Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
File:                     430FB1B69FC411EEBA6AB80AC4F9AE02.roa (raw, json)
Hash identifier:          qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=
Subject key identifier:   77:E5:D2:9D:59:29:20:EB:D5:43:0A:98:85:C1:28:67:79:C4:E6:51
Certificate issuer:       /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial:       0104
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
Signing time:             Tue 29 Apr 2025 05:10:51 +0000
ROA not before:           Tue 29 Apr 2025 05:10:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151370
IP address blocks:        103.212.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
                          rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 04:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
        Validity
            Not Before: Apr 29 05:10:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68105f5b-abfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:e1:8d:1a:88:11:b2:63:50:c9:2a:83:d6:
                    63:1e:a1:19:92:24:ef:5a:8a:21:06:4f:fc:49:e5:
                    65:8c:d2:af:a7:d9:ca:bf:7c:12:c0:8c:4f:0b:3f:
                    6a:57:eb:80:a0:fb:c1:d1:2e:7f:33:32:bd:d3:4a:
                    45:34:2a:2a:79:2e:28:59:85:9e:5c:bb:a6:db:8e:
                    f9:40:cd:60:10:06:84:09:f0:d6:75:55:40:f2:ac:
                    0d:d8:e5:7a:f1:a0:23:ad:77:67:8b:bd:00:0d:fb:
                    8b:17:92:71:9a:25:c4:29:76:d0:d5:a2:cb:ed:97:
                    34:d8:45:2c:e9:37:ee:36:f7:2e:7c:ec:bc:34:54:
                    b8:b9:d2:01:69:9b:73:d8:2d:55:b7:26:72:98:1f:
                    2d:7e:b5:1f:95:99:23:d9:21:ba:a6:f5:7b:c8:f4:
                    d8:c8:3f:03:81:dd:49:76:51:1f:fd:ac:f3:70:c0:
                    2c:c9:79:15:81:ae:89:f8:06:3c:a1:85:12:2c:91:
                    75:89:8d:c2:0a:68:03:ea:d5:91:c1:3d:fa:ad:b5:
                    cc:cf:2d:71:df:c7:3a:5d:79:61:ba:38:16:a0:17:
                    fe:e2:8d:7b:06:c7:a9:68:2d:0b:49:f3:43:46:61:
                    94:66:90:09:31:b7:88:d0:42:78:d2:01:58:d7:51:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:D2:9D:59:29:20:EB:D5:43:0A:98:85:C1:28:67:79:C4:E6:51
            X509v3 Authority Key Identifier:
                keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:bf:01:c2:92:ec:df:b8:c7:46:7b:04:b2:3a:5e:1a:c4:ac:
         f1:e6:8a:36:bc:e1:fd:92:9b:31:00:d9:81:a4:c6:83:81:7f:
         18:12:2c:a1:44:57:16:57:d5:12:ff:f4:d7:46:e4:da:f6:3f:
         bd:b2:88:e4:3a:43:f0:7b:08:b5:e1:00:55:34:4b:1b:4d:2f:
         7a:b0:e4:35:ec:71:2c:8f:03:79:66:86:33:de:91:24:d3:3e:
         88:7c:d2:d3:5a:38:33:2b:1e:81:6c:42:7f:4a:7d:03:11:68:
         ad:c4:99:5c:a7:e6:e4:65:53:85:0d:0f:93:a7:52:9f:6f:b8:
         bf:17:94:ae:3c:7c:93:4c:b9:1c:53:fc:d5:85:ee:e9:30:81:
         2a:42:7b:24:13:3a:02:39:31:c8:36:b7:e7:69:53:45:c2:c2:
         ed:f0:a8:34:bb:81:2d:b1:01:ab:0b:46:20:74:db:49:54:51:
         d5:94:2f:78:b2:97:03:6d:f2:59:f6:9d:6e:5c:fc:6c:22:3c:
         01:5a:18:45:77:2c:78:2c:c9:9b:ee:d8:73:3b:78:a2:84:b6:
         f5:c0:59:4a:4b:71:18:de:ad:6a:07:d9:7b:75:34:06:ca:71:
         7e:e4:ce:2e:68:db:4c:6a:e4:8b:7f:7e:5b:cc:c8:70:92:5a:
         ac:ba:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:19:53 2025 by rpki-client