Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B829D0325B1911F0B22D1D7EC4F9AE02.roa
File:                     B829D0325B1911F0B22D1D7EC4F9AE02.roa (raw, json)
Hash identifier:          aZgJ0HtdFLW3z1O3m8iUNjI3ajFvG4JUkNQZr3Vclas=
Subject key identifier:   3F:80:CD:E0:17:F2:63:5E:44:6A:E3:BA:70:73:E6:76:FC:3F:2E:A2
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       018C
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B829D0325B1911F0B22D1D7EC4F9AE02.roa
Signing time:             Mon 07 Jul 2025 10:04:07 +0000
ROA not before:           Mon 07 Jul 2025 10:04:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153371
IP address blocks:        103.72.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Jul  7 10:04:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=686b9b97-fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:0f:b6:1e:6a:48:cb:f7:f2:ad:d0:f1:f5:
                    e8:59:93:7d:0a:ed:a3:b2:d8:60:ba:0f:75:d9:cd:
                    77:6f:33:c8:86:6b:81:d7:33:2f:a5:d4:c1:0f:04:
                    14:1d:45:bb:12:5f:6f:9d:ee:f5:c8:74:bd:43:32:
                    0a:4c:5e:b1:5a:50:29:f2:62:45:80:d7:01:ed:0a:
                    75:d9:e4:54:49:3e:96:cb:58:8a:21:1b:e7:da:e8:
                    dd:3b:f9:b3:28:1a:89:f7:32:dd:85:f5:9e:68:8b:
                    8f:07:90:16:1b:d9:3f:d5:20:a6:e5:fd:66:e9:26:
                    c7:3a:52:9f:5a:a4:b2:27:c9:e2:21:51:f6:de:47:
                    94:32:db:e7:60:44:d1:4f:af:e4:ff:4f:b7:19:5b:
                    2f:2a:b8:a7:60:4b:b8:ca:f3:f1:d3:9f:ff:21:6d:
                    ac:6f:22:53:99:df:77:f2:33:63:b4:fe:84:22:9a:
                    eb:81:88:c3:81:7a:9a:c8:6a:ee:23:a7:df:e9:96:
                    f2:9c:14:c0:8c:1f:79:4e:d5:80:56:af:1b:af:bf:
                    4c:43:0c:4d:95:5b:79:d8:d4:63:ed:1f:07:6b:10:
                    44:cc:9d:0e:c7:a2:a7:a0:3e:e0:8b:0a:f2:f0:c0:
                    29:65:cc:e9:70:6a:13:87:6c:c9:6c:33:01:ff:ed:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:CD:E0:17:F2:63:5E:44:6A:E3:BA:70:73:E6:76:FC:3F:2E:A2
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B829D0325B1911F0B22D1D7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:6d:9d:7a:fd:93:8f:80:93:26:b2:da:f8:4e:84:f5:3d:
         b7:6b:c5:62:1d:f0:31:dd:9b:0c:0b:f5:f2:53:55:39:bc:43:
         4c:17:fd:e7:46:a5:e8:cd:62:11:a2:67:1e:2d:64:1e:fa:4c:
         bf:bf:6c:c4:d9:2c:50:16:8c:42:71:ca:18:54:c7:dc:91:7d:
         44:0a:f7:a8:61:7a:77:a7:a5:3c:62:60:09:35:bb:79:be:aa:
         13:87:44:c1:bf:00:13:63:e5:a6:97:6b:07:8c:f3:05:c1:4b:
         bd:63:d9:4b:a4:a6:36:e9:48:36:02:5b:be:03:b0:31:47:e0:
         13:fd:f3:78:c7:b0:60:a1:98:57:0d:b5:3b:c9:c4:8c:f8:1a:
         64:9a:e7:d9:26:4d:6b:90:05:aa:2e:3e:a8:a1:da:e5:dc:f1:
         20:43:8e:7b:ea:9b:81:e1:06:b6:a8:a1:00:bd:aa:ba:c9:70:
         3b:08:26:fc:7c:bd:64:e0:15:65:6d:73:1f:b7:19:7e:3b:94:
         27:a2:e7:26:a0:46:03:9a:84:e1:18:35:eb:cf:69:db:b5:b4:
         7b:3e:cb:2e:9b:9b:15:e0:0e:df:ce:15:92:d0:a5:22:3b:36:
         a9:e3:55:04:06:16:ba:36:3f:34:1f:54:8d:61:3c:5b:6f:af:
         ce:69:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:21:08 2025 by rpki-client