Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/0F1BFF983C6411F08247312EC4F9AE02.roa
File:                     0F1BFF983C6411F08247312EC4F9AE02.roa (raw, json)
Hash identifier:          8qUuDVndIDg2NrEC8AKM8tdD0/103K09L9Yt7oBaFMM=
Subject key identifier:   E3:9F:0D:A0:FC:66:7C:74:0F:3B:B5:2E:4F:C9:5A:46:34:34:4A:1A
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       027C
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/0F1BFF983C6411F08247312EC4F9AE02.roa
Signing time:             Thu 29 May 2025 08:08:10 +0000
ROA not before:           Thu 29 May 2025 08:08:10 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     54004
IP address blocks:        203.21.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: May 29 08:08:10 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=683815e9-3815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:95:71:60:7b:e3:2d:44:a5:b0:30:b2:44:
                    77:65:1b:43:ec:7f:98:19:ea:3a:46:75:fe:9b:23:
                    d2:e6:db:f4:a5:16:e1:8e:b1:08:29:ef:51:c1:fd:
                    07:b6:bc:aa:df:09:07:f6:0b:40:7f:df:02:a9:a6:
                    f4:2a:24:ac:0a:00:38:40:0d:ad:84:07:19:f3:94:
                    67:26:bc:c6:3c:47:07:d1:27:b7:b8:4f:b1:c6:7f:
                    4b:99:04:5d:e9:de:ff:9c:3b:cb:41:ca:4d:fb:1d:
                    9f:7e:b9:d0:0a:a0:85:43:08:80:1b:49:30:b2:58:
                    54:5d:5c:e9:74:e9:e1:20:07:6b:8d:39:34:4f:e5:
                    5a:1e:a9:91:c7:d9:56:ee:89:a4:fa:97:39:6c:24:
                    52:4f:ea:bb:eb:00:3d:44:cd:18:82:72:ca:7f:06:
                    f1:6b:0f:dc:1c:a8:97:47:ba:07:6c:af:8b:91:4e:
                    d6:fb:54:9c:c8:d1:ed:4b:c9:07:b2:4c:24:f0:1e:
                    90:b8:1b:3f:0d:44:a5:97:58:14:aa:4d:a0:5f:aa:
                    0f:e9:37:ac:bb:7a:2d:f1:24:6f:ed:6c:7e:24:61:
                    00:61:3f:0c:98:de:c8:f7:59:8d:19:40:38:33:9d:
                    24:0b:b7:5f:a9:2b:c9:ed:73:7f:7f:b0:06:60:b6:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:0D:A0:FC:66:7C:74:0F:3B:B5:2E:4F:C9:5A:46:34:34:4A:1A
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/0F1BFF983C6411F08247312EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:0f:e5:48:d3:fa:41:df:4d:13:89:cb:45:7b:c2:d2:58:
         10:79:c0:45:f1:6d:18:c1:59:96:d7:43:c7:72:2f:b4:67:6f:
         18:24:97:10:d6:2f:e9:d1:2b:a6:da:7e:6e:72:34:a6:7a:7e:
         d0:d0:8b:25:f1:f0:26:bf:11:09:b6:be:38:b7:66:b2:78:ed:
         fb:32:b6:1a:f2:0a:e0:d1:a1:e6:fc:1e:84:ca:30:3a:5d:62:
         f6:1e:0f:a5:e3:aa:e4:24:b8:6b:03:a6:29:0a:57:9f:17:93:
         f4:f6:f3:0d:10:2a:de:2d:44:d3:71:5a:a0:1b:06:67:4f:48:
         89:30:58:36:f8:f7:c0:90:0d:b8:3f:2a:04:dc:4c:a2:0d:e9:
         2b:7a:f3:5a:a0:71:da:c2:19:8c:be:ab:e2:66:ab:33:dd:3a:
         ea:1a:8a:24:ea:e6:d7:4c:4e:11:17:1f:e2:6c:78:8c:fa:8e:
         fe:a4:58:2f:dc:4c:7d:df:b1:67:4b:a3:c6:bd:6b:91:51:d9:
         66:32:d5:dc:07:8e:1d:de:49:a2:f4:76:82:ad:5f:37:e8:a5:
         0f:7e:e3:54:eb:25:d3:8c:21:95:11:26:3a:1e:71:c6:a9:47:
         83:29:fe:c9:18:13:77:3e:11:0d:0d:2a:66:16:77:9a:f6:f4:
         e6:98:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:33:00 2025 by rpki-client