Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
File:                     387C18C819B811EC841B010DC4F9AE02.roa (raw, json)
Hash identifier:          zY32yJX3jzHsHVwyop2pV6zAgsbf1EOVZMtyU3SMaOA=
Subject key identifier:   03:3F:DA:05:DB:FB:7E:39:2D:D8:D4:51:C5:16:BD:77:56:7A:87:2D
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       04F7
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
Signing time:             Wed 04 Jun 2025 23:44:21 +0000
ROA not before:           Wed 04 Jun 2025 23:44:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     17472
IP address blocks:        103.154.68.0/23 maxlen: 24
                          202.49.96.0/22 maxlen: 22
                          202.49.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 23:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Jun  4 23:44:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6840da55-0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:90:62:0f:ed:09:7e:23:6c:ff:ab:d7:e3:
                    a3:6f:54:18:8c:2a:af:cc:50:14:b2:e2:8a:70:eb:
                    0f:b7:9c:14:34:dc:c9:51:4b:80:bd:7a:a8:3c:40:
                    d4:d2:4e:2b:90:6d:4f:40:e8:fe:78:3d:d1:11:f5:
                    70:90:59:bb:ff:96:0d:51:f8:1a:63:44:f5:8b:6e:
                    f5:df:49:30:88:53:a4:ba:e5:6e:8e:76:c0:68:80:
                    d4:49:56:38:52:19:57:ef:95:6a:54:e5:32:1e:5c:
                    0e:82:a9:87:78:d8:89:a8:e6:2f:28:f0:71:d4:13:
                    d0:aa:d7:7c:98:81:8c:89:3e:8f:d5:9e:77:ba:11:
                    0f:a8:6c:23:5f:85:3a:d1:9c:d0:f0:ef:15:3e:cc:
                    1b:45:1f:94:82:14:c1:b8:a0:a8:6b:57:bc:f0:54:
                    e5:56:d4:61:08:98:41:68:1d:46:4d:fe:66:dc:e5:
                    1f:0d:8a:a5:e3:2a:cd:f5:2e:27:fc:da:12:6c:42:
                    ac:c3:84:aa:36:09:49:19:a3:38:ce:d3:78:a2:02:
                    89:28:2f:b2:f9:e2:39:66:6f:b5:97:a0:99:fe:ae:
                    cb:f4:e2:71:e2:fd:fe:18:87:2e:61:f5:da:67:f1:
                    10:f3:04:d6:30:28:b6:33:f3:34:18:de:3e:b9:41:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:DA:05:DB:FB:7E:39:2D:D8:D4:51:C5:16:BD:77:56:7A:87:2D
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.68.0/23
                  202.49.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:90:ba:89:9b:24:d1:05:11:94:2f:0f:42:76:d1:c3:7e:ba:
         96:e4:d1:51:16:75:e6:3c:ca:cc:37:b6:dd:dc:33:3d:b3:11:
         b8:63:02:10:7d:66:20:bd:13:3c:75:68:6e:ab:35:f3:37:f7:
         08:01:d8:5e:cb:37:de:32:13:66:61:2b:25:97:c8:42:2a:b3:
         13:86:dc:d6:f8:bc:a1:43:a6:8d:29:14:a7:ed:ea:42:da:03:
         3e:18:4b:5a:be:de:51:f9:0e:9b:af:2f:fc:a3:7b:f5:14:ab:
         91:09:21:f9:78:98:59:24:48:68:71:5f:8a:26:a2:2c:cf:30:
         00:49:a9:67:1f:83:43:cf:cc:59:f5:de:c2:1d:9d:c6:7f:29:
         84:bf:74:f3:f5:02:61:b4:f0:ad:d3:9a:fe:29:2c:3f:15:f7:
         ee:cd:ea:0d:08:15:33:2d:c7:8e:90:fe:e9:f2:75:77:0f:aa:
         ce:e5:00:d9:30:d8:1a:f1:b5:45:74:6b:57:64:07:85:94:48:
         c6:4f:b8:06:5b:8c:a1:a5:a7:58:b0:9b:f3:30:37:8e:35:80:
         b0:90:9f:c6:b6:00:cb:d6:ac:e1:c7:c0:a4:b3:27:d4:45:0e:
         7c:c7:c1:4d:2b:ee:01:3a:6d:c0:9c:1d:44:e3:58:e5:30:55:
         d8:f0:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:09 2025 by rpki-client