Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
File:                     4C6FB118CDEC11EB85313B22C4F9AE02.roa (raw, json)
Hash identifier:          c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=
Subject key identifier:   44:D7:AE:BA:FA:94:9E:E6:52:5A:46:73:B0:90:64:9A:87:C0:BA:72
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       05DD
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
Signing time:             Sun 20 Jul 2025 23:35:15 +0000
ROA not before:           Sun 20 Jul 2025 23:35:15 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     142430
IP address blocks:        103.168.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 23:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Jul 20 23:35:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=687d7d33-bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:f2:c4:74:25:e4:4f:48:63:5f:4b:05:fe:
                    25:c0:fe:af:eb:8d:0b:95:e5:74:fc:d1:5a:4c:6d:
                    9a:58:f4:65:51:bd:0d:fd:8a:94:51:9a:57:bb:9b:
                    da:50:5e:57:fe:46:8a:58:7c:3b:17:82:c0:dc:90:
                    b7:2c:19:fd:6c:eb:fa:cb:de:1d:a2:fe:9c:b0:27:
                    73:47:c8:78:79:59:ea:28:8d:d9:37:99:bc:15:ee:
                    db:7c:61:8b:50:45:ca:11:4c:88:52:41:0d:15:4f:
                    18:ac:d5:b3:34:17:8f:23:c1:1a:5f:f1:69:05:e3:
                    e0:47:da:16:a3:5f:d6:cc:e8:bc:5e:45:14:25:da:
                    dc:1c:29:08:4b:59:e5:4f:52:5f:19:fd:e5:d1:e5:
                    d1:1d:e1:12:38:2d:93:25:b7:97:2e:94:9b:5b:5d:
                    d3:53:a8:82:12:92:7b:68:ce:36:f4:64:68:41:bc:
                    a0:90:7a:7b:f8:c3:9b:e1:37:34:02:d9:c8:1f:59:
                    67:d5:d3:5d:f2:85:b9:83:6b:2e:ba:f8:da:f3:da:
                    be:20:92:18:c9:c2:ac:38:50:35:b6:03:21:1f:ad:
                    19:2b:a7:0e:b4:32:2a:b9:d4:b0:7a:4e:32:80:91:
                    21:a8:54:e2:c3:86:d2:37:12:41:d4:8b:4e:87:98:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D7:AE:BA:FA:94:9E:E6:52:5A:46:73:B0:90:64:9A:87:C0:BA:72
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/4C6FB118CDEC11EB85313B22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:43:65:cf:24:31:08:d9:1c:cc:1c:3b:d1:3f:da:ea:0d:
         a8:20:6d:9a:d7:4f:4a:77:f6:ea:11:c9:b5:e4:69:e2:10:71:
         d7:6e:82:a2:3e:7c:c8:85:5f:4a:8d:dd:6e:9e:de:55:d6:df:
         99:6c:7b:62:4d:19:fa:60:f2:9a:17:47:02:ed:a8:52:b5:c2:
         2f:7e:a0:3c:24:d8:d9:cb:f0:4f:b3:b0:eb:4f:a7:62:da:8d:
         b7:a3:f0:b4:b8:9a:3b:ca:e9:3e:d4:39:53:14:2f:2c:93:11:
         df:b9:29:23:02:0c:f3:94:d6:e2:af:50:f2:45:f6:c1:0f:ce:
         cf:89:6d:9b:1c:9d:d1:b4:d3:2a:ae:51:8c:1b:f2:7b:0b:6e:
         e3:7b:03:a4:34:1a:23:8e:c4:0f:e6:e9:a3:a3:4b:cb:5e:e2:
         a9:18:20:36:38:9e:d5:03:3f:09:85:bb:20:72:29:fc:34:e1:
         5c:23:2c:db:ed:fc:a5:61:b3:bc:c4:84:b9:d2:43:a9:3c:86:
         0a:ce:e7:a8:1f:7c:7b:24:25:83:f9:4a:f0:c5:ab:e4:de:fd:
         4d:04:8c:d9:c9:07:9e:60:9e:2d:c1:7f:1e:77:7e:f3:01:41:
         4f:ed:8b:17:90:c2:d0:f1:4e:17:78:83:b2:43:03:87:88:b9:
         74:92:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:41:37 2025 by rpki-client