Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
File:                     57BB8E50AF1D11EF9CB35387C4F9AE02.roa (raw, json)
Hash identifier:          aL8UwuV9B6ueDtpsOze0tkW6hu8XTEdtukIKIk0NgRk=
Subject key identifier:   2E:7A:2E:30:A0:2D:50:E1:C0:72:ED:77:4D:B6:9E:49:21:EF:71:AB
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       02D9
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 02:08:36 +0000
ROA not before:           Tue 01 Jul 2025 02:08:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149995
IP address blocks:        103.190.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Jul  1 02:08:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68634323-a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:11:6a:a4:df:55:2c:c0:49:7c:b8:cc:63:
                    41:f1:bb:4d:47:ed:07:94:93:e3:c7:f3:b8:a0:cb:
                    c8:3d:7f:eb:d9:cc:a2:6e:86:51:17:5d:ec:9e:92:
                    d9:16:2a:20:4d:d8:d3:e7:d2:f3:0e:55:85:87:62:
                    14:df:c0:45:9b:69:fd:61:0b:ec:11:7d:35:16:73:
                    4a:36:de:64:3d:5d:bf:80:06:c2:64:19:41:0d:08:
                    02:06:1b:91:c2:20:9d:e8:82:b3:d7:0c:99:10:5d:
                    47:4b:dc:8e:a2:f0:03:be:c5:36:4c:28:d0:ee:1d:
                    ce:3d:d9:d4:72:00:3a:ca:d5:86:fe:a2:9e:4f:1a:
                    8f:ba:dc:ab:7a:22:95:3b:1d:9b:a3:8a:5d:54:8a:
                    b4:2b:7e:d0:5f:9c:72:f1:25:ba:e9:13:71:ba:65:
                    21:f0:b5:5b:f8:0e:db:17:ab:9a:a9:5b:48:0f:8d:
                    39:2e:2b:a8:9e:11:7b:3a:7b:05:8a:9d:51:e4:66:
                    e1:81:e7:9d:98:2f:cb:bc:db:91:87:ef:c8:1d:06:
                    59:b2:fe:1a:87:e0:80:f9:aa:10:92:1c:a5:c9:e1:
                    91:51:0d:e6:03:86:f7:5a:2d:57:4f:12:45:fa:e1:
                    22:81:38:b3:af:d4:11:2e:39:21:41:d1:f0:7b:59:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:2E:30:A0:2D:50:E1:C0:72:ED:77:4D:B6:9E:49:21:EF:71:AB
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:95:e6:90:66:78:22:42:d3:41:b4:7a:66:a1:97:68:b9:f5:
         0c:b3:12:e3:19:5b:d9:18:68:a1:7a:27:f7:6a:be:dc:f4:59:
         68:fc:dc:ff:5e:d1:05:5a:e7:9e:6e:86:5a:10:c0:6e:0a:ca:
         5d:23:64:fa:05:8f:b1:ae:c7:0b:96:b3:ea:76:47:f1:6a:33:
         14:75:cf:37:9a:e1:6e:15:ef:fc:28:db:1c:a8:8b:55:17:ce:
         da:fe:33:e5:5f:f2:9f:40:49:14:33:b8:62:83:28:f6:9d:9b:
         11:fb:29:3d:f3:85:56:a1:8d:7b:6d:19:e0:ae:69:ef:d7:ae:
         a4:43:a8:59:69:5c:88:a3:58:c3:00:f4:74:51:70:22:bc:b1:
         33:41:25:bf:45:bf:ed:a9:37:09:ab:2e:3e:16:9a:58:7f:7b:
         c9:4e:40:59:f5:34:db:66:05:42:63:d5:eb:6c:2e:62:25:57:
         27:77:a6:d4:ed:36:93:eb:98:31:03:7d:cc:38:4f:46:c2:91:
         eb:35:95:0b:27:00:a1:ea:03:4f:2b:d3:5e:b9:43:75:28:4b:
         61:1a:2e:d8:9c:94:4a:35:8e:ab:12:7e:ff:51:74:e3:51:95:
         f4:28:cc:1c:c5:85:29:5e:22:8f:c1:ed:95:2b:a0:83:b2:79:
         e4:b0:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 21:44:04 2025 by rpki-client