Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/BA6887DC396611F0A9E1DB44C4F9AE02.roa
File:                     BA6887DC396611F0A9E1DB44C4F9AE02.roa (raw, json)
Hash identifier:          0oWBT9sroXdb1hjZ1+SOjPXeFmhFQWXhKuGnpLeIO28=
Subject key identifier:   CD:C2:42:5E:37:CD:5A:AE:F7:0D:BE:DF:A2:D8:77:19:19:52:A6:4F
Certificate issuer:       /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial:       02
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/BA6887DC396611F0A9E1DB44C4F9AE02.roa
Signing time:             Sun 25 May 2025 12:49:43 +0000
ROA not before:           Sun 25 May 2025 12:49:43 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     151361
IP address blocks:        103.107.50.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
                          rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
        Validity
            Not Before: May 25 12:49:43 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=683311e6-4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:cf:3f:80:b3:59:c0:5f:1b:e8:e8:ec:67:
                    91:6e:2c:51:61:98:f8:ae:04:62:60:ad:9a:36:ed:
                    28:0c:4b:53:b6:ba:4c:70:1c:31:c4:5e:a9:29:95:
                    f9:f4:81:ff:1c:e5:04:5f:21:5a:85:4a:43:06:a9:
                    86:4a:6f:38:9e:79:2c:a7:08:25:af:8f:4d:1a:00:
                    23:11:fb:43:19:95:cf:97:c7:f0:1c:ae:ee:86:17:
                    61:67:1f:d1:d2:e1:52:62:74:3e:62:82:67:11:70:
                    11:db:5d:1c:38:ab:2c:dd:02:fe:0a:c7:e6:46:10:
                    69:68:0c:ef:9a:93:a2:54:05:43:96:00:05:1d:dc:
                    e4:19:a7:44:4c:d6:6b:3f:0c:db:ad:3d:50:77:77:
                    3b:8b:24:98:9b:b7:c4:bd:6a:9b:c0:5a:59:47:f8:
                    2e:b4:09:c9:c3:21:66:72:a4:9b:d9:86:40:26:8c:
                    26:1e:1d:a2:c5:9e:56:a4:52:11:e2:f8:f8:4d:fb:
                    e6:fd:ac:ba:52:35:5b:1b:19:b8:ad:21:e3:b3:dd:
                    0f:f2:94:1a:83:fc:05:d9:4a:cf:e2:22:a5:5b:67:
                    d4:14:67:2e:8e:e3:48:8c:9e:b4:dc:0e:15:e5:53:
                    2e:45:10:a0:38:3d:26:b2:99:1d:7d:56:a4:95:49:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:42:5E:37:CD:5A:AE:F7:0D:BE:DF:A2:D8:77:19:19:52:A6:4F
            X509v3 Authority Key Identifier:
                keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/BA6887DC396611F0A9E1DB44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:60:bd:ca:7a:e1:8b:e8:14:e2:3b:f9:0b:27:37:06:66:75:
         c2:87:bf:1d:a8:07:cb:04:cf:7c:1c:b6:60:e2:b1:c1:3e:30:
         db:2c:f0:0f:a4:f7:c4:db:28:b4:7b:a6:ff:ac:cf:29:ba:c0:
         dc:bd:1f:cd:b0:cd:0d:21:97:4f:41:da:30:09:17:ba:11:e9:
         dc:42:c7:16:e2:b8:32:03:24:4a:a3:79:fa:1c:be:28:e7:42:
         eb:ea:9f:c8:01:4c:4c:2b:3f:d6:c2:ad:50:d6:4d:31:18:63:
         6a:ca:08:92:71:37:1b:70:29:4a:8e:b8:65:58:a0:9b:9e:3d:
         64:20:46:82:97:d7:d8:fa:5b:c6:31:78:2e:f7:f5:da:66:c5:
         c8:79:da:b2:6e:22:5e:5a:f1:2f:ba:43:22:e0:92:37:dc:be:
         c5:d7:ed:bb:bb:62:8f:37:31:e7:1a:6c:d0:5b:4e:de:86:cd:
         ab:44:e6:85:2b:9a:1c:61:06:24:8b:80:60:2b:37:fa:04:01:
         cf:42:51:00:d6:da:7d:04:2e:4e:56:0d:e6:a7:8f:5e:55:d0:
         0a:f0:e2:0f:e5:e7:70:52:8b:65:ea:e2:17:70:d5:84:6f:7e:
         78:88:5e:c1:01:cc:bf:e0:fb:6e:8d:65:bb:eb:f3:ed:08:52:
         7e:7b:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:20:33 2025 by rpki-client