Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa
File:                     2015E6B2C66F11EAA0B1B019C4F9AE02.roa (raw, json)
Hash identifier:          h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=
Subject key identifier:   98:3C:63:FF:E4:C8:A8:8F:BB:20:6D:CF:70:9B:8B:94:45:D9:01:CE
Certificate issuer:       /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial:       0888
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa
Signing time:             Fri 30 May 2025 20:59:15 +0000
ROA not before:           Fri 30 May 2025 20:59:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.150.161.0/24 maxlen: 24
                          103.161.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
                          rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
        Validity
            Not Before: May 30 20:59:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a1c22-8e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:2b:02:73:77:3e:65:90:c0:c4:92:d0:17:
                    eb:41:9e:f4:40:91:a6:5f:98:a0:5e:e1:e7:42:f7:
                    f5:85:2f:60:b0:92:21:4e:a8:c8:3c:9f:39:2c:2d:
                    f2:62:8a:3a:5a:6d:c1:f6:b5:33:ab:58:60:bf:09:
                    85:a0:5c:a4:cd:82:93:ae:48:39:a6:b7:e0:25:d1:
                    04:3a:22:91:9c:fb:66:79:b4:53:ce:4d:2a:7e:d5:
                    c7:40:af:77:c3:b1:48:10:41:65:27:d2:c0:a2:07:
                    46:5a:36:ee:23:b4:67:e7:25:41:f4:83:d2:fc:34:
                    2c:e5:fa:ca:fe:32:19:18:10:63:d0:4f:34:85:1d:
                    a3:7a:d8:3b:84:bb:2a:3c:29:c2:56:b2:31:4a:b1:
                    82:ef:34:eb:3c:e8:64:b3:0d:41:cb:bb:7c:79:a1:
                    e0:ba:20:4d:39:e8:97:65:6e:2f:1a:1a:c2:f9:c6:
                    d1:be:2f:7c:34:52:93:52:9b:0e:c4:4a:10:b5:01:
                    fe:ca:8e:c0:b4:d4:28:f4:5e:a7:2d:0f:45:9b:9d:
                    d6:60:62:a1:18:08:e5:d1:36:17:12:b0:e8:d7:37:
                    e0:cf:c0:93:3b:ce:3b:60:04:09:a1:0c:c0:ea:43:
                    ac:44:b3:10:fc:30:32:e6:17:b4:36:20:ab:18:3a:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3C:63:FF:E4:C8:A8:8F:BB:20:6D:CF:70:9B:8B:94:45:D9:01:CE
            X509v3 Authority Key Identifier:
                keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.161.0/24
                  103.161.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:07:61:8c:da:85:d3:2d:47:40:75:e4:06:f3:fc:8b:59:78:
         08:a5:ff:56:23:3d:44:be:42:2d:a1:14:af:93:fd:49:2e:d1:
         17:70:fd:c4:ff:0d:c0:d8:a7:97:6f:55:86:a0:05:06:d3:69:
         05:05:f0:da:b2:96:17:b5:ed:0c:86:2d:e7:82:2b:ef:b4:f2:
         3d:dc:89:a4:09:e2:ec:41:41:ea:e9:3a:5d:e5:df:87:dd:ba:
         06:1e:3e:7a:24:67:b1:b7:1d:9b:a5:4e:b6:93:7f:64:70:4b:
         d8:73:db:e4:d0:55:fe:6b:53:57:f8:db:91:5b:7e:72:2a:d7:
         ba:be:bb:04:d1:e2:26:2d:6c:10:9e:9d:30:63:d5:99:49:54:
         cb:28:1f:56:56:e6:15:2b:de:0e:ec:21:b6:b4:f1:0c:01:0f:
         61:c7:de:bb:ba:0a:86:5d:dc:eb:52:89:5a:02:9f:6a:9d:20:
         31:27:4c:05:5c:75:9b:7e:3b:d6:8f:0f:7d:a7:f7:e1:60:df:
         d1:9d:77:55:d4:b6:2e:6e:62:e6:f7:34:f0:9a:d3:26:37:63:
         76:85:f7:70:55:36:ca:14:e6:11:33:f5:7a:94:3f:2a:33:c1:
         c7:fd:cb:1a:98:cd:7a:ca:d5:dd:07:d9:1b:fd:6f:78:7e:9b:
         06:ea:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:03:24 2025 by rpki-client