Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
File:                     F6F5BCCE53E711F084348F87C4F9AE02.roa (raw, json)
Hash identifier:          eEq3ZG4qI8pUpOyGlAwoIW1Iq8bp1Jor6FtXouhYCXM=
Subject key identifier:   D1:68:6F:18:55:BC:CD:D6:FC:A4:45:21:A2:BB:AA:13:F2:14:19:27
Certificate issuer:       /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial:       086B
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
Signing time:             Sat 28 Jun 2025 06:20:20 +0000
ROA not before:           Sat 28 Jun 2025 06:20:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149994
IP address blocks:        103.138.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
        Validity
            Not Before: Jun 28 06:20:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=685f89a3-8e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:cd:cc:a0:c0:e0:66:be:59:80:d3:83:d1:
                    85:cf:e5:0a:b2:eb:1c:3b:39:3a:e2:93:f0:05:94:
                    0d:1d:38:da:91:9b:71:3b:2d:94:79:26:81:67:ee:
                    e3:6d:a8:18:f3:0e:4c:e3:9a:3f:e2:80:ea:ce:a8:
                    e9:15:c2:11:81:7f:d3:c7:06:83:df:d5:82:6c:23:
                    64:db:a3:c4:46:91:d4:be:ea:e3:93:b9:20:ee:ba:
                    68:60:1d:af:b4:6a:de:90:5c:6c:92:b2:ec:68:00:
                    18:83:f8:9b:ff:94:7f:a9:36:4e:f1:eb:39:cf:1c:
                    e2:ac:12:49:ba:b3:42:08:b4:bd:b1:0b:f1:82:ef:
                    c0:d5:76:b9:01:c0:0c:73:fd:cc:e2:fd:46:b6:44:
                    b9:08:e3:59:1e:94:18:db:e7:1e:60:d4:4b:bf:83:
                    58:ce:7e:6f:85:e9:74:7d:c6:e9:f2:d3:5a:8e:12:
                    79:19:e1:b4:a7:97:16:13:50:25:38:38:61:65:50:
                    0f:2f:5d:63:10:c4:d1:8f:00:9d:f6:d8:50:77:75:
                    70:e9:03:51:70:ec:57:e0:bc:fc:af:d3:d0:f2:d7:
                    9b:00:9d:9a:4c:8d:b0:83:a9:ac:a2:40:d7:c7:55:
                    1a:6f:ec:13:45:9e:60:e8:f8:5c:f3:bb:a1:4d:10:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:6F:18:55:BC:CD:D6:FC:A4:45:21:A2:BB:AA:13:F2:14:19:27
            X509v3 Authority Key Identifier:
                keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/F6F5BCCE53E711F084348F87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:43:4e:4f:8a:76:b6:f7:74:da:05:9d:9a:1a:6c:a1:ec:f7:
         98:60:b6:3f:cc:0a:1c:f0:f7:1e:39:52:63:f2:83:c2:ee:eb:
         b6:1b:8d:45:6e:b6:0d:c1:87:b5:e0:dd:ff:92:d2:cd:00:a0:
         73:e7:a8:d9:d9:d9:23:9c:51:f2:b9:bc:cb:fc:c4:50:80:93:
         16:ab:8a:78:f6:40:79:5c:11:92:db:70:65:f5:f0:1a:f0:1a:
         29:cc:73:89:34:3e:ef:dc:40:91:7c:2c:45:e3:02:3b:a2:7e:
         72:b1:89:ad:37:7f:be:b2:16:51:e8:b3:52:b9:ce:07:dd:aa:
         d6:05:77:30:16:ef:ba:43:a9:fe:31:af:49:35:58:21:a1:33:
         b7:b0:af:94:07:1b:dc:af:6f:3b:b2:2b:18:4d:ea:74:38:a3:
         d9:60:d7:61:74:37:0b:85:8b:8f:af:5d:89:66:8f:93:d3:cb:
         1a:57:82:7e:cd:cd:df:a7:26:39:b5:78:8c:18:0f:e2:9f:43:
         a7:e6:fd:e2:d0:5f:47:78:86:06:40:48:bb:b1:b5:b1:7c:eb:
         b4:1b:19:da:50:44:d7:2c:94:16:fd:c4:1a:e9:32:cb:35:42:
         84:08:65:fd:1d:0d:8d:c3:12:75:b5:15:1d:9a:eb:47:8f:23:
         56:bf:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:51:49 2025 by rpki-client