Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa
File:                     F44E1EECCD8411EF88CD1464C4F9AE02.roa (raw, json)
Hash identifier:          RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=
Subject key identifier:   F8:7F:27:69:D3:63:F1:94:D1:92:EF:6D:BE:67:B6:9E:65:A3:A5:DD
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       05FA
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa
Signing time:             Mon 26 May 2025 23:53:56 +0000
ROA not before:           Mon 26 May 2025 23:53:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10103
IP address blocks:        103.97.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: May 26 23:53:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834ff14-0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:c2:2d:10:3e:fc:a7:2d:5b:7b:72:61:a3:
                    b8:9b:7a:df:fd:cb:7d:3e:59:2d:e3:e7:4f:9a:38:
                    dd:8a:8d:48:d1:cb:2d:4d:88:8f:6e:05:c3:c6:8a:
                    cd:82:4e:01:73:d3:db:85:ca:a1:4f:fe:c5:76:97:
                    5c:e5:b0:0d:d9:45:fd:fa:b4:42:0f:34:27:09:86:
                    81:bd:4c:f0:2b:57:83:80:87:a8:47:0e:a9:5d:67:
                    37:c8:0e:ae:dc:7d:d4:a4:50:f1:a3:c3:d9:8e:3d:
                    63:ce:1d:78:ed:57:f8:a2:3b:ed:8b:f3:59:68:04:
                    f9:1b:86:9b:be:3f:13:5a:01:9d:a4:e7:15:22:c2:
                    af:b1:67:d2:74:7b:8a:55:23:bb:35:09:ee:b8:9c:
                    95:5b:aa:97:84:30:19:e5:4c:ec:ac:be:b4:5a:9c:
                    67:a9:86:84:19:66:51:e2:02:0c:80:c2:0d:72:93:
                    e1:98:00:9c:9e:fe:f7:82:5c:14:93:b6:8f:bf:6b:
                    28:a1:dd:2a:2b:a8:d3:d4:f0:21:5a:2d:62:39:6c:
                    cf:ce:ee:74:bc:41:81:0e:29:67:ff:c3:f8:e9:8b:
                    9f:15:8c:35:07:5e:87:f9:b4:a1:0e:44:5f:ca:68:
                    8a:98:17:ce:b4:ae:dd:f7:42:6d:97:08:0a:dd:a8:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:27:69:D3:63:F1:94:D1:92:EF:6D:BE:67:B6:9E:65:A3:A5:DD
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/F44E1EECCD8411EF88CD1464C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:4d:25:cb:6f:8d:06:15:43:ea:3b:53:88:fe:e1:23:6b:
         9c:14:fd:97:d7:a3:65:a6:74:78:2a:02:fe:1a:f7:df:3b:95:
         1d:51:db:0e:ee:76:07:6c:1d:ed:92:9d:70:dc:eb:e7:08:f2:
         07:f5:02:3d:03:23:17:84:1d:ba:58:0d:bb:ed:8b:25:03:3f:
         11:29:73:7e:bc:30:fc:20:1f:a1:bf:a6:6e:f6:d8:b1:96:cc:
         3a:b6:c6:15:6f:75:32:41:54:cf:63:04:71:be:6a:8a:f6:1e:
         4e:d0:cc:fd:dd:e3:a3:3e:00:88:6e:94:6e:01:b9:72:20:07:
         ac:13:22:b2:97:f8:94:62:7a:36:9c:59:cd:f2:aa:45:71:46:
         d6:6b:f1:e4:81:9d:b0:c2:81:fb:7f:dd:9f:92:c0:8e:e0:4b:
         94:62:23:2d:1c:d8:51:47:99:3f:e8:a3:e1:82:6d:05:b5:f6:
         43:77:ce:e5:39:b7:57:5f:da:80:e6:3b:74:27:2f:f9:9c:4e:
         5d:5c:08:ef:71:e1:ed:97:7e:4d:84:40:8b:d7:a0:5e:78:8f:
         62:fb:7b:41:22:11:fd:72:2d:4d:f5:88:43:48:30:36:ba:a4:
         26:3d:38:88:27:c4:3d:f7:32:9b:93:9d:44:47:72:42:5b:3f:
         c5:90:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:14:35 2025 by rpki-client