Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/0863E3F642DA11F0AAB03C37C4F9AE02.roa
File:                     0863E3F642DA11F0AAB03C37C4F9AE02.roa (raw, json)
Hash identifier:          Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=
Subject key identifier:   E1:E9:DD:C7:D3:09:D8:8D:35:29:01:0B:4A:E5:92:C6:C9:C4:58:D1
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0205
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/0863E3F642DA11F0AAB03C37C4F9AE02.roa
Signing time:             Fri 06 Jun 2025 13:27:46 +0000
ROA not before:           Fri 06 Jun 2025 13:27:46 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.86.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Jun  6 13:27:46 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6842ecd2-10f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:3e:95:45:b9:f2:3d:3e:06:a2:4e:cb:5e:
                    7f:5b:e9:75:eb:46:f7:65:94:68:79:9b:29:07:89:
                    5b:92:6c:f4:bc:1f:1e:7e:78:a2:44:e4:67:18:f5:
                    a2:4d:5b:d6:fe:62:00:e2:fa:c9:96:07:eb:f8:85:
                    47:62:85:30:e6:6e:10:a9:3d:6f:c4:c7:92:a5:80:
                    c7:9f:b3:ee:dc:be:b7:f8:f0:16:d9:2f:36:f2:4a:
                    ee:ee:13:5a:85:9a:3f:e6:e4:e0:56:49:84:eb:91:
                    c0:4b:93:36:53:dd:90:e1:b8:b9:83:34:c7:80:47:
                    f2:0b:87:45:31:e6:f1:ef:dc:45:85:6d:f8:d6:72:
                    e9:ac:4e:58:8a:87:58:b0:c4:6b:15:2e:d0:95:c9:
                    fc:cb:e6:b6:bd:92:51:b9:8f:fa:d5:30:ba:0d:7b:
                    4a:02:f7:7a:ac:17:34:81:ad:a2:19:c2:ad:b3:d4:
                    94:08:59:62:9e:c4:97:e0:9f:73:fd:97:6e:5d:44:
                    78:79:67:73:ac:f1:db:99:e3:ed:de:dd:dc:7d:50:
                    89:a6:72:c7:eb:db:f6:d9:27:05:6e:d9:79:50:bf:
                    0e:58:12:d6:9f:e5:cb:6c:ef:1d:d1:8b:12:1a:82:
                    52:bd:79:44:7b:3d:0f:84:ae:66:6b:c6:ad:1b:fc:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:DD:C7:D3:09:D8:8D:35:29:01:0B:4A:E5:92:C6:C9:C4:58:D1
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/0863E3F642DA11F0AAB03C37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:dd:49:c0:db:bb:74:7a:ee:ac:34:e4:98:42:18:dd:83:
         a7:c5:75:b3:cf:0b:7f:b4:a4:ac:23:f2:7e:69:5d:08:7e:cd:
         4f:ae:2e:ac:4c:f3:5d:42:52:a4:53:01:bb:98:2e:31:5c:04:
         6e:9e:1f:d7:f6:98:02:db:3c:02:45:95:58:88:2b:e7:a2:2d:
         47:8d:06:c9:38:d6:1c:a0:8c:ad:80:9c:0f:ac:77:69:7c:2c:
         18:86:53:d8:3c:36:f3:34:6d:a3:05:05:73:9d:18:49:74:b9:
         02:5b:19:fb:22:41:a3:7d:4e:70:26:23:53:e8:74:3c:24:75:
         ca:1f:e6:58:35:59:59:07:fe:4b:70:74:51:25:55:ac:64:02:
         18:9d:fe:11:a1:f9:4b:7b:49:a8:01:87:8f:bb:79:8f:01:e4:
         56:5d:58:35:8f:80:94:6e:72:09:70:6e:83:e2:7c:3c:6a:9e:
         cd:ec:82:00:07:57:74:49:6d:a5:c2:96:f8:f4:ea:0c:ff:bb:
         66:70:11:e6:33:f0:f8:bc:5d:79:d2:f4:f5:98:3f:d1:a0:1b:
         14:b0:84:7c:2a:0b:27:bd:47:d0:cc:ac:b5:b6:89:5b:33:83:
         53:3d:0f:97:99:5e:32:43:58:62:c8:7a:93:8e:a4:e9:d3:b8:
         51:41:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:47:47 2025 by rpki-client