Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/936B147E248A11F0AD4B1179C4F9AE02.roa
File:                     936B147E248A11F0AD4B1179C4F9AE02.roa (raw, json)
Hash identifier:          e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=
Subject key identifier:   16:F1:8A:A6:E8:FB:19:8F:A2:5D:6F:71:96:79:3E:08:2D:7F:6B:30
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       03
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/936B147E248A11F0AD4B1179C4F9AE02.roa
Signing time:             Mon 28 Apr 2025 23:43:24 +0000
ROA not before:           Mon 28 Apr 2025 23:43:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.183.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 07:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Apr 28 23:43:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6810129c-e138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:a4:e5:c9:64:07:62:0e:76:39:25:b3:b0:
                    e4:4b:e9:b2:f7:a3:c1:30:93:ed:e8:87:81:41:0a:
                    93:fb:1c:cb:cb:d3:8d:bc:e6:57:97:cc:ad:18:d6:
                    c4:1d:b6:43:79:77:5f:a3:12:8a:36:15:6c:79:aa:
                    4e:a7:c8:a8:53:07:c6:0e:d6:ec:22:b4:66:e1:1b:
                    f2:dd:1c:85:93:be:ec:ae:c7:3e:94:1d:94:32:32:
                    08:1c:7f:be:12:7c:07:89:50:12:9c:a9:d5:0a:b9:
                    9e:a3:e5:b7:ac:5e:9a:87:9e:96:88:16:f5:e2:97:
                    18:93:a6:4c:6a:98:f2:47:f2:c3:f6:58:d6:48:23:
                    40:c5:7d:00:c5:ac:a7:af:76:27:f1:f5:9f:7e:1a:
                    ce:59:d5:0d:8d:ae:83:f7:24:d1:5a:17:a0:3f:93:
                    4f:af:97:f8:a0:f6:f2:22:98:1a:8b:5c:03:58:5d:
                    13:55:ab:f5:3e:b8:f2:b9:db:03:9a:e4:2d:1a:4d:
                    25:3c:7e:db:dc:1f:c4:14:06:4f:78:ac:5d:94:81:
                    77:c7:02:6d:d8:c2:b7:73:29:3f:5d:d9:b0:3d:d8:
                    80:9b:52:3b:d5:14:30:4e:b8:31:a7:c4:46:64:9d:
                    97:45:28:b3:f9:52:5e:46:61:26:8b:47:3b:f5:5e:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F1:8A:A6:E8:FB:19:8F:A2:5D:6F:71:96:79:3E:08:2D:7F:6B:30
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/936B147E248A11F0AD4B1179C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:7f:82:64:1a:52:39:05:62:bf:d7:26:b6:51:f1:07:7b:
         c6:06:29:f1:71:12:d7:81:38:ca:3d:c9:22:77:da:5f:ba:f6:
         c5:c6:79:13:53:35:7d:4f:1b:99:cc:ff:e0:b0:08:da:45:d7:
         96:23:25:2a:e3:bb:39:5d:70:28:91:96:68:0c:2b:48:38:17:
         25:b1:47:49:14:22:43:b7:16:85:43:f2:a5:a3:95:96:2b:df:
         ba:df:83:bc:92:3d:9d:5f:83:64:03:71:50:55:cb:e6:cb:16:
         cc:a5:33:e9:8a:30:d7:69:78:1b:8b:e0:f0:9f:c2:2c:91:6c:
         03:5c:ae:6e:70:ed:1f:61:37:49:0b:63:e3:d8:75:94:aa:01:
         51:8f:91:53:8e:7b:f3:c8:e5:52:59:1f:34:50:e7:56:91:e8:
         8b:80:b9:8f:e0:4c:99:ae:14:3c:47:0b:3b:ec:f6:3a:b4:80:
         a8:80:34:4d:0d:19:3c:10:45:71:3a:15:56:4a:c4:22:77:65:
         25:5d:fe:da:9a:6c:73:39:e4:75:1e:22:37:ee:86:09:59:0f:
         10:77:be:ed:fb:2d:5d:9f:93:74:50:1b:5c:3b:4b:48:be:91:
         24:86:b9:c6:c3:47:93:5d:2b:78:5f:0d:00:68:47:fa:be:5d:
         53:06:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:02:17 2025 by rpki-client