Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DC5DDACC315011F0BC916269C4F9AE02.roa
File:                     DC5DDACC315011F0BC916269C4F9AE02.roa (raw, json)
Hash identifier:          elhRBQmgahUV9yLFHRBbf4LwKBDorXGc5+JZSYL3s5c=
Subject key identifier:   9E:74:B3:EB:E3:C9:85:DD:92:87:23:4C:AC:93:21:13:30:82:F3:C7
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       198A
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DC5DDACC315011F0BC916269C4F9AE02.roa
Signing time:             Thu 15 May 2025 05:53:01 +0000
ROA not before:           Thu 15 May 2025 05:53:01 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     56868
IP address blocks:        103.70.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6538 (0x198a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: May 15 05:53:01 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6825813d-c10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:7d:9c:1e:d0:b2:fd:e0:af:43:62:a7:cc:
                    cc:65:72:9f:82:36:1b:e7:20:b3:46:4a:b3:40:bf:
                    bb:10:ea:4d:9f:8f:c9:7a:22:0d:0e:a3:a2:e1:ce:
                    c8:bd:62:48:4f:69:6e:e2:3e:32:c7:c3:a0:d9:2b:
                    26:57:58:8c:f3:7e:93:a1:05:f9:91:17:39:88:7c:
                    87:60:14:5c:d4:e9:03:50:f3:8b:e0:60:f2:8a:38:
                    74:97:65:ac:ff:cb:8b:bd:8b:15:0b:eb:d5:4a:b3:
                    80:be:bf:90:1e:5c:31:72:03:84:06:6b:8c:5f:2e:
                    cd:92:53:96:f2:c4:a5:3c:87:5d:b4:c4:28:37:31:
                    60:32:4c:5b:6f:fd:66:2d:70:e3:d8:cd:5e:35:af:
                    12:cb:92:cc:af:f2:d2:ab:4e:01:42:79:98:6f:b2:
                    1f:cb:60:44:d9:2a:3e:0e:59:0c:27:87:c9:14:54:
                    5e:40:4e:a8:f0:9d:9c:6a:35:f0:85:86:af:d5:24:
                    b0:08:76:49:61:46:17:7d:56:42:9d:58:a9:a0:60:
                    41:b3:8f:c3:3a:3c:b7:71:07:6a:e3:a4:50:da:f6:
                    f0:aa:13:0a:0b:5e:14:18:b9:8b:ac:9c:b7:73:20:
                    a1:c7:f5:57:4d:1f:75:cf:7c:7e:4a:32:e5:85:e9:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:B3:EB:E3:C9:85:DD:92:87:23:4C:AC:93:21:13:30:82:F3:C7
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DC5DDACC315011F0BC916269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:8e:09:39:b0:ad:ca:21:19:2b:c3:95:7d:c3:2f:b9:46:
         8d:af:b6:7e:b5:50:a5:75:0f:48:98:c9:74:b3:68:c0:1e:1f:
         83:1f:a3:60:a5:ce:32:eb:16:7a:96:97:a5:c0:9d:3a:20:4e:
         fd:14:71:27:97:f6:a0:87:02:68:a4:f2:12:98:8c:8e:1d:04:
         89:9f:af:58:79:9d:72:b2:b5:bd:ec:46:d6:78:93:60:46:1e:
         1c:a1:6d:ac:b0:cd:c3:7f:56:ad:11:15:39:26:43:23:17:4e:
         22:73:99:f5:85:04:01:26:26:f5:39:a8:30:da:9c:0a:39:dd:
         64:3d:8f:7d:0c:50:bc:e3:1c:68:f2:f2:d8:8e:28:ca:66:e1:
         8d:7c:83:7c:0c:9e:c7:f7:9b:17:c2:b1:6a:04:af:10:65:a9:
         57:e6:11:c6:c9:75:61:e4:4f:1b:06:3e:fd:ac:6e:e3:4f:f1:
         6e:1b:73:77:b1:87:d1:6a:ee:83:ab:8a:ca:83:d5:c0:f3:b2:
         0a:e8:df:1c:43:19:d6:9f:c6:22:0c:50:5b:86:9d:9d:e3:69:
         1d:21:5b:dd:7c:33:a1:80:d3:60:f9:7d:a1:1f:60:ca:01:3a:
         74:91:76:19:20:92:88:32:b6:cf:61:ce:e1:38:21:7d:ac:03:
         0e:05:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:01:46 2025 by rpki-client