Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/6A347A8E6E0711F0B4073D1DC4F9AE02.roa
File:                     6A347A8E6E0711F0B4073D1DC4F9AE02.roa (raw, json)
Hash identifier:          WLJSC8F2beVFwk5wQF2XhiW8o1W05YWVEl7Z6TS1RpI=
Subject key identifier:   1A:24:88:A2:E4:B6:B2:F0:62:89:D0:5F:1D:10:BB:F0:B6:F9:63:7C
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       02F8
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/6A347A8E6E0711F0B4073D1DC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 12:10:57 +0000
ROA not before:           Thu 31 Jul 2025 12:10:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151330
IP address blocks:        103.190.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Jul 31 12:10:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688b5d51-154f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:b7:b8:48:07:15:f9:9d:56:aa:f6:d5:40:
                    5d:b8:34:f0:61:52:be:14:4d:c9:fb:e4:e9:a1:69:
                    e1:8c:05:b1:51:01:59:9c:0d:02:e0:2e:be:c9:48:
                    27:5d:12:6e:d4:b4:dc:60:92:50:1e:d6:5a:cb:da:
                    60:30:71:d1:36:13:58:c1:ce:9b:0d:ff:b8:c3:89:
                    ac:48:0d:9c:eb:60:8d:d2:5e:4c:10:03:ee:b4:2c:
                    62:da:f4:98:f9:31:1e:a1:ea:94:e8:c9:f6:a4:46:
                    71:b7:65:ff:47:98:b7:cd:53:63:10:f8:e2:45:01:
                    a5:91:eb:76:01:b0:3f:a1:88:93:57:45:fc:7f:35:
                    1e:a4:81:1f:3e:db:8f:b7:62:2b:4e:a4:a3:36:e7:
                    9a:65:15:bb:0e:6b:5f:39:78:99:1c:9b:4e:cd:0c:
                    d0:21:ed:a9:5e:cb:a3:93:e7:64:78:46:fa:fc:40:
                    36:10:45:73:cd:3a:d9:45:60:d1:22:ab:80:1c:47:
                    4d:2f:f9:25:49:f0:8b:4e:52:83:c2:3a:12:da:cf:
                    48:99:86:8f:de:96:71:e4:ec:5e:54:14:b4:67:0f:
                    5a:b0:5f:69:31:8c:75:6c:7c:8d:23:69:84:9e:c4:
                    a5:d2:0a:cd:4e:74:37:7e:f8:5c:e5:29:45:c7:b0:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:88:A2:E4:B6:B2:F0:62:89:D0:5F:1D:10:BB:F0:B6:F9:63:7C
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/6A347A8E6E0711F0B4073D1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:a8:ea:e8:9b:f6:ac:87:50:cd:fb:6f:db:1f:3d:c9:75:
         f9:8b:e9:aa:e5:d0:96:e9:d4:0c:3f:dc:7d:29:93:e6:6b:b3:
         6a:ef:b4:a5:dd:f7:ab:2f:2b:58:f1:9a:d6:fa:8d:61:87:c2:
         6b:ee:e1:f9:2b:82:ee:c7:7b:ea:0c:f1:29:94:2c:16:83:b1:
         53:f6:a7:c8:47:7f:f2:54:4a:78:2d:68:78:3a:12:29:b6:cf:
         7d:47:ea:66:9c:a1:32:03:0b:17:19:9f:61:b2:7e:b0:ad:d5:
         9a:57:15:2f:49:dd:1c:45:d0:6e:d6:93:a4:a7:8e:2a:15:01:
         c7:ba:c8:a1:37:1d:5c:30:d3:74:d3:71:90:f9:a4:f2:a3:9d:
         cc:f3:47:51:92:4f:d3:e7:da:92:a3:c1:fd:c6:58:ed:e7:6b:
         32:03:35:40:69:f1:a1:78:c4:76:02:33:c9:d7:7f:fc:29:7d:
         5b:20:80:e8:9a:57:6e:1a:e3:cc:49:4c:dd:14:47:14:96:d4:
         51:93:0a:7f:b7:67:2d:d8:b4:d4:8b:7e:15:de:da:c7:11:26:
         7c:70:79:e4:22:e3:f9:84:a7:2e:2f:57:30:c0:9f:74:90:a6:
         24:bc:00:ba:e1:20:13:ce:da:a1:c2:99:1f:13:0c:c6:18:28:
         ed:97:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:56:43 2025 by rpki-client