Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
File:                     EE380826D87211EFBAE0FC19C4F9AE02.roa (raw, json)
Hash identifier:          Z/MKQEZHBao6uUjy3KntQF19ACE4AX6KONtzOcMde7c=
Subject key identifier:   5A:90:93:63:80:A8:CF:DA:6B:04:4F:CC:78:27:07:AA:A5:64:15:02
Certificate issuer:       /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial:       44
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
Signing time:             Sun 25 May 2025 06:29:43 +0000
ROA not before:           Sun 25 May 2025 06:29:43 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152706
IP address blocks:        103.36.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 07:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
        Validity
            Not Before: May 25 06:29:43 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6832b8d7-36c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:b5:ab:55:0e:aa:1c:41:8d:ad:04:4d:a1:
                    36:e7:6e:9a:da:21:33:49:1c:b7:64:eb:de:e5:1a:
                    8a:c9:45:8a:e7:04:ea:62:9b:7b:5f:19:a8:b8:c2:
                    2d:44:1f:2f:ed:0c:5e:75:72:20:59:e8:86:d1:e5:
                    bb:48:b1:3f:07:16:77:0f:a1:16:f3:bf:f6:c9:a0:
                    48:6b:20:56:47:a3:26:b4:00:8e:78:7e:e8:5a:8c:
                    5c:16:c5:87:47:72:ac:49:d2:1f:db:58:0d:18:84:
                    7b:11:bf:64:9b:41:a7:1e:e1:24:9d:34:88:95:38:
                    34:11:59:9d:19:b9:6b:66:1d:12:8d:15:fa:d4:8e:
                    69:bd:68:39:23:cc:8b:39:04:94:31:40:d9:69:59:
                    4f:45:fc:da:1d:f7:3a:9b:b5:65:11:11:d9:11:b4:
                    ff:50:82:06:9a:de:90:d8:a9:1d:06:2e:55:af:0d:
                    ca:6e:84:3e:71:15:4c:e7:a2:34:1a:f7:27:5a:e8:
                    3d:e9:2e:97:d8:a7:35:03:48:4b:07:25:c0:aa:97:
                    c7:ad:17:7d:00:b6:6a:e1:32:3b:94:dc:85:43:91:
                    83:b1:98:f8:63:f1:76:1d:6f:36:61:61:c7:bc:e1:
                    3a:ce:ac:e5:24:41:40:2b:91:84:b6:31:f3:5a:93:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:93:63:80:A8:CF:DA:6B:04:4F:CC:78:27:07:AA:A5:64:15:02
            X509v3 Authority Key Identifier:
                keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/EE380826D87211EFBAE0FC19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:24:b4:66:39:a5:94:11:34:87:ce:ac:67:eb:c1:5d:b9:ae:
         f5:36:5b:5d:7d:4c:a1:17:b2:ea:6c:e9:a0:aa:e4:4b:bb:76:
         8c:be:1b:26:84:2d:b3:4f:43:02:0b:47:86:4e:13:a4:94:c8:
         3a:53:27:a5:85:f3:d3:53:34:59:a3:c9:de:c8:bc:29:f6:0e:
         55:41:87:75:82:6f:fe:13:92:e8:87:5c:c3:97:dc:a9:ba:26:
         bc:49:a5:2f:6d:89:2c:9f:a4:43:dd:0f:e7:82:46:1e:2c:6a:
         35:95:c4:b8:c6:a8:6b:7b:c6:c2:7e:c8:90:d8:32:74:65:99:
         d8:07:8a:f0:f8:1b:85:1a:51:ab:f1:4e:e6:14:77:4f:a1:89:
         2e:e6:69:2b:b1:02:bf:60:20:b4:2b:55:4f:26:60:bc:4e:ca:
         7b:43:49:04:72:cf:38:fe:29:c5:35:4f:3f:dc:e7:69:ae:42:
         8b:7c:c2:36:fe:8c:ec:8d:0d:f9:77:fb:db:28:94:89:41:fa:
         a0:9a:db:48:33:d5:74:45:a3:b2:9c:a4:22:f9:31:ea:ad:ff:
         78:7c:52:bc:16:e3:af:de:b6:d1:33:f9:5a:37:2c:82:01:b5:
         50:d0:04:ab:7d:ba:31:ed:68:e5:6e:12:47:fe:19:7b:b2:ee:
         23:de:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:02 2025 by rpki-client