Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/ED052FEC614311EB9DCDF560C4F9AE02.roa
File:                     ED052FEC614311EB9DCDF560C4F9AE02.roa (raw, json)
Hash identifier:          vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=
Subject key identifier:   BD:5C:82:5B:15:E4:EE:19:4A:1E:52:FE:82:B8:96:DD:97:FF:0A:DA
Certificate issuer:       /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Certificate serial:       06C3
Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/ED052FEC614311EB9DCDF560C4F9AE02.roa
Signing time:             Sat 24 May 2025 22:20:55 +0000
ROA not before:           Sat 24 May 2025 22:20:55 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140619
IP address blocks:        103.151.28.0/24 maxlen: 24
                          103.151.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
                          rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
        Validity
            Not Before: May 24 22:20:55 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68324647-eb12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:9d:09:99:47:81:63:0a:08:8d:cb:73:1c:
                    02:ee:01:81:b3:d6:bb:ac:49:4c:fd:bd:9e:15:b1:
                    14:81:2e:52:9b:da:c3:34:09:c3:33:4f:9f:f6:d7:
                    5c:fb:70:5d:71:ac:60:01:7b:e2:85:ae:4b:f4:79:
                    87:f2:74:4c:a6:ac:de:44:c7:96:f8:1a:5e:93:6a:
                    d8:07:1f:f6:b4:6d:23:f7:d3:b7:49:6e:ec:a4:da:
                    44:f7:2b:ce:fb:9a:6c:c8:33:25:e4:74:4e:ac:e8:
                    ea:58:6c:f4:3b:96:d1:b5:74:06:c9:7b:ff:bd:e0:
                    c2:a7:98:f1:16:91:94:18:a6:de:0f:6c:af:d4:fd:
                    fa:ef:8d:7d:59:2b:7d:f5:e1:dd:f6:ce:78:e7:33:
                    ce:04:56:a6:08:24:f0:28:a5:87:1e:53:87:e5:5d:
                    9a:97:70:af:15:9f:7d:b0:f5:bd:a7:b4:43:6f:2e:
                    bb:62:f7:01:25:58:92:ae:1f:ae:6d:d3:92:66:f8:
                    a4:ac:72:79:05:6d:50:b2:8b:4b:93:5a:44:d9:02:
                    ba:81:e8:20:60:71:70:81:75:aa:19:a1:ce:7d:33:
                    bc:38:bf:53:07:af:7e:7f:fc:dc:e2:94:8f:a5:40:
                    2d:51:b4:45:85:aa:54:40:de:cb:f7:3e:04:0a:87:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5C:82:5B:15:E4:EE:19:4A:1E:52:FE:82:B8:96:DD:97:FF:0A:DA
            X509v3 Authority Key Identifier:
                keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/ED052FEC614311EB9DCDF560C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:6b:3e:73:69:5a:87:66:ea:fc:2d:47:05:3e:62:3c:ca:
         40:9d:83:c2:a6:1e:86:83:54:ea:1d:51:cb:a1:75:4c:aa:66:
         82:6a:07:0d:d7:e1:ce:2f:6f:4c:78:fa:6b:02:9a:f4:56:e5:
         b6:a9:38:b4:8d:cf:57:6e:ad:eb:a1:9a:94:7a:af:a9:13:2e:
         37:e1:c8:ab:10:5c:60:b7:f3:f1:82:6e:30:08:1a:fd:d5:a6:
         5c:9f:12:91:56:85:85:0f:6e:ab:55:4a:ff:85:13:5e:66:15:
         5b:da:36:aa:35:21:98:fe:f9:26:25:d3:bf:8f:f7:99:39:bd:
         40:fb:7b:45:3c:24:ad:f9:44:18:35:17:4b:9e:f7:2c:80:ea:
         2e:c0:95:ee:1c:f4:88:6a:39:de:23:aa:83:d3:8b:39:59:b3:
         89:c6:a6:06:45:9a:2a:79:8a:0d:ef:e9:d6:f3:f4:89:01:b6:
         76:73:54:d4:cd:9d:7a:0a:21:bd:1e:20:ef:22:31:16:e2:74:
         b7:8b:b1:32:cd:35:96:32:75:d7:fe:23:2e:cf:1f:d0:03:e2:
         ce:a4:34:4a:c1:32:1f:02:21:ab:ad:8b:93:94:e4:5c:3f:0f:
         4d:04:6c:49:9e:fb:55:dd:32:96:a3:b6:14:3c:e6:5a:ad:dd:
         a2:08:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:41:20 2025 by rpki-client