Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
File:                     A1491F7CEB7811EB9134133BC4F9AE02.roa (raw, json)
Hash identifier:          C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=
Subject key identifier:   57:A8:44:D8:4C:61:75:7A:32:49:D3:60:B2:03:42:4D:5C:57:47:00
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       0559
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
Signing time:             Sat 31 May 2025 00:25:19 +0000
ROA not before:           Sat 31 May 2025 00:25:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135607
IP address blocks:        103.166.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: May 31 00:25:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a4c6f-bc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:3e:47:79:0d:8c:30:70:18:14:4a:35:ad:
                    1d:65:6c:0c:37:8a:9f:9b:b8:0f:03:ae:95:e1:11:
                    b0:53:50:15:fc:a9:10:18:3a:db:fa:3d:7e:7d:ff:
                    06:0f:77:c7:ec:51:8c:c7:23:7f:b3:77:b3:cd:7d:
                    cc:c1:e8:9c:53:fd:11:20:0d:8c:fe:30:e8:68:f0:
                    ef:38:3c:5d:6d:38:9f:38:db:ee:d8:7c:2d:fc:e2:
                    a3:01:5c:f4:2c:53:62:d7:f9:69:86:19:85:3f:3e:
                    8d:6c:4e:27:36:3d:dc:95:93:e8:3e:f3:79:39:d3:
                    28:6b:82:8c:df:ec:aa:25:48:6f:0f:51:05:0f:dd:
                    4f:4b:78:d5:35:dc:17:06:fd:72:eb:d7:29:3b:a4:
                    82:30:7b:03:e2:35:3e:cc:4c:81:f8:40:52:c7:4e:
                    1e:55:74:67:22:d9:5f:f4:8f:b4:d5:4e:bb:72:e7:
                    70:6c:ae:df:94:ef:01:2b:b9:57:b6:f0:91:ea:a6:
                    4a:23:75:b3:37:3e:0b:7e:4b:a7:69:5e:e9:ad:6c:
                    8f:d0:a9:27:a0:2c:2c:aa:88:85:c1:ca:65:9c:1d:
                    e8:49:a9:db:47:ac:3d:c3:f0:47:48:04:c1:97:32:
                    fd:95:a2:97:05:b0:4d:2a:e3:85:9e:b0:99:a1:3f:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:44:D8:4C:61:75:7A:32:49:D3:60:B2:03:42:4D:5C:57:47:00
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/A1491F7CEB7811EB9134133BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:df:6c:35:24:fc:37:ce:e3:c8:86:d3:00:e5:8d:9a:ae:
         81:05:01:69:f6:80:86:64:c6:4a:98:26:20:fb:06:c8:49:2d:
         35:b1:cc:92:e1:52:d8:f9:2a:d2:04:69:d8:b6:c8:d0:85:91:
         62:bb:2c:88:5f:ef:71:4b:cd:89:e3:a4:dc:34:00:6c:08:b2:
         26:74:cb:6c:50:c7:41:fb:9c:2b:64:26:1d:db:5a:f5:3d:c1:
         4c:fa:be:45:8e:14:41:a2:fd:1e:ab:b9:6f:a2:a1:da:7e:5d:
         c4:44:23:9f:10:b0:76:0f:ec:d9:10:35:cc:41:04:e7:e6:f2:
         78:c4:29:aa:35:93:2e:b4:af:c5:c5:c5:75:d5:75:ec:04:b2:
         27:78:ff:14:37:e0:51:93:e2:80:da:fc:53:16:29:22:e6:9f:
         24:44:8d:d3:b8:bd:40:c2:81:2d:86:b7:51:74:61:23:05:8f:
         c9:1e:e2:94:1f:3f:00:12:a1:96:41:0a:53:34:ad:dd:c4:c7:
         70:f0:82:08:93:5f:22:c0:9e:82:3e:ec:00:66:bc:d2:90:fa:
         05:5d:d1:b8:d1:01:32:75:61:1b:e0:89:fc:57:25:12:17:91:
         94:87:fa:18:58:9a:14:07:7b:67:f9:67:9b:fa:13:a7:a8:6f:
         68:de:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:54:03 2025 by rpki-client