Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
File:                     A766D10CF86B11EF86A73884C4F9AE02.roa (raw, json)
Hash identifier:          YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=
Subject key identifier:   D6:62:6B:6C:D5:D7:00:70:72:07:27:0E:91:91:56:BC:61:84:2B:D2
Certificate issuer:       /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial:       0C3A
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 19:01:41 +0000
ROA not before:           Mon 02 Jun 2025 19:01:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.92.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 18:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3130 (0xc3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
        Validity
            Not Before: Jun  2 19:01:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683df514-f5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:f1:0f:86:09:71:fc:07:19:54:ae:2a:85:
                    44:1a:4a:d9:04:b8:ad:08:2a:e2:8f:0a:9e:51:0d:
                    95:a8:e1:54:c1:8b:eb:91:64:4a:e7:60:ba:f1:0b:
                    fc:5f:36:c9:4f:74:ea:0a:cf:22:0a:40:7e:62:e1:
                    bf:18:ea:99:2d:8b:71:74:e5:b4:4b:56:4c:b8:14:
                    5b:78:d1:db:e8:d1:51:77:43:ed:e4:e2:37:e3:5f:
                    22:ce:31:55:f1:92:0d:a0:89:2f:20:bd:72:aa:89:
                    aa:bf:86:99:1c:86:7e:f5:a7:f2:09:c2:65:e9:9d:
                    be:60:48:f5:90:02:2e:e2:a4:1c:b2:d6:01:c8:97:
                    60:47:40:2a:63:ab:64:55:da:39:d1:c3:81:17:17:
                    a9:46:f6:3f:0c:b6:e9:d5:cd:35:51:91:b3:52:83:
                    e0:7a:ed:39:3d:98:6a:e6:ef:91:b6:82:3c:66:16:
                    67:59:b6:ce:38:a0:59:3a:bc:e7:fb:3c:51:ee:fc:
                    c5:9a:58:71:67:c1:c9:6d:3c:04:68:44:23:fa:e6:
                    78:6c:e5:fe:ba:a0:00:51:7e:1b:7f:16:ad:b5:ac:
                    7d:d6:70:18:b1:87:3d:91:6a:1a:31:4d:f8:fa:bd:
                    13:8a:06:3d:c8:61:32:df:01:e6:8b:b8:38:e6:41:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:62:6B:6C:D5:D7:00:70:72:07:27:0E:91:91:56:BC:61:84:2B:D2
            X509v3 Authority Key Identifier:
                keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:22:e0:3f:77:39:90:60:bb:6b:b9:3f:96:aa:8a:a0:e0:48:
         58:9d:d6:36:32:21:a3:34:c1:68:ba:43:5e:ee:41:73:86:ae:
         06:54:51:71:dc:84:be:6c:08:d9:d9:ce:a2:81:49:96:bd:a2:
         c5:02:cb:1e:1a:b5:62:28:63:9c:17:98:a2:b5:a1:e6:8c:8e:
         d9:1f:8c:84:47:4b:55:46:8a:bc:f9:09:d5:de:92:7a:af:d3:
         8a:e0:d2:f9:6a:d2:ed:1d:e7:73:5b:71:c2:77:cd:48:b5:75:
         ec:7b:e4:2e:f2:74:50:4e:8d:1b:64:85:44:17:ca:19:fb:c4:
         42:ae:12:e7:93:7a:a3:82:f0:0e:29:e8:8e:0d:67:99:d4:ee:
         8b:79:12:3c:14:b3:a7:cc:a8:8e:45:82:49:71:08:50:7f:83:
         ad:8b:95:87:fd:88:69:77:a9:9e:f6:f8:e7:cd:8f:a1:65:cd:
         b4:02:20:37:82:ef:00:85:7f:73:20:02:d4:e7:6e:23:47:3c:
         2b:e8:32:e8:6f:6b:a6:a1:81:bb:fe:c5:8b:5f:c0:31:27:eb:
         4b:61:32:24:3f:58:c6:0f:b7:7a:69:16:47:83:bb:22:c4:96:
         1b:2c:f5:04:07:40:0d:f8:c4:69:f3:2a:10:a1:aa:4d:b2:a2:
         b1:72:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:09 2025 by rpki-client