Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa
File:                     6985BF0062D611EEB5C5721CC4F9AE02.roa (raw, json)
Hash identifier:          0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=
Subject key identifier:   27:46:18:02:F2:B3:CD:BE:4F:3B:21:73:DA:58:A7:98:9B:42:1D:CC
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       0207
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa
Signing time:             Tue 15 Jul 2025 03:09:27 +0000
ROA not before:           Tue 15 Jul 2025 03:09:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.167.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Jul 15 03:09:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6875c666-7666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:04:a3:2a:5b:da:81:f4:9a:34:20:ca:cc:
                    93:98:5f:0e:25:b6:48:64:1d:13:09:55:26:fa:e1:
                    71:a8:a6:6c:4c:86:4a:0f:29:16:ad:85:58:1c:ec:
                    c0:f0:5d:fa:23:58:22:bb:58:1a:37:2e:52:a6:65:
                    20:a2:c3:58:32:d5:ec:29:53:eb:30:f2:51:b3:83:
                    d8:43:29:45:ef:35:e9:9a:84:f4:98:58:83:a7:ef:
                    c9:e7:76:a2:96:ca:5e:42:ca:56:a8:2c:68:fe:1f:
                    85:9a:a7:84:dc:e9:21:f3:ca:45:e5:70:91:2d:63:
                    ad:e9:39:f7:6f:24:b7:cb:38:40:bc:4b:04:be:27:
                    ff:f9:c8:e3:59:22:da:25:ee:75:65:e4:44:7d:ee:
                    3f:e1:5c:8c:0f:ca:13:e6:a2:a7:16:8a:56:26:f5:
                    05:b1:bc:30:48:54:d9:09:c0:8f:50:7d:e3:69:14:
                    04:65:b7:e8:4c:a4:34:f6:a5:b2:56:65:fe:da:0a:
                    d6:75:6d:dc:f0:4b:79:cd:6e:95:fb:cd:76:f8:8f:
                    81:4f:5d:9f:aa:59:bc:61:19:91:51:a9:ff:cc:45:
                    d3:b0:83:73:89:ea:76:78:a6:7a:2d:2e:2a:00:a0:
                    e7:08:cb:45:2b:b3:68:e9:8b:6f:02:02:f5:39:68:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:18:02:F2:B3:CD:BE:4F:3B:21:73:DA:58:A7:98:9B:42:1D:CC
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/6985BF0062D611EEB5C5721CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:0b:aa:d6:40:86:5c:ff:8c:ff:38:17:1b:4a:ed:f4:5b:
         cb:99:4e:2c:c4:1c:63:71:07:83:ac:02:89:82:a1:06:e4:f4:
         a0:af:d0:21:8b:99:65:97:26:59:97:c5:18:b9:6a:fa:7e:49:
         6b:61:b9:12:92:f9:3d:03:20:af:d5:19:33:8e:95:a2:60:75:
         f5:d9:0e:f9:e9:7e:0e:52:9a:9f:b1:95:f6:aa:b1:7c:8f:9e:
         bd:41:c0:24:98:11:19:0e:dd:50:12:0a:b5:c7:67:5e:9b:c0:
         28:c7:e8:ea:47:e4:2f:96:cf:73:cd:49:14:5e:8b:1c:f4:e1:
         c3:12:d6:9d:00:75:25:01:b7:7b:38:2a:fc:eb:0c:08:89:7a:
         8e:d4:1e:3f:36:66:9a:a5:0b:48:ff:d6:8b:c2:21:17:79:30:
         b4:5a:da:3c:8d:7d:4b:ed:9c:db:8f:84:45:87:88:1a:5b:7e:
         ca:be:c9:7d:58:62:0c:06:0d:a9:a3:89:95:dc:b9:de:48:6f:
         08:90:a6:a7:3a:7b:96:e6:a1:0d:03:84:c6:63:1b:ae:ac:61:
         38:9a:fe:28:ea:54:da:3d:8e:c2:2b:53:8f:9d:d8:6d:c4:69:
         28:52:3a:43:26:6a:d7:1f:7c:66:42:de:a2:f2:2d:74:9f:81:
         15:21:e0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:02:58 2025 by rpki-client