Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa
File:                     1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (raw, json)
Hash identifier:          P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=
Subject key identifier:   A4:F6:EF:DD:70:8A:81:EC:DF:58:5A:FD:F8:E9:58:26:B2:5D:C0:24
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       01A1
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 03:21:23 +0000
ROA not before:           Tue 03 Jun 2025 03:21:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151077
IP address blocks:        103.130.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Jun  3 03:21:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e6a33-2b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:18:81:3a:e2:cc:49:9b:a2:83:71:e3:0b:
                    b9:50:57:0c:27:73:8c:91:39:be:57:2e:71:50:73:
                    0a:a5:a4:6a:a1:02:3d:a6:83:42:43:81:f9:ea:2f:
                    28:a0:36:12:dd:58:8d:ff:e4:d2:f9:68:d9:85:27:
                    cc:d8:ff:11:5a:68:f1:8f:9a:28:24:87:4b:4f:1e:
                    e9:bd:df:28:e0:47:aa:12:6b:3b:df:c1:75:92:ed:
                    77:ad:05:c1:e5:1c:ca:f9:d9:11:d4:e6:bc:b9:b7:
                    03:dc:76:8d:6d:5b:7a:a2:86:f3:86:b1:de:0d:e8:
                    4f:d9:c4:7c:a3:00:28:64:20:35:d8:53:4c:50:a0:
                    3b:44:c2:ba:b3:11:e4:aa:e0:9d:cb:a7:8b:9d:62:
                    09:a7:69:43:fd:ea:dd:41:33:da:2c:d9:69:8a:0a:
                    70:40:39:57:be:e3:05:ed:0f:90:5e:18:e6:ea:e4:
                    c3:32:ce:df:87:20:0f:76:6b:6b:5b:4c:f9:aa:54:
                    c1:4e:f8:e1:55:7a:7f:87:e2:b7:ab:e5:1c:c6:62:
                    5a:a3:0d:0c:3d:e5:03:a0:7f:20:c3:46:19:f5:0a:
                    7e:d5:da:ae:c0:7e:aa:3e:cb:9e:bf:6b:b2:93:dd:
                    c7:a6:10:fe:38:4a:48:0b:48:a3:e6:e0:fd:58:ff:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F6:EF:DD:70:8A:81:EC:DF:58:5A:FD:F8:E9:58:26:B2:5D:C0:24
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/1C99BCBCEE8911EDBFAE4177C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:0d:06:1a:40:81:03:8f:7c:d0:b7:1c:64:be:ff:62:59:
         39:8b:ce:ef:0d:09:69:20:12:9c:ee:a6:9b:28:e5:91:c4:e0:
         a0:b9:c1:5e:2f:2e:67:6b:20:ac:5e:b3:14:92:2d:aa:97:4d:
         9a:73:9a:8f:d2:14:7f:85:d8:e6:0c:fc:ba:fc:3e:a0:55:c5:
         f5:b0:15:f2:28:bb:6e:87:93:3e:6e:03:14:09:de:cf:3f:e5:
         a8:33:be:57:af:c5:52:87:72:aa:74:ec:e7:ad:ec:6d:45:ba:
         17:03:7a:40:5c:5c:19:79:02:7a:97:47:79:d2:52:e7:f3:21:
         65:ef:1f:80:7d:b6:13:f9:b1:3f:4d:c4:30:6a:4d:1d:38:18:
         14:8f:35:69:c9:d1:b0:9a:57:c3:2c:97:67:ee:36:44:ef:2b:
         b3:ca:df:5d:9c:8e:79:0a:bd:1d:65:b1:42:fe:6b:e4:24:58:
         1f:17:9d:b5:27:62:f1:ab:37:ab:8f:82:22:08:1f:da:dc:cf:
         cf:1a:c2:2b:df:34:b4:fd:2d:28:c8:f0:d5:5a:67:d1:03:9a:
         0a:47:b4:11:ed:74:5f:8c:dd:fb:3d:2e:07:cd:39:2d:51:a6:
         16:09:2c:dc:dc:af:09:62:d8:4c:98:d5:66:d1:ca:f0:3d:69:
         4f:3d:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:01:59 2025 by rpki-client