Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa
File:                     A9906244B66611ECAF76DA4CC4F9AE02.roa (raw, json)
Hash identifier:          +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=
Subject key identifier:   C6:DA:F9:02:FE:03:6F:89:A0:4C:3E:6E:4A:F8:F5:CB:2D:4B:29:22
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       0373
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa
Signing time:             Fri 27 Jun 2025 00:56:46 +0000
ROA not before:           Fri 27 Jun 2025 00:56:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.73.115.0/24 maxlen: 24
                          103.232.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jun 27 00:56:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685dec4e-e3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:e2:0e:d1:d4:38:9c:4d:12:9d:ee:0d:af:
                    ed:ec:5f:dd:c4:c4:dc:cc:2e:ce:41:ca:a9:5b:c5:
                    c4:46:21:96:d7:71:8c:be:9d:3b:9c:9b:1a:db:6d:
                    ca:bf:4c:84:de:a7:b1:7a:d2:0e:af:0c:69:65:38:
                    19:47:06:ab:d0:37:44:c8:60:4e:3e:86:0c:05:a4:
                    5d:89:c7:f9:b4:89:2b:bc:ec:05:9d:7e:bd:f5:06:
                    ce:aa:2b:52:3e:1a:cd:59:9e:b3:bd:6a:e4:44:a7:
                    f2:a6:02:a9:fd:49:64:5e:71:9f:7c:9e:a5:94:b3:
                    86:1c:04:c6:bb:b8:b8:99:65:88:88:66:2e:28:86:
                    da:8e:02:b0:5e:7a:27:88:0d:0c:42:b7:59:5f:3c:
                    3b:66:6f:da:40:f4:8e:56:80:da:b2:58:76:a6:15:
                    ee:cd:df:d5:0a:97:f4:97:9c:db:a0:23:e9:53:fc:
                    ce:9f:ac:a5:70:7a:91:5a:97:29:cc:70:1c:61:4a:
                    70:4d:32:12:fb:a9:a7:6a:6b:b6:3e:85:a6:c9:33:
                    09:d2:f7:10:89:6e:23:49:49:39:03:c5:ad:0d:34:
                    35:c6:7b:80:aa:a1:9b:57:0e:ac:35:b5:5b:52:35:
                    78:62:52:d7:3a:cd:fa:8c:f7:61:34:16:1a:a9:46:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:F9:02:FE:03:6F:89:A0:4C:3E:6E:4A:F8:F5:CB:2D:4B:29:22
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/A9906244B66611ECAF76DA4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.115.0/24
                  103.232.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:fc:dc:ee:d0:36:d9:ed:1d:d2:f9:2d:e4:c0:52:19:47:
         ac:bd:db:e1:3c:38:3e:97:72:d6:90:40:4b:d9:0a:aa:70:e6:
         c4:3b:84:b1:50:13:da:ee:50:9d:1b:32:64:a5:df:9f:1c:a9:
         c1:54:db:74:4e:ba:5c:19:71:29:3f:6e:e1:65:09:1e:a2:38:
         ee:05:d8:4e:57:ce:f7:36:9a:7d:36:84:94:ef:41:c7:82:eb:
         d3:c4:a6:f1:ed:9e:3c:f7:f1:64:01:ea:00:0b:69:ec:41:28:
         36:53:28:dc:12:a4:19:c2:2c:41:96:e6:a1:2c:61:d3:03:bc:
         b8:9c:f9:bc:cb:27:fe:2f:2b:bf:c3:91:ab:15:56:58:e7:27:
         7a:73:ea:ae:0d:67:9d:c1:92:ff:df:16:7d:7c:86:b5:dd:4b:
         b2:93:13:f3:ae:77:25:64:4c:a1:d1:48:02:ae:3e:3c:f5:17:
         05:07:d0:49:58:f5:ea:88:26:9b:d9:98:73:84:e6:b8:15:60:
         1b:6c:f8:47:2a:24:83:12:20:3e:4b:42:33:cb:df:35:e5:d4:
         11:72:4a:f4:23:1c:d4:ac:e9:49:ca:04:1f:99:bf:ea:c8:ab:
         7f:4f:51:cf:5f:1f:68:ce:5b:ea:4b:0d:6e:bd:93:ad:e2:16:
         51:a0:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:50:03 2025 by rpki-client