Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
File:                     7BB946FE52E611F099AC8F40C4F9AE02.roa (raw, json)
Hash identifier:          GuxDtdSqEPmiHVZfMYPjzWK45m0MqMlvnKg1Vzt78WU=
Subject key identifier:   3E:DD:09:99:F2:B2:E8:96:49:EF:61:A0:52:21:A9:74:7C:AA:57:2B
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       B1
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
Signing time:             Thu 26 Jun 2025 23:37:12 +0000
ROA not before:           Thu 26 Jun 2025 23:37:12 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     213639
IP address blocks:        103.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Jun 26 23:37:12 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=685dd9a8-8b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:f6:d0:bb:b3:bf:02:25:6d:f1:e9:a5:bb:
                    3c:e3:d7:39:c7:d5:fb:b6:55:89:c8:16:97:22:cf:
                    ac:ed:e2:eb:5d:4e:95:df:4b:fb:e1:f2:97:e8:59:
                    02:e4:3e:0c:3a:d0:cf:54:0a:03:c2:e8:40:88:0c:
                    43:0c:04:5d:89:ea:a7:d2:81:2a:81:b9:d3:cd:e7:
                    5d:48:30:8a:2b:51:4e:2a:8e:d4:a0:02:05:0e:08:
                    92:f8:53:1b:93:7e:83:da:93:db:7e:b4:07:32:02:
                    99:7a:41:e6:e3:58:37:6c:1b:fc:82:bb:e3:e7:62:
                    30:47:73:6e:9f:43:74:ee:8b:4b:5f:9e:4d:5f:59:
                    90:6f:a3:f5:1b:5d:40:10:4b:5a:c5:53:16:75:e5:
                    16:7b:a0:6a:b8:e1:f2:9b:c8:54:f5:9a:df:55:36:
                    2e:47:d3:6a:eb:aa:f6:5b:3c:7a:4c:ad:0f:e4:c3:
                    6f:32:46:09:30:78:16:3b:06:3a:73:6f:35:42:ec:
                    11:7e:15:88:0a:61:fa:b1:e4:f7:de:de:c1:8e:7c:
                    2d:ae:d9:68:1a:04:8f:62:70:8b:e0:02:c7:07:57:
                    23:41:50:1b:43:76:48:63:1c:00:ee:15:f5:b8:dc:
                    30:47:85:c1:03:a6:7c:5f:c2:65:5b:cb:6d:a4:66:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DD:09:99:F2:B2:E8:96:49:EF:61:A0:52:21:A9:74:7C:AA:57:2B
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:81:a9:29:50:ee:7d:cb:79:30:be:a4:1b:7d:c9:bc:32:12:
         44:04:0a:35:02:c2:52:4d:ba:b9:70:0b:40:78:85:0a:f8:4b:
         fe:cb:51:46:a5:25:de:e5:2e:da:b8:b7:7f:61:a0:23:4c:83:
         6f:e7:3e:c3:11:c8:86:6c:1d:ac:9a:ba:8c:76:27:5b:14:6e:
         8d:2c:bc:1b:a3:0b:bf:2b:09:0d:c3:b8:0e:0d:52:e7:dd:0b:
         ed:c8:0b:0f:9f:05:dd:3c:e2:b9:33:d2:6f:61:91:a6:3f:78:
         52:69:6b:75:25:6a:27:b2:8b:0f:4d:0f:c6:b1:d8:c5:1b:71:
         b2:fa:c3:c7:30:5c:4d:f3:92:7e:16:bf:eb:56:96:12:c7:f7:
         48:7d:fd:be:f8:9d:ea:b0:74:d5:20:f0:90:8b:d0:27:78:08:
         b0:5d:e4:75:e1:91:2a:07:17:6e:7e:f8:fc:90:ff:cc:81:cd:
         db:4a:a6:2e:7e:8a:87:2c:a2:ad:b6:4f:75:b5:74:b2:12:87:
         2c:14:5d:f8:71:25:10:0d:fb:4c:09:0c:57:fd:22:c9:56:f6:
         6a:d5:e9:3c:4a:d8:a8:38:b0:b2:2c:b7:bf:42:dd:ab:98:bf:
         45:8c:86:cf:2f:96:e9:e3:08:c6:b5:e4:44:2f:2d:36:24:4d:
         c0:2c:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:08:04 2025 by rpki-client