Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
File:                     6F4F0F4230AA11F0AD39210DC4F9AE02.roa (raw, json)
Hash identifier:          +d1sU0yUiz73D5euMUQlwAefx/2UEcW1zqA4TD64tDI=
Subject key identifier:   E7:8D:47:D7:DC:CD:F6:6F:15:6E:7E:0E:FE:2E:64:B2:6C:58:2C:CD
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       019C
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
Signing time:             Fri 13 Jun 2025 03:13:55 +0000
ROA not before:           Fri 13 Jun 2025 03:13:55 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     214143
IP address blocks:        103.120.12.0/24 maxlen: 24
                          103.120.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 03:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Jun 13 03:13:55 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=684b9773-28cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:e3:77:87:46:ea:cc:fd:85:76:43:7b:0c:
                    0b:d5:9c:c6:3e:29:e2:03:a3:d7:67:cf:57:49:05:
                    15:39:a9:ef:7f:10:d3:53:21:4d:86:6c:e6:72:cc:
                    39:6c:f2:60:a8:87:df:ab:66:3e:5e:bd:67:70:6b:
                    7f:22:a4:97:c9:7a:20:e6:e0:0a:66:f5:8e:d0:68:
                    d2:75:7e:a0:61:ba:61:38:b8:ac:b0:92:f2:f3:bd:
                    f3:90:06:a7:5a:fe:81:2b:f3:3b:4d:9a:7c:e3:83:
                    39:cd:7b:2e:84:72:e8:9c:c0:5e:e5:a9:12:de:28:
                    64:3f:4e:df:bc:54:70:ed:36:11:27:c2:4e:2d:63:
                    5e:f8:5e:25:0c:9f:4b:8a:a3:ed:ae:16:7a:e1:d9:
                    67:0f:36:18:0e:61:c0:0a:1e:91:8f:b0:1b:e1:fd:
                    d7:d8:c4:a9:95:05:84:5f:6a:ce:55:6d:38:cc:e5:
                    9e:e5:7e:b2:72:00:bb:d7:0e:89:1a:c8:e1:91:4a:
                    c8:d1:0b:3e:bf:18:15:05:30:6d:b7:b5:32:ff:39:
                    ee:ec:0c:4c:70:59:e0:17:41:35:19:d1:5d:91:57:
                    61:af:26:ee:db:eb:5c:a6:d8:37:2d:aa:37:46:aa:
                    fd:32:65:0f:b2:c0:09:ba:45:dd:5f:a8:c9:27:f4:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:47:D7:DC:CD:F6:6F:15:6E:7E:0E:FE:2E:64:B2:6C:58:2C:CD
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/6F4F0F4230AA11F0AD39210DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.12.0/24
                  103.120.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:48:f3:f5:1c:0c:72:75:d2:04:38:4c:f7:32:01:4e:eb:fa:
         1d:9f:fa:3e:d3:75:2a:9b:88:7b:3d:9a:09:f2:e1:02:9b:8c:
         3c:2c:aa:6f:6e:74:e6:ef:c6:b4:fd:35:3d:7c:0e:86:25:0b:
         33:b4:79:40:d7:06:83:af:a7:8f:79:a2:4b:a0:30:0a:31:29:
         7e:55:b9:66:a5:25:55:48:c9:2e:f9:99:16:fe:d0:69:2f:25:
         1d:83:8d:03:05:3c:13:9e:9e:32:12:0d:ef:ce:0f:1a:43:91:
         50:ea:9c:57:84:56:71:e0:cf:18:ae:4f:5c:46:c2:af:07:d2:
         11:ab:1d:a3:27:c0:1a:5b:ff:bb:d0:1b:d9:e7:7c:f5:5b:17:
         c0:46:c0:58:31:48:d9:2a:15:36:0c:0b:0b:72:6c:45:b0:48:
         d3:5f:a3:3e:49:ed:f4:62:9e:3b:1e:97:e4:fa:76:4e:52:ed:
         22:40:10:22:83:6b:ac:33:99:ac:8e:15:6f:7f:56:c4:b7:11:
         bc:9d:52:20:2b:77:e7:4f:eb:54:70:9e:47:48:69:19:7e:c9:
         80:fb:83:96:49:4e:ac:8a:c8:54:8c:26:54:d8:9d:5b:0b:9c:
         8b:86:8c:d5:10:1b:a8:ec:89:01:95:b1:7a:d7:e8:8d:e8:24:
         ba:e2:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:40:37 2025 by rpki-client