Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa
File:                     E90DFC9CF00111EFB541185CC4F9AE02.roa (raw, json)
Hash identifier:          TuWKlHncV9ol4wZzYVUEuu8aecG1wWBFbcB1ZNq2FKQ=
Subject key identifier:   B6:13:2C:DB:7A:37:45:93:4F:10:9B:D3:E4:28:08:B8:1F:82:2F:D9
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       0589
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa
Signing time:             Fri 16 May 2025 23:33:59 +0000
ROA not before:           Fri 16 May 2025 23:33:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.166.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: May 16 23:33:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6827cb67-abe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:c3:2a:82:a5:50:20:42:33:51:75:d1:59:
                    03:da:87:2d:a3:54:ad:e6:8b:62:a3:37:21:0f:eb:
                    60:a6:de:ca:90:dd:df:3f:8c:ec:88:a4:5f:f7:b2:
                    88:9b:cc:ec:28:4d:48:b1:ed:57:05:d0:e8:6c:f7:
                    6d:b8:95:c5:97:3e:9b:58:58:ca:cb:a5:e3:f9:9a:
                    73:10:ea:45:10:ff:42:84:21:74:0f:e0:a6:5e:16:
                    71:97:dc:b0:e9:63:48:17:68:6e:5f:b1:c1:3e:46:
                    a0:37:d4:70:bd:f8:c0:9f:1f:28:0a:f6:c9:6c:c8:
                    e4:d5:8a:3b:f6:86:e4:e4:d2:83:d5:e7:4e:f3:29:
                    ea:60:b5:0e:61:0d:46:a0:f8:b3:de:e5:13:90:ba:
                    cf:b5:59:31:62:a7:1c:d2:23:72:74:f4:3c:95:13:
                    cc:03:be:5b:3e:47:83:ab:81:ec:d4:11:33:eb:13:
                    35:a1:8c:27:35:cc:1c:82:20:51:f3:36:7d:fd:7d:
                    24:7b:b5:9b:c2:17:e9:a0:7b:55:4b:c1:56:42:b0:
                    50:38:ae:6e:f2:8a:37:a5:5f:8b:c5:1c:df:47:e2:
                    48:e0:f3:6b:f4:e9:c2:12:9f:2d:e7:51:2f:65:97:
                    ec:33:11:af:ee:b8:f2:66:f5:3b:00:59:68:9f:3a:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:13:2C:DB:7A:37:45:93:4F:10:9B:D3:E4:28:08:B8:1F:82:2F:D9
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/E90DFC9CF00111EFB541185CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:03:58:5f:cc:d9:fa:b5:6c:5a:65:56:6a:40:58:f2:7c:
         60:53:df:22:77:ef:6f:5f:f6:21:14:39:c5:1f:94:4f:64:22:
         5f:86:e0:41:91:02:c9:9c:4e:d4:ef:db:8d:31:45:ea:4e:6c:
         99:9a:d5:82:e1:01:64:b9:68:2d:ed:85:8c:c8:cc:8a:b8:1b:
         64:01:30:1e:0c:a4:11:fc:04:50:aa:9e:ad:b5:09:e4:b6:b6:
         dc:d2:2f:f0:70:a4:64:d2:50:d4:ee:32:5c:46:06:c8:89:a0:
         d9:31:43:2c:80:34:d8:e8:54:86:1f:d0:d7:4f:3e:e7:49:24:
         58:a1:39:ff:e8:bc:69:f2:2e:7a:45:e1:50:8e:b8:ce:96:4a:
         78:ec:53:dd:eb:b7:ad:fc:1a:b2:73:b7:b6:b1:6b:6b:63:13:
         05:5a:e3:1e:8e:66:c1:4a:22:d7:46:19:b7:94:c3:13:18:2f:
         b7:af:3a:e8:01:c2:05:01:98:f6:dc:1d:7f:1e:70:db:06:9d:
         82:fd:cb:b6:de:45:d0:f0:aa:d3:09:7e:7a:e3:d7:86:b5:cf:
         6b:53:da:ee:ad:f9:fa:14:03:e1:ab:23:f5:32:aa:0b:ba:1c:
         74:58:c9:69:e3:d7:84:af:6f:98:dc:7b:13:64:ae:bc:16:15:
         8c:9e:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:51:08 2025 by rpki-client