Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
File:                     4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (raw, json)
Hash identifier:          H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=
Subject key identifier:   D0:A1:30:98:46:FE:35:E9:8B:DF:36:6A:E6:0B:0A:27:64:35:91:41
Certificate issuer:       /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Certificate serial:       05EF
Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
Signing time:             Thu 22 May 2025 23:13:22 +0000
ROA not before:           Thu 22 May 2025 23:13:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10122
IP address blocks:        103.166.232.0/24 maxlen: 24
                          103.166.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl
                          rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 22:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
        Validity
            Not Before: May 22 23:13:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682faf92-41f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:da:54:7a:68:2d:d1:66:ff:54:27:f0:24:
                    02:20:25:37:0e:02:5a:63:a3:b2:09:4a:d2:93:07:
                    0a:58:17:73:87:00:09:db:27:7a:97:50:ae:04:e4:
                    ab:1e:09:a8:a4:96:22:cd:79:9c:91:76:4f:0a:be:
                    43:db:d0:6d:30:48:a5:11:4e:46:8b:55:aa:7e:ac:
                    bf:23:99:41:c2:d3:47:26:7e:9d:fb:95:b7:9d:5a:
                    f3:e8:5c:94:d5:a0:7a:e3:0d:6c:22:e4:65:62:fd:
                    15:32:9b:87:06:6d:cb:9a:42:1f:14:5b:3a:98:f5:
                    1a:f6:7c:72:91:54:da:6e:7d:9c:88:b4:3f:4a:04:
                    2f:ff:5c:51:48:e2:b5:6b:c0:88:b1:6e:75:c0:bb:
                    08:a7:87:94:f9:59:5a:8a:99:79:d4:bd:0e:e3:18:
                    5e:8f:90:cf:c1:bd:3f:f6:ba:2f:38:9e:38:f0:50:
                    42:c4:97:50:31:8d:e1:6d:2f:26:90:a1:20:cf:37:
                    07:e9:bd:ce:fd:2a:0f:b2:83:b7:9a:37:8c:a5:d5:
                    dc:da:99:c7:d1:09:e3:60:f5:48:79:a4:4b:05:f0:
                    5b:73:58:c8:95:3c:ad:f1:d2:e6:95:d9:04:09:58:
                    c3:7c:c2:0e:1d:c5:56:cf:04:5f:8a:48:1e:4a:43:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:30:98:46:FE:35:E9:8B:DF:36:6A:E6:0B:0A:27:64:35:91:41
            X509v3 Authority Key Identifier:
                keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:af:62:e0:32:7f:49:37:2a:e1:ff:fc:ea:b1:36:99:0e:7f:
         10:f3:d8:bd:80:0d:91:04:d8:2f:c8:a3:48:3b:f5:50:75:9d:
         94:9a:33:ce:50:ee:93:0a:ca:ba:70:83:2c:2a:fd:ac:54:aa:
         b9:0c:31:8d:2d:e3:39:89:81:21:b2:d7:7a:1f:12:86:26:05:
         e1:91:7b:44:d9:7c:23:9c:03:fb:e3:e4:e2:c4:b0:0e:20:c6:
         80:85:f2:00:7e:37:d1:04:f4:77:86:51:ea:b6:05:53:d1:ef:
         36:64:24:43:8e:be:68:8a:db:c9:7a:ec:46:be:d6:30:6f:af:
         1b:ac:5d:2c:df:36:f9:a3:dc:ba:22:82:0b:f2:ce:a2:13:e2:
         9c:bf:a8:5a:40:2f:14:d9:06:d6:7e:4e:eb:ac:06:e1:8f:35:
         f1:13:64:5a:56:07:b0:40:74:35:85:c4:97:4c:d1:ab:cf:2e:
         09:6d:68:69:d8:6a:6c:0f:05:4a:6b:d6:12:64:0c:dd:53:76:
         de:34:9c:c1:e8:a3:e2:39:b3:ab:3c:3c:8a:51:09:05:29:b2:
         df:5b:57:c6:c3:61:5c:c4:6b:53:24:5a:c6:75:26:69:da:d9:
         20:2f:d7:fd:49:c8:f4:54:78:b9:c3:ed:a5:d4:36:1d:60:9a:
         45:de:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:01:56 2025 by rpki-client