Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
File:                     C6591C620DFD11EBAD63A21CC4F9AE02.roa (raw, json)
Hash identifier:          wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=
Subject key identifier:   6D:99:30:46:F2:C2:D5:BF:B8:91:72:E3:F4:1E:34:11:A5:79:4A:92
Certificate issuer:       /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial:       0790
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
Signing time:             Fri 30 May 2025 21:50:36 +0000
ROA not before:           Fri 30 May 2025 21:50:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140695
IP address blocks:        103.151.231.0/24 maxlen: 24
                          2001:df3:e180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
                          rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
        Validity
            Not Before: May 30 21:50:36 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683a282c-b332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:5b:6c:6c:ce:77:d1:5d:60:c3:ba:76:4a:
                    db:96:ed:09:6c:00:38:4d:d2:2a:3e:38:5c:32:3a:
                    ac:78:99:ab:3c:25:61:cc:36:18:eb:10:b6:98:95:
                    0f:7a:3f:54:0c:04:5c:15:2e:be:e5:87:63:7f:20:
                    35:78:b4:83:9c:24:9b:96:34:12:c6:5e:cc:98:95:
                    68:1b:06:4a:c5:d5:3f:17:a6:5e:58:c9:ec:8d:ca:
                    7d:c6:31:c0:ce:02:bd:fa:42:46:58:d0:f9:a3:eb:
                    84:89:cc:8c:6b:9f:8e:1d:4e:ed:71:1d:4b:14:98:
                    98:3a:a9:27:56:cc:3d:13:d4:67:f9:60:1f:96:35:
                    20:db:d1:ef:8a:fc:0e:d5:3e:00:43:02:bd:4e:06:
                    3e:d9:56:71:ac:e5:4e:05:a8:3f:f9:d7:7a:55:b4:
                    34:7a:68:bb:ea:ed:3e:77:5e:88:9b:f4:62:7e:24:
                    f5:f2:1f:70:b5:8f:fe:d3:a3:22:49:c7:6c:a0:69:
                    5b:13:ec:10:b6:d3:31:e0:f6:86:05:57:c0:5d:da:
                    85:5c:ba:1f:2d:55:cf:a7:8f:02:2d:ed:af:83:3d:
                    29:37:a4:75:b1:c8:7a:b7:16:c8:fd:04:2f:a8:ea:
                    e1:bb:21:9b:4f:03:64:61:6b:aa:1c:27:83:d1:c7:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:30:46:F2:C2:D5:BF:B8:91:72:E3:F4:1E:34:11:A5:79:4A:92
            X509v3 Authority Key Identifier:
                keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.231.0/24
                IPv6:
                  2001:df3:e180::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:d7:ce:26:28:b2:9a:f3:92:d5:be:45:09:35:3c:96:75:
         49:c5:48:0c:1f:f7:b7:a9:6e:32:28:27:f7:74:f2:50:bc:b2:
         f2:3a:41:36:92:e7:6f:c8:27:de:ca:47:c8:dc:c1:3a:21:84:
         b0:27:43:3a:c1:59:6c:c3:02:d2:64:58:a9:ca:55:a9:9e:d0:
         6e:08:db:11:90:57:ce:ba:eb:25:f5:0c:e1:d8:32:56:81:4c:
         8c:61:0e:02:0e:5a:20:26:3f:4a:b8:3c:65:3d:a0:96:17:04:
         21:76:eb:c5:a7:86:2a:0c:8a:f1:8f:5e:1b:b3:49:97:47:9e:
         41:04:75:b3:b0:27:1b:2f:91:38:ed:7c:dd:b9:24:44:54:17:
         ba:32:25:96:d9:31:d7:35:18:77:00:61:b6:5d:db:e0:18:d7:
         e8:0a:e9:f5:7a:c5:64:56:7d:11:19:68:4f:e7:28:6d:11:c7:
         79:25:38:a4:f8:1c:71:1d:97:26:e5:e9:f9:c2:c5:28:6d:82:
         ec:65:62:d1:3a:12:7c:51:20:f7:9c:ed:89:ae:bf:4b:6e:49:
         3f:d0:22:59:ef:c8:36:06:ed:e4:62:3f:b9:de:0b:08:47:e6:
         cf:07:f2:b8:db:6d:03:bf:14:8a:56:d8:fd:92:e1:9d:f1:61:
         2a:dd:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:02:38 2025 by rpki-client