Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/E71DE3EA563B11EEB0A9E236C4F9AE02.roa
File:                     E71DE3EA563B11EEB0A9E236C4F9AE02.roa (raw, json)
Hash identifier:          8l6giQdjJx2S1Fe0QDhUiPROaODQoPmGLlkq+hHu3as=
Subject key identifier:   B7:A4:7E:71:E3:8A:59:44:6E:7A:38:2E:29:CD:53:E3:78:82:6F:A0
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       061E
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/E71DE3EA563B11EEB0A9E236C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:55:07 +0000
ROA not before:           Wed 02 Apr 2025 22:55:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18464
IP address blocks:        103.90.136.0/22 maxlen: 24
                          202.8.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F
        Validity
            Not Before: Apr  2 22:55:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc04a-d6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:9f:ee:86:4c:9b:23:d3:d1:50:2f:01:d6:
                    03:b7:97:77:f4:99:10:dc:c2:41:eb:b7:7a:7b:60:
                    d8:11:27:a3:9d:8d:0b:01:8e:fc:55:bc:ec:9c:7c:
                    7c:2c:ca:68:e7:c4:8a:9f:f1:49:c8:6f:91:99:d5:
                    98:06:2e:49:c2:0b:20:0f:a6:b5:74:c0:36:a4:f4:
                    19:98:f1:af:79:3c:c3:71:ee:f0:b5:0d:c7:af:66:
                    ef:f5:8c:64:2e:90:f9:56:29:db:35:15:c1:3d:b9:
                    d1:ca:03:5d:71:02:41:ed:8f:1f:cf:f4:27:0c:72:
                    31:86:4e:8a:92:e9:1a:aa:fa:f4:d0:c6:78:5d:fb:
                    90:59:15:94:12:a5:dd:fc:97:6e:cb:59:bd:4d:38:
                    24:27:48:ed:4f:fa:36:e1:c7:84:ba:e4:ea:a3:da:
                    33:b5:30:73:d6:26:90:bb:79:a9:24:a7:fc:66:e8:
                    4d:be:ff:77:ea:73:0b:59:75:cb:dc:0e:10:b1:ac:
                    8b:61:e3:8a:97:bb:89:99:c7:23:d9:20:33:a9:50:
                    59:8c:53:c9:34:7e:19:67:c2:b0:49:cc:e4:da:50:
                    a0:84:b7:ba:d2:93:19:1c:c8:6e:d2:3f:25:b4:1d:
                    64:64:d4:84:3c:56:90:5a:9e:ff:6d:f8:d6:ed:d6:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:7E:71:E3:8A:59:44:6E:7A:38:2E:29:CD:53:E3:78:82:6F:A0
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/E71DE3EA563B11EEB0A9E236C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.136.0/22
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:e3:96:d7:c6:ca:82:ee:2c:53:25:e1:95:0e:bf:f4:21:
         cc:9d:da:0f:7c:41:4e:95:1e:01:f7:11:76:26:20:8a:7f:a6:
         b1:9a:dc:cb:98:0a:13:84:7b:07:a3:a6:e4:14:fb:60:a8:1c:
         a5:cb:b9:54:74:0d:be:03:12:7c:f6:3c:b9:b7:a5:f2:08:d8:
         49:9a:66:40:da:d9:8c:8b:a3:ca:a2:69:a9:87:a0:04:0e:80:
         2f:f0:a7:a2:34:9b:6e:7f:51:90:cd:bd:d8:1a:e2:64:0b:65:
         ef:2b:8e:be:15:0e:f5:b5:7d:7b:c2:1e:88:34:2f:d7:82:f5:
         2c:c3:fb:5a:75:c2:66:27:56:e0:99:7f:4b:70:cc:8a:86:1b:
         e3:3b:7b:f4:9b:64:71:48:2e:6d:37:e1:ab:b2:58:2b:ba:1f:
         59:41:bd:ab:13:75:41:a1:26:b3:59:9d:36:65:b2:40:65:0f:
         54:e2:8b:d4:74:d3:e5:72:6d:14:7d:40:01:d0:05:28:ff:61:
         94:36:28:bb:20:03:7d:15:d2:cc:ba:97:dd:70:16:b4:b5:77:
         6d:66:e6:7a:d7:71:4f:1e:cb:18:f2:8e:ea:7f:b7:8a:19:b3:
         b6:45:f7:cc:f4:2b:b7:4a:96:af:f9:e1:a5:4f:84:27:36:8c:
         0a:cf:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:15 2025 by rpki-client