Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/BD764EAE1D5B11EBAB008D19C4F9AE02.roa
File:                     BD764EAE1D5B11EBAB008D19C4F9AE02.roa (raw, json)
Hash identifier:          faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=
Subject key identifier:   1E:D8:B8:A2:F8:52:0E:68:8D:DC:6E:98:EF:86:B2:DD:62:A9:DA:5D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       076E
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/BD764EAE1D5B11EBAB008D19C4F9AE02.roa
Signing time:             Mon 26 May 2025 22:10:18 +0000
ROA not before:           Mon 26 May 2025 22:10:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4049
IP address blocks:        103.90.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: May 26 22:10:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834e6ca-c88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:14:3c:31:65:64:2f:7f:7a:8b:7e:8f:5b:
                    e9:b8:17:a8:ff:bf:63:49:74:9c:42:22:cd:95:fd:
                    7f:7d:a0:05:68:0c:dc:5d:d8:ff:4e:e9:93:b0:c6:
                    f2:78:29:b2:85:19:ba:a5:e0:86:b4:23:e5:e9:99:
                    43:17:05:17:48:77:a9:54:cb:9c:e1:bd:84:a5:a7:
                    c5:9e:6c:86:6b:9d:0d:ca:a1:99:da:3e:cb:d1:5e:
                    dd:4f:9c:4c:97:99:ff:c7:ed:e3:23:24:0b:83:58:
                    5a:1e:1e:0e:94:2e:00:7f:ad:87:e4:25:bb:a8:89:
                    76:d5:da:10:4d:b4:63:16:7c:2a:88:f6:1a:00:20:
                    94:53:e6:e5:07:e4:1c:3e:b3:eb:ed:04:7e:ed:da:
                    e2:fd:4a:f0:a3:8b:8d:10:28:b0:39:d0:34:82:13:
                    eb:07:e9:82:31:93:0f:5a:dc:b8:60:d9:88:ac:c9:
                    c5:bb:78:4b:69:ec:91:91:83:f8:fd:90:0e:fa:0c:
                    04:2b:f5:0d:1a:4c:44:dd:4e:de:89:e8:6b:19:71:
                    31:be:8b:ba:d6:4f:3a:d8:72:17:88:65:9e:b4:39:
                    b7:d9:bb:8d:87:87:2b:2a:97:7b:49:be:b4:c5:a1:
                    fb:8d:d0:dc:9e:e2:a4:f1:02:5d:42:6c:94:a2:22:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:B8:A2:F8:52:0E:68:8D:DC:6E:98:EF:86:B2:DD:62:A9:DA:5D
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/BD764EAE1D5B11EBAB008D19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:f3:c2:b9:9c:6f:d3:a0:83:72:02:f5:7d:16:ab:26:53:
         33:90:47:52:de:7c:2a:d9:32:f5:38:8c:82:26:71:03:94:27:
         c6:d8:49:fd:40:95:b6:dd:77:ae:f1:c4:46:4b:a6:a1:6a:c6:
         1a:ee:3a:4b:fc:55:9b:10:38:01:06:b4:63:b2:98:aa:7b:e6:
         31:8e:77:b6:71:1b:96:23:5c:f9:69:66:ab:45:96:96:7f:a8:
         6a:7c:32:e2:72:20:74:38:b4:8f:d8:90:4d:c3:4a:d8:a2:f2:
         7a:9e:0b:32:fe:c2:9f:b2:04:cf:22:77:ca:72:c4:e5:08:3a:
         ed:e4:31:cd:e6:92:9a:e9:a7:ac:44:03:ab:ee:e4:74:62:ce:
         a1:a4:8c:4a:b9:8e:b9:3a:41:16:8f:b8:36:ed:9a:ac:71:75:
         89:4c:17:af:16:88:b3:87:78:65:eb:3f:fc:63:1d:d6:93:fd:
         1b:81:d0:49:16:89:ce:7c:11:44:a3:1e:a8:a7:66:b4:b9:d7:
         8c:a6:dd:53:4c:30:3f:f3:88:f6:7a:f1:42:2d:9e:17:42:6a:
         f6:9e:c4:bd:a5:79:23:08:1e:b9:d4:f2:1e:1d:c7:20:10:63:
         8f:97:43:d2:00:e5:8b:aa:5f:cf:74:16:58:2c:e9:3d:8e:04:
         ef:3f:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:03:23 2025 by rpki-client