Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E3832A223D3B11F08D620770C4F9AE02.roa
File:                     E3832A223D3B11F08D620770C4F9AE02.roa (raw, json)
Hash identifier:          JH0RK382Rq1931q3FZOB876I+WmJlKxX2lIeupDIS2c=
Subject key identifier:   7E:B9:3B:BE:8E:0B:3F:CC:1D:A6:8F:4F:00:92:B0:95:2D:1B:65:16
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       34EA
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E3832A223D3B11F08D620770C4F9AE02.roa
Signing time:             Fri 30 May 2025 09:53:08 +0000
ROA not before:           Fri 30 May 2025 09:53:08 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9304
IP address blocks:        103.21.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13546 (0x34ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: May 30 09:53:08 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68398004-276e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:fc:fd:6f:b6:a8:a5:e5:89:0d:9f:76:7f:
                    07:88:ce:f2:3c:25:76:f7:f7:d0:d7:68:f9:73:38:
                    26:1f:af:43:1d:65:e1:f9:91:22:c5:bd:64:8a:a1:
                    51:21:25:5e:80:8f:4e:96:b1:91:3b:67:9d:82:8a:
                    8d:89:dc:ff:13:fa:32:54:23:59:8f:6f:98:dc:0d:
                    b2:52:f5:8f:75:27:bd:34:f3:f2:78:7f:ca:f9:02:
                    30:67:1f:81:1a:de:f0:de:a7:10:39:1c:1e:4f:24:
                    bc:c6:bb:92:58:98:8c:8c:d4:fe:00:6c:44:cd:cd:
                    5a:85:06:a1:cd:0c:16:8a:ad:08:2b:d8:1d:a3:0e:
                    bd:a5:0b:94:6c:5c:db:00:79:e8:db:ab:00:b5:08:
                    51:84:30:b6:e4:1e:f0:e8:c7:85:ed:0f:79:04:6a:
                    a5:fa:81:49:0f:f0:c2:8b:bb:71:bd:5e:c2:c1:dc:
                    98:c0:73:45:38:55:5e:5c:28:5f:d4:4c:f3:64:92:
                    34:7b:7d:ed:4d:63:42:b9:60:63:59:a8:02:49:db:
                    8a:a8:b8:8b:d0:c8:68:ba:bd:16:2d:1d:d9:f9:34:
                    15:fb:d4:50:b3:bc:af:f8:7f:27:3e:d2:cc:20:f6:
                    39:05:f3:f1:79:5f:fb:94:b0:91:da:e1:fa:f8:9f:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B9:3B:BE:8E:0B:3F:CC:1D:A6:8F:4F:00:92:B0:95:2D:1B:65:16
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E3832A223D3B11F08D620770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:8c:3f:d4:98:ee:14:eb:f6:2f:0a:f4:f8:7d:e5:c8:b5:
         9a:9c:f9:27:6f:ff:f2:e9:d2:6c:1b:c6:e8:f4:69:0d:f6:58:
         fc:31:6f:56:99:b9:13:01:7c:67:b0:a4:69:e8:e1:80:e2:d8:
         df:24:1d:be:15:b6:bc:65:8b:0d:b4:2e:80:2b:c5:4b:04:65:
         92:a8:25:38:04:c3:30:58:7d:39:01:1b:c3:41:32:0a:a2:d3:
         87:dd:cc:d1:c6:e5:09:6f:59:da:e5:54:ab:60:a5:6f:28:62:
         25:01:61:d7:df:da:d4:ec:7e:99:97:10:a2:0c:fd:dc:14:49:
         a2:0a:ac:e1:ce:93:dc:6e:df:64:cd:e8:30:57:ac:51:d7:df:
         a1:76:49:b7:01:0c:71:de:15:f8:0b:9d:8a:ad:a1:82:ea:05:
         9d:48:d6:7a:c6:4b:05:d8:82:27:d2:8a:ea:95:a0:6a:03:90:
         39:64:12:dd:39:7a:5c:70:e9:f1:d6:3e:2f:fb:c9:08:c7:a8:
         7a:d1:30:f8:9f:87:7b:c0:47:a7:b9:84:43:47:92:46:b9:a4:
         e7:c4:9b:d0:07:e1:4a:ac:f8:08:09:7d:7d:12:17:c8:f0:a6:
         8f:68:4d:2d:76:7f:7e:98:85:fe:52:e9:41:9f:1f:3c:b5:ac:
         c5:17:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:39 2025 by rpki-client