Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
File:                     E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (raw, json)
Hash identifier:          f3W0EO7G/sw19nHYB9WoUdeY7Xp6AsIu+GDLxRyq8hw=
Subject key identifier:   42:4C:D8:60:9C:C8:E5:73:A0:6C:A9:21:C1:EB:AD:FF:C0:78:C5:80
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       019C
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 04:01:24 +0000
ROA not before:           Tue 03 Jun 2025 04:01:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136587
IP address blocks:        103.91.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Jun  3 04:01:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e7394-0c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:54:f9:d6:14:32:62:99:d4:b8:d1:8f:e0:
                    64:67:d9:73:8c:8e:0d:1d:12:22:cf:3b:e9:76:3b:
                    0b:dc:2b:c1:96:6b:c9:42:8c:c6:83:04:ff:4c:7d:
                    f3:4f:15:a2:3c:c8:ba:4e:25:ec:62:7e:19:66:83:
                    62:74:72:ec:d3:d4:7f:8b:b7:99:dc:33:93:6e:bc:
                    63:7a:bb:ac:1b:78:10:14:d6:a2:1a:fa:35:9d:f9:
                    57:14:ed:6c:6f:bd:52:aa:d6:a8:d0:ac:47:6a:47:
                    3f:f5:bb:1f:28:50:8d:98:e4:73:9f:99:0d:44:f2:
                    95:d2:53:17:73:a8:30:84:34:3b:16:e9:ac:71:36:
                    9a:d0:4d:ec:fa:3c:05:8c:33:a7:25:91:b0:74:5a:
                    46:0a:b1:1e:5a:9c:33:34:13:d9:62:1d:1d:5e:48:
                    63:ca:b0:27:36:c5:7a:90:d9:9c:67:5e:77:29:e5:
                    41:f6:c1:4c:64:28:6e:02:8b:de:b0:bb:77:63:85:
                    bf:00:80:fc:a7:70:ae:ab:31:c7:6f:ed:af:15:a4:
                    d6:8b:1a:88:43:f7:05:18:6b:c2:53:a7:19:75:3f:
                    f6:c0:35:cf:87:8e:eb:86:30:a9:09:f9:14:98:b8:
                    ae:e3:e4:8d:c0:d8:1b:f1:2f:69:71:f6:4f:b3:1b:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:D8:60:9C:C8:E5:73:A0:6C:A9:21:C1:EB:AD:FF:C0:78:C5:80
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:64:da:c0:ad:75:8a:34:d3:80:24:ef:51:a2:96:6b:a8:
         dc:4c:7c:db:60:5c:58:ee:0f:02:a5:f8:49:a6:98:fb:be:f7:
         6d:16:d5:ff:92:04:19:32:75:65:9b:1a:6b:f5:64:a1:0d:75:
         93:43:73:7e:37:d6:90:8a:1c:be:81:93:cc:0f:22:ac:e1:97:
         a2:fd:4a:a4:09:57:44:ba:a8:9c:e5:a3:3a:78:52:3c:93:7c:
         7b:ea:ed:7d:56:39:e1:15:6a:f4:00:f6:29:69:b9:49:43:71:
         7e:cd:94:0d:ee:e9:0f:7b:23:d4:59:f8:1a:bb:0f:dd:e7:e0:
         53:e0:ad:56:7a:4e:21:9a:8b:ad:fe:ff:c9:c1:89:a4:ee:a3:
         a7:00:ab:e9:18:44:37:2e:5d:b1:7b:37:1a:0b:d8:76:7e:22:
         59:5a:05:f7:bc:f2:48:4c:1a:d5:44:44:29:b5:87:f3:be:c4:
         46:be:f3:32:03:d4:af:58:a6:2c:85:4e:ca:8d:1f:7c:1c:39:
         f8:9b:cd:fd:86:7d:20:c7:4f:d2:12:b0:7b:82:b6:ec:88:34:
         ed:76:0d:11:da:2e:4b:14:b7:65:63:83:d5:b2:8d:d6:65:0e:
         fd:92:f3:5a:f5:b0:4b:38:01:e2:82:69:38:4f:c2:8c:d3:18:
         77:76:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:56 2025 by rpki-client