Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa
File:                     BC04E5745E4E11F082F8D529C4F9AE02.roa (raw, json)
Hash identifier:          4Hdor7a2T28NKyTSPVzwdY26NXpymu+/SZMUZB9AJGE=
Subject key identifier:   B7:25:22:6A:30:4E:43:A1:52:D5:DC:B8:8A:16:02:52:7D:20:A1:7F
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       0741
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa
Signing time:             Fri 11 Jul 2025 12:01:10 +0000
ROA not before:           Fri 11 Jul 2025 12:01:10 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     60542
IP address blocks:        103.205.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jul 11 12:01:10 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6870fd06-a7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:d0:66:ea:d3:36:f8:2a:68:31:8f:eb:8c:
                    39:86:17:28:d0:da:32:71:82:dc:0c:07:f9:b9:e0:
                    48:dd:78:a8:b1:9b:a2:00:6b:56:33:f0:a7:f4:77:
                    da:1d:d7:a2:98:a3:37:7b:3d:7c:5f:82:19:5a:1c:
                    ac:3d:45:d0:44:34:ea:31:50:85:9b:2b:cd:cf:1a:
                    03:fc:af:b8:0b:83:b6:52:9a:87:20:0c:68:62:db:
                    36:07:36:d0:f9:65:6d:36:cb:07:66:02:d7:b6:6f:
                    1b:4a:15:23:e7:3c:ba:0f:95:51:1c:92:5c:da:dc:
                    fe:50:b7:dd:96:75:67:7f:94:00:5f:5a:a8:7b:58:
                    28:e9:19:79:45:22:21:76:50:02:e7:5a:9c:62:e2:
                    a7:26:cd:bc:af:43:70:d8:3d:65:b2:a4:c3:dc:a5:
                    24:4b:87:2d:ab:5b:2e:5c:c0:d3:75:8f:19:47:3f:
                    f1:a6:4d:d2:66:cb:a5:25:e5:d6:aa:a7:3d:a2:c5:
                    4f:70:6b:cf:8d:7f:ee:87:73:15:23:4c:10:fb:20:
                    b1:34:b0:1e:21:9c:29:09:d0:55:9e:a7:12:68:d1:
                    4f:26:5a:96:73:9a:92:21:bc:7c:b4:5a:95:10:b9:
                    7a:6a:ea:6c:62:01:c7:16:bb:97:b0:aa:a0:02:a6:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:22:6A:30:4E:43:A1:52:D5:DC:B8:8A:16:02:52:7D:20:A1:7F
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/BC04E5745E4E11F082F8D529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:02:2e:c8:78:b2:f3:96:f1:45:75:47:71:78:0f:d2:9d:
         b9:88:d7:a5:8e:55:d3:4e:3d:d5:9e:83:af:7c:07:f7:c8:46:
         c6:cd:42:38:2e:ed:8e:9f:36:67:d9:98:9f:4d:9a:1e:a8:88:
         18:b0:c0:65:c9:af:0f:77:ae:95:a7:b0:e9:bf:b0:15:5c:52:
         ba:f2:0f:1d:ca:d4:31:9f:d8:0c:11:59:b2:07:03:aa:ea:d7:
         5c:d6:7c:2d:f1:b8:74:0a:66:e8:37:7c:1b:0f:01:42:37:5a:
         92:6f:96:27:ca:bf:6a:39:76:92:8c:83:99:d1:e1:3d:dd:08:
         77:2c:2e:5f:92:4e:86:f6:b5:ca:9f:d4:8d:a8:26:85:38:a6:
         f9:a2:56:30:22:e0:b6:97:17:0e:bd:87:93:a9:95:9f:ab:23:
         8e:11:15:87:0f:de:ab:4a:9b:6b:84:bb:15:a4:85:86:6e:bd:
         5b:ba:6a:73:c6:3a:5a:ad:65:f0:84:39:1c:3e:7b:10:0f:1c:
         42:89:03:2a:80:8b:eb:ab:75:60:74:5b:56:5e:8d:49:94:fd:
         dc:73:05:b4:7f:da:b2:94:ba:88:16:82:14:e7:6a:ad:76:d8:
         8e:83:1c:10:bb:52:d1:90:a6:00:da:ab:06:ec:59:83:65:7d:
         41:be:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:17:15 2025 by rpki-client