                     0EE376F8BF7111EEA53E4981C4F9AE02.roa (raw, json)
Hash identifier:          jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=
Subject key identifier:   BD:81:C8:FC:69:68:CB:7A:B5:5C:47:8F:2D:6B:7E:FD:28:7D:CF:E6
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       01EC
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/0EE376F8BF7111EEA53E4981C4F9AE02.roa
Signing time:             Fri 11 Jul 2025 04:09:39 +0000
ROA not before:           Fri 11 Jul 2025 04:09:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9928
IP address blocks:        103.115.3.0/24 maxlen: 24
                          2401:3fa0::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jul 11 04:09:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68708e83-763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:fb:60:31:d9:09:ca:24:84:40:52:cd:2c:
                    6a:df:f9:ae:a9:35:40:9b:ea:11:4d:95:4a:b1:7d:
                    3f:b2:20:b6:34:41:12:18:38:d7:84:31:5e:ca:13:
                    b1:2a:5b:5e:9a:29:36:cb:38:16:07:8b:65:d0:19:
                    28:28:3e:17:a6:d5:c4:72:3e:08:97:b0:9d:d9:e4:
                    94:35:58:6a:aa:b5:84:dc:c1:8d:e3:d6:26:2b:a9:
                    e5:e6:05:4c:d9:bd:f7:64:ec:09:e8:8b:1a:da:f5:
                    e9:c7:95:14:ad:92:55:26:25:8d:d8:98:41:e7:96:
                    52:c2:e7:7b:48:6c:f6:af:ea:a8:89:3f:72:e0:78:
                    55:1c:f1:75:c0:9b:7b:f7:ce:ab:e8:28:c0:1b:19:
                    3d:8d:d6:24:51:d2:ba:16:73:a1:a7:26:68:2f:1a:
                    98:bb:1b:2b:95:af:cd:ce:25:0b:de:83:a7:02:f1:
                    a1:47:64:8f:37:67:e7:0d:9d:2b:90:fc:6c:22:a1:
                    b9:46:3e:94:95:45:ee:8c:6d:f4:be:56:27:4f:69:
                    e6:4d:5a:d3:0c:42:77:7c:46:11:77:2b:8b:d1:a7:
                    05:0f:c3:6f:fc:22:58:45:7d:25:53:bd:5d:1c:97:
                    6a:96:94:5b:e0:b9:c6:91:4b:f3:11:c4:46:f1:52:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:C8:FC:69:68:CB:7A:B5:5C:47:8F:2D:6B:7E:FD:28:7D:CF:E6
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/0EE376F8BF7111EEA53E4981C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.3.0/24
                IPv6:
                  2401:3fa0::/64

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:45:60:6d:45:1f:d5:68:51:a0:7e:c8:99:3f:3d:bd:13:
         99:de:f6:f6:b4:6d:e1:d0:67:71:af:27:72:7b:bf:36:2e:f5:
         04:34:34:27:d4:84:06:4d:46:b8:38:9b:d6:2b:72:48:98:79:
         a3:9d:9b:be:29:fb:35:b7:f6:31:8c:69:d9:d4:d9:a5:1e:89:
         bc:1e:b6:d6:ab:dd:7d:b7:ff:09:b0:f6:c3:07:7d:0c:91:70:
         91:ee:64:6b:fd:f7:69:9a:31:99:b2:f6:a7:47:c1:66:29:03:
         33:be:5c:91:a9:c2:dd:81:60:19:e7:9d:a9:59:4a:3d:a1:4c:
         02:a7:49:ab:45:5c:72:ee:4c:1b:f2:3b:59:7f:a5:fb:2b:12:
         39:08:2e:65:be:8e:55:5f:01:d3:c3:64:f9:a9:b5:32:fe:86:
         18:be:06:b5:f4:01:24:ac:b2:42:0b:19:8d:a0:94:f6:0e:97:
         81:fe:34:aa:ee:f8:30:0f:b6:81:6e:3e:29:b7:52:5c:52:ab:
         7b:f8:2f:dc:ce:28:47:19:5e:48:dc:9a:51:3b:13:d6:51:44:
         53:87:5f:d6:a3:49:35:9a:b4:8d:0e:19:f3:b3:12:5e:68:5d:
         08:9d:00:ec:9a:71:ef:c2:fb:82:f5:87:77:d9:8b:2d:bd:3d:
         16:00:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:05:32 2025 by rpki-client