Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa
File:                     1B22E756D37711EC9A8FF526C4F9AE02.roa (raw, json)
Hash identifier:          gy37y3m86p91aNaJLGl/OcCXrwdEyv/PB6GXlm+9olg=
Subject key identifier:   7C:23:54:95:10:5F:7E:BE:24:A3:65:03:63:5A:33:45:42:75:FD:E4
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       0319
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 01:55:43 +0000
ROA not before:           Tue 03 Jun 2025 01:55:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139009
IP address blocks:        103.187.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Jun  3 01:55:43 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e561f-91bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:5f:b1:6a:92:e6:09:fb:34:43:89:97:73:
                    99:d7:c1:44:7a:80:ed:e7:38:80:93:24:e3:f8:fc:
                    cc:78:44:58:c9:f4:00:d0:7b:59:37:2f:21:b1:97:
                    40:35:0e:69:3f:fb:27:b4:04:a6:79:cb:c6:12:7c:
                    23:42:ae:31:d8:ff:f6:92:56:48:92:9c:e9:45:5a:
                    c7:c2:df:20:b0:a4:42:65:7c:a8:74:77:aa:96:bb:
                    98:9e:85:87:17:eb:a8:0a:67:cb:93:7a:77:0b:28:
                    d9:b4:3a:d8:60:c0:aa:8a:41:13:24:11:b4:03:69:
                    6d:ed:10:9f:6f:be:56:c5:0f:91:34:81:32:c5:a1:
                    7b:fd:76:69:e2:6d:01:79:f1:18:5b:a8:1f:23:86:
                    0d:95:66:17:76:26:c5:2b:f0:2f:93:c7:1e:bb:a1:
                    bc:9b:d1:e7:c0:41:34:8f:6d:b0:ab:61:f5:e4:a7:
                    23:93:1d:e1:2e:64:31:8d:22:68:d4:e0:dc:99:86:
                    af:01:07:89:27:15:6a:0b:5a:5f:ab:dc:b4:86:d5:
                    a2:15:bd:d1:a1:19:e7:4e:38:d4:87:60:ff:4f:7d:
                    4f:18:a0:85:07:83:74:05:57:34:12:b5:dc:69:5d:
                    a7:b7:4b:c8:4e:d7:0a:99:4f:19:08:94:9f:21:60:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:54:95:10:5F:7E:BE:24:A3:65:03:63:5A:33:45:42:75:FD:E4
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:a7:4a:4d:36:0f:db:66:9a:9c:66:83:72:25:66:53:30:
         a9:53:59:5b:fc:31:72:28:ca:0e:59:b2:7c:da:3f:84:5a:df:
         5c:4a:c5:4c:45:d1:aa:af:30:9c:f3:8c:de:70:0b:ca:75:e8:
         bd:aa:d4:58:15:4e:de:b4:0e:ee:db:c7:fe:31:7b:74:1c:3c:
         02:e5:64:a6:0d:aa:5f:88:c5:ac:80:6a:38:67:ea:d8:c9:2a:
         ee:29:d0:5f:86:cc:94:95:31:73:98:08:c4:12:1e:6c:d1:6b:
         33:54:a7:10:b3:4e:8e:e1:b4:f3:47:24:db:77:a6:b6:d1:6d:
         e1:cf:45:d6:8d:5b:5b:c0:32:c7:21:e3:17:55:74:b5:52:16:
         f4:85:56:c8:56:37:4e:c2:27:fe:95:9c:b5:16:41:1c:ed:3e:
         22:b6:7a:bc:60:ab:5d:5e:29:de:eb:c1:08:7f:d7:f2:32:b8:
         8c:16:81:be:96:e3:af:f4:83:05:91:be:f3:b1:62:7b:d6:c1:
         09:6f:4c:fd:9b:55:66:ba:75:02:7e:16:82:69:ad:24:58:4e:
         5f:5f:a4:01:b8:55:c3:d2:6a:0d:23:00:c6:82:6d:e9:eb:a4:
         78:ed:b9:ad:da:b3:ef:48:75:48:d0:7a:4b:33:83:be:3f:5d:
         30:96:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:13 2025 by rpki-client