Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
File:                     1F24033CDF7111EEB534147FC4F9AE02.roa (raw, json)
Hash identifier:          5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=
Subject key identifier:   5A:36:2B:B4:A2:1F:13:3B:75:65:AE:AC:46:6C:EF:87:DB:94:0E:3E
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       18BF
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
Signing time:             Tue 08 Jul 2025 17:26:00 +0000
ROA not before:           Tue 08 Jul 2025 17:26:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     206204
IP address blocks:        103.239.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6335 (0x18bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jul  8 17:26:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686d54a7-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:59:6d:26:e1:84:10:f8:a0:85:90:fc:d4:
                    db:fd:88:b3:b3:d2:03:cb:55:84:97:e2:58:84:0a:
                    16:56:4e:d2:2d:18:60:24:3f:4a:c3:2c:aa:11:30:
                    37:11:5b:c6:32:6d:3f:8d:97:07:1a:87:03:e4:2d:
                    bb:b7:2e:de:37:18:82:6e:ea:7a:f6:83:84:83:cb:
                    b1:38:0a:e9:35:43:13:42:b4:a9:f9:ca:1a:36:ef:
                    03:5e:60:26:97:8d:a8:c8:47:07:e4:36:73:95:f7:
                    3d:68:22:6e:37:9e:dc:bb:a0:4f:5a:ac:6a:7d:f5:
                    f2:04:5e:17:a1:88:06:71:a1:31:b0:1c:d8:6a:f4:
                    30:14:9b:98:20:13:e6:f1:c7:e4:ed:56:b9:29:57:
                    d8:42:95:b8:bf:79:a7:01:e6:84:ba:21:d0:88:68:
                    ca:c2:dd:93:45:e3:66:5c:85:05:24:98:ce:4a:db:
                    39:be:3e:3d:2c:d8:34:69:ca:78:68:62:f7:59:49:
                    96:15:33:45:95:1a:05:7c:bd:ac:c9:88:8b:86:54:
                    a1:4b:1d:b2:02:af:86:f5:33:c2:e6:2d:30:75:8e:
                    9a:c7:c2:1c:9f:13:bc:a7:7b:e8:23:20:2f:d9:ea:
                    6c:93:da:75:1f:01:a3:62:0b:1e:37:7b:6b:db:fe:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:2B:B4:A2:1F:13:3B:75:65:AE:AC:46:6C:EF:87:DB:94:0E:3E
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/1F24033CDF7111EEB534147FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:48:23:82:5b:2b:6c:16:ed:9b:ea:44:95:3b:c9:34:bb:f7:
         b5:a2:ce:79:77:73:56:ed:07:8b:df:4f:1f:67:98:8b:2b:af:
         17:f8:18:1c:fe:79:4c:ee:b5:54:6b:61:c9:12:a2:86:44:81:
         5e:33:30:3c:74:04:df:9f:d4:02:0d:f3:a8:a7:f9:ab:43:61:
         16:65:58:41:73:0d:99:62:72:8a:ae:56:1b:0a:28:e5:fc:a2:
         ae:8f:0e:ac:3d:e2:91:25:6c:85:6e:fc:07:80:7b:99:f2:96:
         6b:1b:10:2c:27:5c:0e:f7:3d:1a:9b:7b:18:05:77:8c:54:54:
         c4:c9:c3:79:3c:af:90:c3:a2:f0:be:e6:2e:c5:38:c4:c7:23:
         06:45:c1:08:36:1b:2c:43:3e:5b:1e:d8:6f:9c:92:76:11:bd:
         e6:95:22:16:7a:aa:fc:70:f9:da:77:72:35:81:d4:cb:ea:7e:
         cf:1e:76:cf:d6:12:d2:b2:d8:5e:78:0d:e7:56:3a:1a:32:4b:
         e9:1b:19:73:a1:61:ac:cc:32:2b:61:7b:a2:d7:70:31:06:fa:
         06:69:06:fd:31:df:80:07:47:d1:a5:a6:68:1b:c7:cc:f9:fe:
         f9:68:5a:6a:1d:88:67:f1:72:96:1d:29:65:06:a2:00:0c:a3:
         4c:9f:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:25:29 2025 by rpki-client