Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
File:                     10C5553891FB11EFB901C22CC4F9AE02.roa (raw, json)
Hash identifier:          ArlGMl3wEFoKu6XnIzHTkLugUTq0moKGL5QIiW5qRPw=
Subject key identifier:   82:60:34:7D:8B:E2:1B:98:83:88:2C:92:33:5F:3B:5C:F4:81:AE:02
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       75
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
Signing time:             Sat 17 May 2025 06:39:03 +0000
ROA not before:           Sat 17 May 2025 06:39:03 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24440
IP address blocks:        103.150.105.0/24 maxlen: 24
                          202.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: May 17 06:39:03 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68282f07-3ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:3f:58:97:80:44:7a:6d:0a:c8:ff:9e:94:
                    14:bb:76:45:7c:b3:78:ce:86:16:e7:85:09:ed:de:
                    d2:d5:39:7b:ba:51:55:2d:99:16:b0:29:a0:d8:60:
                    49:dc:02:fa:62:c7:09:0a:fa:62:0a:c2:14:01:75:
                    36:d6:93:c1:f8:9c:04:b0:e1:33:ed:8d:ba:ed:2a:
                    9d:31:a0:05:85:43:c7:c0:8b:a0:3a:4f:ef:8e:74:
                    cb:25:6c:d8:38:ca:2a:eb:c1:fb:3c:a6:56:9d:c2:
                    79:ac:1b:d8:02:68:bd:d2:0b:e2:6f:ca:26:5f:4a:
                    6a:b7:24:ac:86:6c:a9:ec:20:f5:17:06:22:b1:20:
                    1e:a0:77:e1:8f:f8:bf:65:76:4d:df:6f:97:86:a9:
                    04:36:b4:80:9f:df:f4:61:db:c4:16:da:59:a2:77:
                    cf:5c:c0:ea:e3:66:8c:33:64:31:d2:8b:a7:a2:80:
                    41:5c:81:21:c4:e6:3e:cc:9a:bf:94:f8:b2:32:17:
                    c2:26:d3:e4:43:e7:03:73:3e:cf:3d:63:73:24:68:
                    0f:0f:1b:cd:4a:3c:ce:7d:2a:43:3d:65:4b:a6:64:
                    3e:df:ec:9d:1f:db:af:7d:6f:7d:39:64:1e:5d:67:
                    e7:fc:a6:54:58:e5:31:0b:2b:64:fa:c9:8b:5e:38:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:34:7D:8B:E2:1B:98:83:88:2C:92:33:5F:3B:5C:F4:81:AE:02
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.105.0/24
                  202.70.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:25:ea:32:a9:e2:43:86:3b:c3:cd:ed:02:b8:16:e6:f2:
         b9:00:a7:7c:bd:59:e1:fe:03:92:d0:7d:d6:3f:d3:12:69:5b:
         fe:a6:b7:d0:41:2b:df:21:67:80:25:2d:82:28:33:9e:71:a3:
         7e:5a:99:95:ee:17:06:33:9b:7f:95:8e:ad:94:ca:f7:a2:d2:
         94:c7:ba:d4:79:ac:0d:9c:01:7d:fa:3f:75:f7:50:50:ec:94:
         51:76:b6:a3:da:ff:6a:28:58:95:4c:69:10:da:87:a4:1c:01:
         5f:a5:9e:18:47:d7:20:7e:78:86:78:74:ce:6c:55:1c:57:d1:
         c5:62:af:e0:e7:89:7a:5c:72:29:3c:f9:5e:23:1b:ae:28:66:
         66:15:1e:23:ba:3e:ef:34:20:3a:a7:96:39:58:a6:32:ec:96:
         f7:65:eb:24:13:00:5c:e9:c9:bb:13:f3:82:be:a8:33:c2:79:
         fb:aa:a6:0b:49:15:42:31:2b:c1:af:53:f8:34:ae:3a:5d:7b:
         c1:4c:dc:84:21:56:80:1c:3f:d8:42:24:1b:27:49:a7:f1:be:
         64:e4:87:42:97:d2:63:ad:4a:98:d6:79:16:6f:2f:c5:9f:15:
         3c:f7:de:cc:52:2d:16:cf:15:54:6e:96:fe:fb:c0:12:52:cc:
         b3:d7:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:51:06 2025 by rpki-client