Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/E0722F2EB41B11ECB8529210C4F9AE02.roa
File:                     E0722F2EB41B11ECB8529210C4F9AE02.roa (raw, json)
Hash identifier:          1PytUGKxFSlnKa32cmpuSKajNJ5x4qip8klGcU604cA=
Subject key identifier:   41:F1:3B:29:A7:08:0D:C3:D0:B6:C9:07:0B:AE:06:7F:81:EB:7A:CF
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       036C
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/E0722F2EB41B11ECB8529210C4F9AE02.roa
Signing time:             Fri 23 May 2025 01:17:27 +0000
ROA not before:           Fri 23 May 2025 01:17:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139743
IP address blocks:        103.150.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: May 23 01:17:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682fcca7-496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:79:19:98:88:e9:7a:6f:04:fb:09:47:71:
                    9a:8c:39:f1:f2:af:e3:d2:a5:c2:48:01:c2:c2:bc:
                    84:b3:69:0b:f3:e5:e5:fa:11:fb:c2:fb:0d:14:fa:
                    fb:46:06:2d:86:48:c8:a0:21:c2:09:fd:46:2c:34:
                    f8:2c:89:1e:f3:34:85:1c:e6:68:81:24:34:8c:0f:
                    49:2e:1b:b3:ff:32:72:1b:1a:54:16:7f:d5:af:58:
                    bb:ea:5e:10:97:0e:fe:69:de:ec:95:84:60:77:e6:
                    c1:2f:40:33:63:c3:eb:4a:a4:1f:c4:9c:d8:16:e6:
                    6c:e0:8d:68:90:3c:d3:c7:9c:d9:f1:fa:0b:d4:f0:
                    8d:63:5e:50:29:d1:5f:1e:9f:bd:4d:b2:ea:2d:94:
                    f3:f4:39:83:37:b5:4d:76:25:2e:87:f5:b6:91:14:
                    7a:b5:1f:df:d7:36:30:54:13:87:06:8a:20:82:a7:
                    53:4f:dc:1c:b7:0b:d7:d2:69:69:d1:38:8f:b8:c2:
                    ca:48:ce:67:d3:43:2d:7d:bd:94:35:35:eb:1c:c5:
                    3a:e7:6b:fd:d9:08:03:a4:bb:62:4d:a8:e7:87:db:
                    3f:6f:05:c4:26:e4:6c:3c:29:fc:12:f8:dc:30:30:
                    bb:bf:f6:4b:ac:a0:e3:fc:2a:7e:ab:b9:7e:7e:e4:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:3B:29:A7:08:0D:C3:D0:B6:C9:07:0B:AE:06:7F:81:EB:7A:CF
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/E0722F2EB41B11ECB8529210C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:1c:bf:4c:a2:ff:27:3f:df:9b:45:91:f9:ae:2f:96:e5:
         4f:4d:dc:d1:3e:27:00:38:81:14:d6:50:d4:c2:54:16:29:97:
         47:40:63:60:23:ab:bb:ea:d4:da:66:ce:85:9b:f5:6f:62:66:
         24:c7:84:ee:7f:d2:58:e7:c0:ce:2f:1f:53:f1:4e:0b:c0:73:
         04:70:68:78:48:88:e1:01:98:50:14:a7:d7:8d:a5:f0:33:29:
         e4:bd:31:85:cc:95:4b:53:74:86:7c:98:1e:0d:8c:d5:aa:16:
         b2:77:4a:f5:80:ee:b5:5b:0b:5e:95:aa:ec:38:52:fd:ec:8a:
         4f:7b:88:b0:e2:45:e6:9c:cd:e3:9b:9b:72:6a:ba:b8:5f:d3:
         51:dd:67:f3:90:3f:90:7d:ef:ba:c0:f4:d7:d6:8e:6e:6e:00:
         80:ae:0f:1f:b9:a5:b1:32:c0:2b:ba:8c:be:40:bf:b0:7b:46:
         58:2f:b6:f6:56:50:4c:91:83:b6:ff:36:e4:6d:74:f7:17:18:
         fa:53:ba:98:eb:a4:a3:36:79:f3:76:66:87:70:33:89:e5:35:
         d0:37:23:8f:4e:d0:56:12:d7:47:80:fb:00:dc:35:04:09:2e:
         8d:8d:5e:d6:e0:00:26:21:d4:90:9a:12:1c:99:9a:50:69:a5:
         e1:0f:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:49:10 2025 by rpki-client