Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
File:                     9D50BCA4F64211EE9114A555C4F9AE02.roa (raw, json)
Hash identifier:          5CJbD7pKl6AqdADQ2DaLJ20RlS7MYpOoT15StrcsKuE=
Subject key identifier:   F8:0E:98:E4:CE:4D:8D:3C:D9:46:E9:FE:60:E6:45:E8:EC:7C:18:32
Certificate issuer:       /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial:       FF
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 05:43:26 +0000
ROA not before:           Thu 07 Aug 2025 05:43:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150157
IP address blocks:        103.15.227.0/24 maxlen: 24
                          2001:df1:18c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
                          rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
        Validity
            Not Before: Aug  7 05:43:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68943cfe-5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:4b:c6:a7:66:50:ff:dc:5b:4f:14:68:09:
                    12:5c:dd:96:16:45:88:78:61:31:5b:91:c2:ca:51:
                    c3:99:ce:96:ff:1d:e2:d2:83:89:2b:5b:4e:54:56:
                    a1:ea:3c:74:07:24:14:47:5a:ff:86:49:4b:aa:ff:
                    ce:cd:4a:af:fb:5f:e1:31:74:49:e6:fc:39:a1:19:
                    75:a2:31:aa:3f:9f:6c:84:2e:96:86:d9:c9:4d:04:
                    01:b9:83:87:c5:9b:2e:16:56:fa:9d:24:a6:ec:f2:
                    42:df:ba:1c:3e:59:c0:b8:3d:e0:de:fc:fa:d1:e9:
                    e0:0d:80:37:62:06:67:bc:73:56:e7:51:0e:08:74:
                    e0:9b:e2:4e:66:d9:06:53:dd:fb:e1:8b:8b:0e:9e:
                    a6:9a:95:24:c3:76:bb:5d:09:81:fe:eb:d5:f1:a9:
                    be:37:38:73:f2:d7:26:28:4b:64:9e:9b:b7:5b:fd:
                    e1:a6:85:72:22:48:5f:ac:49:35:6a:1e:99:bd:c3:
                    36:58:3d:ba:e2:1d:03:96:c5:b6:ec:c1:15:c9:0a:
                    03:e7:8c:ce:94:ae:9e:c9:85:5e:12:40:85:4b:8b:
                    94:3e:b9:17:2f:34:f6:bf:77:c2:8e:68:01:52:87:
                    55:1f:ad:7c:72:ea:ff:e0:54:96:82:75:36:f2:db:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:98:E4:CE:4D:8D:3C:D9:46:E9:FE:60:E6:45:E8:EC:7C:18:32
            X509v3 Authority Key Identifier:
                keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9D50BCA4F64211EE9114A555C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.227.0/24
                IPv6:
                  2001:df1:18c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:e2:97:e6:06:a7:4a:3a:a8:06:67:e6:ed:d2:1c:d2:d1:
         7e:44:d6:b2:e8:87:77:57:8f:65:f3:33:ad:b3:8c:38:df:9d:
         1e:aa:34:d1:3c:23:15:e9:94:ae:79:14:49:f2:e7:4c:a5:d3:
         0c:ab:4b:3f:b1:01:f0:21:3d:bf:0c:82:65:1f:78:44:2f:f4:
         2b:eb:dc:e2:e6:47:b1:f2:f2:63:ce:0a:5b:aa:aa:42:5f:1d:
         b9:67:39:b7:66:04:26:e1:f4:8c:fe:6d:ed:e6:40:6d:95:5c:
         af:28:39:2b:79:23:d0:0c:29:eb:d9:dc:81:a5:c6:2c:93:3a:
         15:5c:89:b0:4b:a4:6e:a1:c5:57:a3:27:87:82:c8:47:e3:c5:
         fc:eb:d9:06:75:7c:ba:41:6f:96:87:2f:e1:85:9a:80:7c:81:
         79:9b:87:a4:6b:be:00:5f:ad:dd:51:fc:bd:9d:aa:18:93:6e:
         f2:37:d3:d9:85:b4:5d:03:ca:44:49:10:76:67:5c:e6:1e:12:
         f8:80:68:9a:8a:00:7a:39:45:6e:00:08:a7:31:ae:39:6b:84:
         2b:56:9f:90:76:1a:99:be:96:09:b4:87:ab:fd:69:18:f2:a8:
         e5:bc:e3:ab:d1:e1:ed:88:dd:d0:68:5b:93:f5:a9:93:a5:d6:
         6c:d9:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:15 2025 by rpki-client