Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
File:                     BA7F7BA892C211EBBBF0055FC4F9AE02.roa (raw, json)
Hash identifier:          7u6aNniLSqTawfDjSQGQezRxSezr21jH5HQT4fB8aHQ=
Subject key identifier:   0C:7E:EE:FA:9A:7A:A0:0B:D6:D2:20:B4:E6:F2:3A:54:A8:E6:7D:D1
Certificate issuer:       /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
Certificate serial:       063C
Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
Signing time:             Sat 31 May 2025 23:11:56 +0000
ROA not before:           Sat 31 May 2025 23:11:56 +0000
ROA not after:            Wed 01 Oct 2025 00:00:00 +0000
asID:                     136256
IP address blocks:        103.165.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 23:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
        Validity
            Not Before: May 31 23:11:56 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=683b8cbc-76d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:36:f9:54:28:88:c3:c8:10:3b:ec:c2:a6:
                    d3:c0:30:6f:88:05:c8:a7:17:23:e1:b6:2d:20:12:
                    d3:23:e5:95:20:eb:aa:d0:a9:2a:a0:70:e1:2d:b4:
                    ac:42:9a:91:f1:56:08:17:4a:1c:ac:ad:96:1e:aa:
                    ff:79:33:fd:b8:ef:6e:29:18:69:ab:59:7a:0d:b4:
                    10:a9:27:6b:89:21:ef:eb:30:18:8f:d5:b0:62:e4:
                    d8:86:47:a4:f5:54:6a:3b:06:21:c9:da:0f:44:c4:
                    f3:7e:5e:68:3b:1e:ab:e3:67:87:67:49:58:37:24:
                    c5:a3:19:e6:0a:af:af:e3:08:20:32:8a:d5:6c:e5:
                    dc:6d:e5:fa:c2:a5:39:02:6d:bd:54:e7:ef:b6:ae:
                    c9:0a:66:c4:90:18:16:12:5c:c0:6f:90:1c:c6:13:
                    ad:fa:b7:6c:d5:d6:b2:32:54:95:f6:dd:bb:10:00:
                    74:e6:c0:c1:36:a5:55:90:45:5f:f3:69:93:6c:7a:
                    09:ba:5e:32:e4:8d:23:3a:26:19:da:65:8e:b2:7a:
                    4a:c2:94:d7:d1:16:2d:54:bd:c4:06:f7:d7:0b:bf:
                    08:7c:5f:2a:9b:fd:99:2b:bc:e5:b9:af:c2:ea:20:
                    d1:37:b6:79:0c:ae:36:93:26:09:38:dd:ed:86:59:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:EE:FA:9A:7A:A0:0B:D6:D2:20:B4:E6:F2:3A:54:A8:E6:7D:D1
            X509v3 Authority Key Identifier:
                keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/BA7F7BA892C211EBBBF0055FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:4b:bf:20:ce:75:da:ad:5e:3c:26:8e:63:fc:58:08:5a:
         e6:cd:61:0e:ac:a3:5a:8b:ab:7d:97:a0:24:87:ec:6a:38:2a:
         26:b6:01:43:ae:07:b9:d4:33:cd:ea:51:86:ea:1c:1e:83:21:
         d8:ff:ae:c1:5e:38:74:10:8b:47:34:fa:08:a1:12:1d:6a:7b:
         af:c8:3e:28:8c:03:9e:7a:b2:d5:8c:75:b4:d0:8c:26:30:0d:
         e7:2f:a3:7f:be:d7:02:b6:2b:cd:db:7c:8f:11:bf:f7:9d:48:
         2e:88:ff:41:9e:7c:49:d2:e9:ae:ac:17:e0:c3:2c:92:c9:93:
         31:14:bc:07:e8:79:9b:cd:7b:c2:ee:fd:62:1e:94:a1:aa:6e:
         c6:ae:95:d8:cc:b0:e7:4e:40:02:c1:c6:1f:5c:4c:81:e3:79:
         b3:03:e4:45:f5:89:85:7f:5f:fa:e2:e1:21:45:d3:01:67:45:
         42:12:d1:85:4a:7a:b7:a3:5e:38:69:67:02:4d:c9:45:8a:af:
         e1:9b:ee:ba:94:32:ad:eb:02:6b:ae:e5:cf:01:5d:63:1e:c6:
         5d:1b:2a:86:59:da:9f:08:16:f8:7e:0f:fa:a9:44:c5:f3:6d:
         b7:70:a3:38:be:d4:54:9e:cc:31:83:a6:f2:e2:d0:9c:75:49:
         d7:44:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:11 2025 by rpki-client