Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa
File:                     9D2302A4F1D011E88D564045C4F9AE02.roa (raw, json)
Hash identifier:          VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=
Subject key identifier:   2E:E1:47:37:F8:87:EA:25:1D:7C:FA:44:52:6B:81:D5:A4:86:64:A1
Certificate issuer:       /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial:       1AB2
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa
Signing time:             Mon 26 May 2025 16:25:50 +0000
ROA not before:           Mon 26 May 2025 16:25:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136424
IP address blocks:        103.87.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
                          rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6834 (0x1ab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
        Validity
            Not Before: May 26 16:25:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6834960e-c04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:ad:27:8e:c6:1f:b1:0c:c1:5e:4b:5a:31:
                    d3:c4:3c:c9:8d:fc:41:b2:65:4a:9c:bb:65:62:d0:
                    2c:a5:e1:18:93:81:51:ec:a8:98:39:ec:1e:42:10:
                    28:8c:e1:9c:54:c8:91:d7:d6:4f:c3:1f:91:44:3b:
                    a5:6e:0a:8c:72:9c:2a:30:83:06:f0:b2:e8:6a:74:
                    c8:2c:b0:9b:49:3a:15:d7:9f:4d:f7:e7:5a:52:0d:
                    88:89:4e:81:01:1d:6f:63:ba:1d:19:11:7c:14:a0:
                    30:66:f3:a4:d3:4d:60:b4:a0:05:1e:9b:b1:d9:3a:
                    01:d5:a3:31:44:49:27:a2:26:ab:cf:72:fa:12:75:
                    5c:3e:c5:b9:c6:a1:de:b3:e6:98:b8:c3:cb:4e:1b:
                    f9:d0:c6:57:94:9b:fb:e9:56:46:35:84:9e:1b:83:
                    d3:a5:27:21:5e:b8:fe:f2:5a:a1:fe:bc:5f:e2:79:
                    fb:8c:f2:f7:28:35:ca:5e:0c:ea:37:ef:64:03:b1:
                    d4:ee:56:af:35:e2:4a:ee:76:f0:2a:7b:48:99:d7:
                    87:ca:c6:2c:57:3c:99:26:ee:ca:2b:51:5b:0c:ea:
                    e9:a3:1e:bb:95:92:5e:d9:60:51:ff:53:b0:9d:00:
                    35:14:05:39:b4:df:f9:5c:d9:61:65:76:6c:0d:d3:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:47:37:F8:87:EA:25:1D:7C:FA:44:52:6B:81:D5:A4:86:64:A1
            X509v3 Authority Key Identifier:
                keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/9D2302A4F1D011E88D564045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:88:b3:22:c4:e3:74:23:15:55:de:bb:58:79:69:f0:12:26:
         23:f2:35:ff:d4:00:e0:0d:1f:20:8d:5e:1d:9e:cc:d1:f4:5d:
         76:db:89:ab:72:66:80:fc:f0:ae:de:52:7f:49:48:a3:b2:8b:
         99:f5:5b:34:e5:85:16:82:ca:11:9f:b2:d0:4f:e6:1c:02:d2:
         3b:b6:06:bc:df:1e:61:4a:fe:44:d5:da:32:3c:e5:54:7f:fe:
         d1:e7:0c:f7:99:71:4f:d8:d6:1a:86:21:8a:fb:a0:b3:0f:5b:
         e2:8c:6e:e1:63:c3:cd:18:7c:d0:35:94:ed:20:e4:5b:20:3c:
         1b:ab:d8:32:f7:21:d8:f8:a0:77:a7:44:16:4c:ef:e2:a1:f6:
         06:06:de:a6:d4:2e:8b:71:28:2b:d3:b6:57:d7:84:22:ee:61:
         06:60:1a:3f:61:93:70:4a:33:f6:46:da:8b:ec:66:e7:01:d2:
         8c:bd:a1:96:b1:f5:61:4f:8b:65:75:e9:00:df:69:0e:ae:36:
         48:7f:04:c9:7e:84:d6:0b:2a:a5:5a:97:b7:fb:93:ed:0c:a8:
         52:ee:93:01:db:fd:1c:73:6e:77:21:c8:9c:f5:86:b9:80:6e:
         f9:1c:4d:af:ea:2f:37:2e:bf:3b:e2:d8:f0:e2:0b:8f:64:85:
         37:bd:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:07:16 2025 by rpki-client