Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
File:                     730C503A56C611F096620043C4F9AE02.roa (raw, json)
Hash identifier:          m+BAyP5CIYN6CIS7MvKKiKoAky/65ZLjF2ZjJHqu8U0=
Subject key identifier:   3A:AB:38:5B:01:0A:26:35:22:15:D1:18:E9:B8:B6:23:A3:49:7F:F9
Certificate issuer:       /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
Certificate serial:       02
Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 21:57:58 +0000
ROA not before:           Tue 01 Jul 2025 21:57:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134244
IP address blocks:        103.245.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl
                          rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Jul 2025 08:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6
        Validity
            Not Before: Jul  1 21:57:58 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=686459e6-97c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:51:d7:3c:04:9d:42:a8:a7:5a:96:3e:90:
                    48:b6:d0:3d:f5:41:92:17:df:ff:8e:f1:48:4e:a3:
                    81:3f:c8:aa:7d:94:cd:67:f2:e9:ed:96:5c:f0:18:
                    fe:b0:8b:62:f9:b7:48:70:7e:99:37:bf:3a:61:41:
                    9d:00:8b:15:c1:17:66:31:ee:97:41:71:c8:cb:7a:
                    d7:fe:d4:2b:36:e0:f1:b7:e0:38:96:7b:35:9e:16:
                    fe:ce:49:ac:72:16:6b:c6:70:d4:58:1e:bd:d6:6a:
                    ad:5c:db:af:a5:d0:4a:e7:f0:da:5e:57:6c:e7:12:
                    7b:d2:21:2b:d0:d7:c5:6a:1e:43:89:c7:48:d7:d6:
                    52:b1:a1:6d:13:fd:51:ba:b6:7d:49:4f:f8:e0:fc:
                    47:3e:8b:8e:7a:ef:54:1a:68:e7:d4:18:55:96:bb:
                    8e:32:d1:c3:2a:c2:ba:5f:c7:6e:46:9c:60:a7:19:
                    71:d3:b4:a8:c0:da:7e:11:e9:51:13:fe:eb:e0:14:
                    ad:9b:ca:46:44:1f:bc:65:33:a0:b8:cd:14:6a:a5:
                    63:f8:b3:12:89:52:5f:b9:00:2c:69:42:26:9c:f1:
                    aa:a4:55:dd:e7:94:2e:aa:3d:41:35:92:f1:a2:f2:
                    12:fd:24:07:2f:d1:c0:71:c7:53:c2:16:df:92:f0:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AB:38:5B:01:0A:26:35:22:15:D1:18:E9:B8:B6:23:A3:49:7F:F9
            X509v3 Authority Key Identifier:
                keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/730C503A56C611F096620043C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:94:c1:69:b3:6d:4b:42:46:92:d0:66:18:e6:ee:e5:a9:
         44:11:2b:59:90:73:81:9c:9c:1e:7e:2b:ec:18:a5:41:be:c2:
         4e:26:7b:3e:b1:0d:29:d6:fe:69:47:97:83:b4:26:a3:b9:30:
         24:d8:c5:4f:86:3b:62:48:14:8d:f5:c1:a8:a0:66:7a:fe:0c:
         2d:f6:0c:51:73:00:d9:fd:fa:58:42:52:5a:0a:d4:b6:fb:49:
         9e:40:16:f0:5a:f1:ba:af:de:42:47:a4:74:46:18:c7:32:94:
         3e:9a:8b:15:37:6a:d2:01:9a:ab:65:11:f1:ef:c9:8a:77:ee:
         f3:1e:71:ee:9b:b9:df:7a:09:15:29:16:32:84:55:b6:cf:15:
         55:e2:4b:3f:b5:64:c9:bc:2a:b5:ae:d8:b3:f6:cb:f4:7c:60:
         07:55:35:ac:8a:80:bf:19:b0:02:5a:ae:e1:76:f2:02:3c:0f:
         9f:da:03:6c:6c:f7:3a:7f:ce:05:55:ce:cb:08:70:6b:04:ce:
         67:3f:84:25:98:67:bc:64:c5:cf:b7:ae:db:75:43:41:4a:4c:
         65:fd:ce:fd:6a:f2:61:5f:86:32:64:d3:46:06:19:b1:e0:c6:
         2e:46:0c:a3:76:41:1a:13:4f:a7:df:ec:fa:c5:ea:dc:44:ff:
         62:75:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 14:29:41 2025 by rpki-client