Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
File:                     0D0106EAE5BF11EB801D410DC4F9AE02.roa (raw, json)
Hash identifier:          Vy8MJrdeSiPIr3JrTpVK+MSmKs+H+gy2bX59wqQW2c8=
Subject key identifier:   0C:10:6F:BD:53:3C:E4:CF:22:2A:AB:54:D7:0D:07:8A:C2:5D:E9:B2
Certificate issuer:       /CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2
Certificate serial:       0571
Authority key identifier: 39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
Signing time:             Sat 31 May 2025 23:53:24 +0000
ROA not before:           Sat 31 May 2025 23:53:24 +0000
ROA not after:            Wed 01 Oct 2025 00:00:00 +0000
asID:                     9341
IP address blocks:        103.111.28.0/24 maxlen: 24
                          103.111.29.0/24 maxlen: 24
                          103.111.30.0/24 maxlen: 24
                          103.111.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl
                          rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D080, serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2
        Validity
            Not Before: May 31 23:53:24 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=683b9674-2c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:c5:36:63:9b:a7:1c:c5:61:27:91:48:61:
                    5a:d1:88:44:7e:d7:40:7f:ee:34:19:eb:bb:3e:2b:
                    d0:fa:3e:fe:6e:e5:3c:36:9f:eb:ed:97:47:73:5c:
                    7a:10:c6:a1:81:aa:4a:66:6a:93:c5:d8:1a:c4:5a:
                    31:ec:73:6e:e0:f5:4f:74:50:05:3e:db:28:d1:91:
                    6b:4c:c0:6d:b4:a9:98:55:99:32:e4:f5:11:d2:fe:
                    95:36:19:2e:f7:70:0a:0b:44:3f:b1:25:f2:31:61:
                    5b:12:97:70:52:20:bd:62:55:36:52:70:8a:39:4d:
                    1a:ba:6d:5d:b2:c2:b4:84:37:8c:67:4c:fe:ae:b4:
                    58:0b:bd:ab:79:fa:f1:27:32:a7:f6:7c:46:4b:9d:
                    51:91:a1:59:6a:d3:e0:63:03:0e:6f:8f:45:6e:82:
                    e3:f6:5e:15:ff:40:53:05:a6:9a:7c:ab:de:d6:15:
                    98:cf:74:2a:08:7a:82:11:a8:6c:de:81:94:32:59:
                    a5:28:a9:52:2c:79:59:13:4f:ed:98:a0:f1:8c:62:
                    d2:70:dd:ec:2a:78:87:f5:a3:73:00:66:1a:74:16:
                    e8:18:2f:40:e6:91:d4:f1:87:97:c2:c9:07:12:96:
                    29:85:65:b2:1b:7c:db:9d:71:ee:92:39:9c:e5:15:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:10:6F:BD:53:3C:E4:CF:22:2A:AB:54:D7:0D:07:8A:C2:5D:E9:B2
            X509v3 Authority Key Identifier:
                keyid:39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:63:c8:82:bc:1f:06:aa:7d:67:5c:3d:88:8e:60:92:b9:
         59:ce:f7:b5:cf:ec:3a:cd:a4:a8:20:3a:57:87:44:4d:7b:df:
         7c:08:c4:d9:40:f7:a0:f9:c8:ce:6e:00:25:33:19:5a:0a:ce:
         11:9e:a7:58:72:18:06:dd:84:b3:00:23:da:9b:50:06:87:fb:
         b3:84:16:c8:dc:5d:4e:cb:e7:b3:01:50:8a:05:7a:a2:ea:da:
         87:fa:ff:cc:85:1a:d5:ef:fa:46:26:81:02:83:2b:59:4f:c0:
         26:35:fb:10:f6:8a:16:9f:22:a4:d3:7e:55:3c:32:0f:f9:37:
         9a:1c:9f:9f:46:62:3d:98:8b:58:e6:bb:5d:4b:58:55:bd:0a:
         5f:ac:da:12:ec:49:78:4c:4e:aa:82:23:06:bb:f7:aa:a4:c2:
         18:f7:08:9d:47:26:4e:f6:08:d7:b5:11:3c:69:5a:33:1c:fa:
         1d:9f:b1:d3:f4:e2:aa:d9:ec:1f:c3:03:21:48:57:b4:e0:e7:
         c4:f0:85:93:43:00:be:08:1b:fd:94:66:ba:0b:87:e8:ef:3f:
         21:15:00:28:1a:3c:02:28:bf:c9:6e:39:27:1b:a3:d1:0e:ca:
         5c:24:20:b0:db:1d:7f:fa:21:fb:42:6c:e5:83:4d:3a:a4:55:
         83:09:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:09 2025 by rpki-client