Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/853DCAEA341111F0A5CD2B20C4F9AE02.roa
File:                     853DCAEA341111F0A5CD2B20C4F9AE02.roa (raw, json)
Hash identifier:          3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=
Subject key identifier:   9D:5B:5F:A4:33:07:0B:93:42:7B:5A:31:CE:C5:DA:EE:29:59:6A:6D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0220
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/853DCAEA341111F0A5CD2B20C4F9AE02.roa
Signing time:             Sun 18 May 2025 17:57:11 +0000
ROA not before:           Sun 18 May 2025 17:57:11 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138823
IP address blocks:        103.4.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: May 18 17:57:11 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=682a1f76-d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:5e:53:42:db:fc:5c:75:ba:bd:be:85:8d:
                    87:0a:54:41:0b:ee:b8:b1:ed:5b:a5:f0:5e:22:1e:
                    5e:7f:a3:9a:33:8f:25:b4:b1:2b:03:12:97:76:a2:
                    6d:21:9c:cd:0c:59:20:10:e1:db:ed:24:f9:e1:07:
                    f3:10:ad:cc:1b:12:33:e6:8e:31:71:e0:9b:ee:c9:
                    81:db:0f:11:a1:d2:ca:9a:55:52:7b:6d:c6:fa:d0:
                    cc:15:60:b8:58:05:84:19:d4:7a:dc:f4:4b:3e:56:
                    be:b5:30:69:cd:f8:e4:aa:e4:36:f6:45:c0:4d:0b:
                    84:2b:d8:ad:34:60:22:30:71:f2:46:4d:af:06:77:
                    33:07:e6:aa:62:1b:ad:9a:3f:09:f0:c0:4e:67:27:
                    81:d4:ed:1b:03:3d:1f:62:0f:71:22:97:6c:d1:56:
                    1e:58:5b:f3:bc:ee:1d:33:ea:b3:48:fa:de:21:06:
                    c5:b8:e2:92:2d:a5:3d:19:82:f3:64:c7:f3:80:18:
                    e7:83:51:30:af:38:27:11:82:15:c8:d2:b6:2c:f1:
                    fd:5b:31:e0:2d:62:20:38:cf:61:6d:cc:20:6d:32:
                    e0:c0:81:5b:0e:00:d1:fe:96:34:48:bf:fc:13:21:
                    64:e4:c1:15:9f:cf:0a:7a:01:19:2a:e4:21:df:06:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5B:5F:A4:33:07:0B:93:42:7B:5A:31:CE:C5:DA:EE:29:59:6A:6D
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/853DCAEA341111F0A5CD2B20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:49:5c:ee:d9:eb:cf:60:f7:e6:ec:b6:71:4d:c4:86:3e:3d:
         91:83:11:fd:df:de:1b:b4:06:50:7b:04:f3:b8:76:0b:a0:ab:
         7b:32:de:5e:bd:bc:bb:1f:c0:46:96:b5:8f:2f:20:39:b4:64:
         58:3a:71:03:91:7e:55:9d:eb:aa:95:14:c4:c4:95:32:72:02:
         18:16:1a:ce:a1:d6:37:56:e2:be:35:35:53:31:02:49:f5:59:
         2f:d0:c2:ba:63:e4:88:5d:fb:96:11:b4:ac:1d:40:d2:91:58:
         32:23:b1:d9:18:15:e1:f0:c6:41:e5:84:ce:1a:71:2b:5c:f3:
         0a:9c:39:0c:37:9e:74:dc:08:fa:8f:5b:ce:86:78:ba:2e:41:
         c7:67:0e:ff:bd:77:19:8f:ee:5e:2f:33:b6:4f:76:23:bb:68:
         9f:53:25:2e:ac:4a:f4:95:9a:5d:78:60:a5:81:44:09:ad:e0:
         b8:71:a9:c7:90:f4:61:6c:e6:fe:c6:d8:76:c8:21:e2:16:32:
         9b:6a:72:bf:f8:35:2b:cb:f1:7e:39:ec:07:d3:3a:77:9a:38:
         f6:e5:ca:aa:38:c0:5b:1f:ba:66:85:53:be:3d:f9:1e:21:d4:
         15:6e:49:de:70:fa:36:ea:7a:42:9c:7d:87:27:08:46:e4:a4:
         fc:3b:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:14:34 2025 by rpki-client