Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa
File:                     851515FC1C8711EF964ED80AC4F9AE02.roa (raw, json)
Hash identifier:          ZVnEYOHXINGZEw1RnF1Uj9Pw7AnbBUgkIn8eDQrA8T4=
Subject key identifier:   77:32:AA:05:DD:40:80:25:0E:FB:C4:4D:24:7E:77:BD:FF:E6:E0:26
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       CB
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa
Signing time:             Sat 03 May 2025 05:42:12 +0000
ROA not before:           Sat 03 May 2025 05:42:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9790
IP address blocks:        103.19.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 05:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: May  3 05:42:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6815acb4-67b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:f1:67:ad:aa:49:8c:6f:7b:13:c3:20:00:
                    66:e8:1a:2d:ce:fe:82:a3:14:58:8d:7d:5d:0b:81:
                    ac:c8:b7:b3:ec:79:b9:a8:f9:14:71:a0:0c:0a:0e:
                    c1:35:ff:ef:f8:19:c1:1c:53:c9:f7:02:00:89:2c:
                    aa:e9:9d:bb:68:2e:28:f7:95:11:04:2a:d8:38:29:
                    c0:b0:c6:18:f1:6c:c3:21:d9:23:47:61:d1:04:4c:
                    10:31:96:2a:dc:c0:91:51:bc:0c:6a:b1:02:ce:09:
                    81:5c:00:5e:68:f7:22:e5:bb:52:1e:05:3b:05:0f:
                    1f:52:3c:f0:25:6b:9a:61:6f:4e:53:9c:8a:b1:9e:
                    e2:0d:c4:dc:eb:b8:31:a3:00:e0:33:a7:fc:a0:3c:
                    f6:d6:c2:28:f9:a9:c2:2a:e3:e2:57:8c:2f:c6:3c:
                    a7:a8:12:5d:24:a1:2d:aa:74:d9:2d:57:ea:79:30:
                    84:37:da:25:e0:e5:ec:39:16:37:2a:c8:57:74:57:
                    b7:a2:d1:fc:71:11:c1:53:00:01:f7:02:19:83:77:
                    17:3e:72:28:19:d0:d0:44:70:09:39:1f:c8:b2:b3:
                    1e:96:6e:0e:9a:eb:f4:f6:08:64:0d:0c:86:9c:ea:
                    30:1e:09:5f:a8:50:73:4f:9d:99:d6:74:cb:53:51:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:AA:05:DD:40:80:25:0E:FB:C4:4D:24:7E:77:BD:FF:E6:E0:26
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:be:ee:39:a8:90:c7:39:d8:b5:34:52:fa:0d:f8:c0:94:
         fa:4d:90:3f:11:42:6e:87:e3:27:f5:19:3d:65:10:8a:1d:a6:
         67:52:ca:06:59:e4:14:2d:95:b6:c7:6a:0c:af:1f:22:1f:ec:
         75:a8:bc:0b:ff:6e:bc:20:f6:de:5f:ac:24:1e:ac:3d:a7:1d:
         f8:6b:1b:02:af:30:98:26:b4:82:be:99:1c:57:4a:64:6e:7d:
         3d:59:4d:28:3d:78:c7:87:5d:d6:8a:e0:77:2b:9f:01:b9:f7:
         bd:60:9b:52:3c:f1:86:f7:3d:74:e7:4d:6c:88:6a:0b:4a:23:
         ac:f4:b2:01:92:e9:14:77:d6:36:77:38:ca:54:84:7b:7b:ea:
         aa:f4:74:42:c8:54:9a:e0:3e:55:ad:4f:97:8f:66:dd:aa:3e:
         17:f4:2b:af:56:a2:9d:37:ad:30:fd:15:d1:3c:93:c9:ac:bc:
         23:eb:f0:db:a1:3b:db:a7:19:58:0b:11:07:04:37:85:06:9f:
         9f:52:49:01:90:2c:3c:ec:32:ea:b7:ef:96:21:7f:2d:4d:6b:
         8a:a9:30:96:ce:41:e5:65:74:1b:9c:91:d4:56:09:ae:c3:a2:
         26:f0:95:77:db:ad:84:3c:10:8b:9b:74:99:37:7c:af:6a:ea:
         1a:f4:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:32:15 2025 by rpki-client