Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/9EE9468811FB11EFB73CB561C4F9AE02.roa
File:                     9EE9468811FB11EFB73CB561C4F9AE02.roa (raw, json)
Hash identifier:          wQPQHggW2pcWJJTTCEnG8wZ6ChbePlicDoKqF+XySGc=
Subject key identifier:   ED:D3:F3:09:EC:15:08:18:32:57:86:EB:D2:D1:96:59:91:8C:BA:78
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       DF
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/9EE9468811FB11EFB73CB561C4F9AE02.roa
Signing time:             Sat 31 May 2025 05:17:06 +0000
ROA not before:           Sat 31 May 2025 05:17:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151734
IP address blocks:        103.15.156.0/23 maxlen: 23
                          103.15.156.0/24 maxlen: 24
                          103.15.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: May 31 05:17:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a90d2-011e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:34:9c:09:83:37:eb:6e:e8:ee:b1:13:2a:
                    7f:fc:0e:1c:7a:73:60:80:4d:65:2e:49:bf:17:18:
                    a6:f0:9a:59:89:18:9b:47:ed:c3:fa:81:41:18:82:
                    bf:e6:2a:72:a3:0a:8c:ef:5c:95:48:a1:68:1e:3c:
                    62:9b:05:e2:7c:dd:ec:c8:21:cf:4e:1e:f7:97:39:
                    9e:06:4c:26:f9:f1:24:bf:c3:54:04:53:67:97:70:
                    fe:46:49:3a:25:3c:9d:72:4c:e7:09:8d:f0:5e:80:
                    33:4c:7b:ac:17:ec:ed:d3:43:08:79:d7:ad:6a:7b:
                    16:53:91:13:79:31:28:f4:f9:b3:be:57:f6:d1:a9:
                    4d:d3:32:2b:98:7b:39:84:b7:b5:55:32:f1:ef:d1:
                    cf:69:c3:63:57:6a:35:d0:a1:cf:48:4b:7d:ff:35:
                    77:07:82:79:e6:28:3b:ec:c5:47:24:bb:5b:ec:a8:
                    3d:e1:9d:95:68:3a:92:17:1d:0c:83:19:bd:4e:55:
                    6d:fe:ab:4c:68:52:77:d0:a4:f2:cc:c2:18:dd:80:
                    33:b2:16:65:55:5a:75:20:18:57:ac:fe:85:8f:3b:
                    8f:30:29:69:e1:74:e2:fd:0c:2a:4f:a8:c1:c1:c1:
                    ce:bd:a4:6a:45:eb:fb:6d:c2:9c:a7:11:d2:22:3f:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:F3:09:EC:15:08:18:32:57:86:EB:D2:D1:96:59:91:8C:BA:78
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/9EE9468811FB11EFB73CB561C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:cc:a3:4e:1c:a9:e6:d1:e9:d4:c3:dd:c9:46:21:85:b7:
         1b:f1:d3:01:b5:3e:45:58:57:d5:9a:37:d0:a7:74:51:25:3c:
         87:e4:2e:44:ce:b7:a8:10:ec:66:40:e6:ae:b5:cc:a4:9a:75:
         70:ad:3f:26:bf:a5:1b:65:a7:7d:c3:b8:6d:f1:b3:fc:8b:ca:
         ba:f1:44:1e:c1:72:11:6c:60:be:e7:67:90:0d:0b:45:75:ad:
         5c:fe:bd:24:16:95:d1:2e:3b:d9:7c:af:48:09:84:95:c9:37:
         4d:f2:ec:ce:b5:91:be:8c:61:26:ef:a1:08:bb:b2:b3:88:60:
         7d:50:5b:0e:92:51:cc:7a:a4:d1:bd:8d:aa:56:3d:7b:bd:8b:
         1e:e1:80:f9:20:56:f3:fb:fe:7b:09:41:df:bb:1d:98:e6:de:
         4d:b2:20:13:f0:3c:a2:ec:9a:a5:cb:59:d0:6c:c6:e2:7d:e2:
         0c:5f:9b:ce:d5:d4:87:88:d2:3a:bc:36:79:03:09:db:b7:02:
         6f:95:6c:3c:a6:62:2f:74:67:88:cf:e5:ee:bf:1c:7d:82:7c:
         d1:2d:e8:1e:d5:02:cf:e4:f0:20:b8:32:ca:4e:c4:54:e6:e6:
         20:c2:3b:1e:58:2b:0a:74:35:47:d4:39:bc:ea:45:7c:b5:33:
         1f:d8:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:14:29 2025 by rpki-client