Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa
File:                     907B9184973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier:          H84rUZ3KdPkBY7e6ffHfuRUehvtnIe+74xC7gkrHMCs=
Subject key identifier:   16:8F:C3:1E:41:15:F4:1C:EC:16:66:D5:36:33:88:46:03:34:39:BD
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2606
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa
Signing time:             Mon 26 May 2025 17:49:49 +0000
ROA not before:           Mon 26 May 2025 17:49:49 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     65500
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9734 (0x2606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: May 26 17:49:49 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6834a9bc-b65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:04:27:d3:01:04:10:bb:a1:d7:f1:bd:07:
                    4b:86:da:98:b2:76:cc:29:9f:5a:10:91:9f:73:cb:
                    da:3d:01:7d:7f:21:f1:e9:54:24:73:5e:8e:d5:57:
                    cb:27:aa:59:df:11:6e:51:cb:70:26:dc:b3:5b:1b:
                    6c:68:3c:60:12:ba:b1:2d:4a:d9:a1:1d:dc:f4:1f:
                    af:d8:f6:a4:82:ff:3d:da:06:0e:12:16:e2:9c:89:
                    27:c2:b4:c0:2b:2a:08:5b:7a:dd:0a:49:d9:11:ea:
                    54:13:02:57:51:ce:83:5e:5c:df:e7:09:f4:18:9c:
                    96:af:38:ea:41:64:8d:51:c5:b5:77:54:e0:5f:c1:
                    ce:a9:f7:7e:ca:5b:4c:17:53:05:3b:a0:93:c4:b4:
                    53:a1:21:fb:eb:a6:b3:6e:b2:ba:a1:cc:06:01:68:
                    61:5e:9b:be:7c:c4:45:ea:2a:0f:27:e1:a1:8a:d1:
                    54:23:7e:b0:b0:a1:09:20:41:2c:c1:eb:75:71:ef:
                    ad:30:c9:b7:ff:ff:22:e9:53:b7:71:48:c1:74:e8:
                    c9:8e:2f:9a:dc:6a:db:43:35:4f:a7:50:29:5f:3a:
                    d6:3c:b4:f1:0b:94:4e:ff:b1:ac:aa:ef:3b:a6:d8:
                    74:61:08:c8:36:d2:11:43:3f:a9:9c:20:9a:dd:82:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:C3:1E:41:15:F4:1C:EC:16:66:D5:36:33:88:46:03:34:39:BD
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/907B9184973911EDB1E3C460C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:59:55:b3:aa:78:95:be:c8:66:31:4a:86:15:60:51:cb:
         b0:bb:a4:36:3a:04:a3:b2:0e:33:ce:4a:42:d9:0f:cd:92:4b:
         e9:8e:f5:93:42:b1:83:4d:ee:10:2f:03:40:de:03:46:2e:85:
         ba:a3:70:7a:4c:41:ad:8c:41:03:53:b5:b0:a7:8e:4b:bd:38:
         da:16:a6:22:03:5f:eb:53:a9:60:59:63:5e:a4:dd:ff:4a:01:
         60:14:93:5c:bb:5d:0c:90:0d:71:93:5f:40:25:bd:86:9e:cb:
         87:98:4f:63:d6:86:20:dd:32:cf:71:8d:f6:e8:d8:60:a6:94:
         7b:8f:4f:74:8b:0f:35:fc:5c:7a:69:aa:b5:0e:f9:f5:04:88:
         58:b1:ba:06:b4:21:06:af:52:65:2b:6f:b0:a9:9a:63:64:7e:
         b5:fb:dc:58:ec:f3:88:6d:5d:0e:ed:72:0b:15:91:6a:01:90:
         a5:cd:52:8a:12:61:00:bd:70:9d:ee:7c:00:db:5f:79:21:33:
         ee:e0:ec:fb:ce:53:fa:1b:61:5f:de:c0:b1:ae:7c:b7:95:b9:
         6d:74:a5:35:2d:7f:8b:4f:9c:dc:99:09:4f:da:20:08:64:96:
         e8:19:4e:a6:2c:bf:4a:53:17:cb:05:fc:89:b7:c7:9f:d9:71:
         13:e7:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:26 2025 by rpki-client