Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/47B1CB6E460D11F091179886C4F9AE02.roa
File:                     47B1CB6E460D11F091179886C4F9AE02.roa (raw, json)
Hash identifier:          UJrloLrvsoge3wfmese2Zva7x1vRvjjKxNvEsNCfNYE=
Subject key identifier:   96:B7:E1:CA:AE:2B:89:40:7D:37:BC:45:02:43:63:81:CB:0B:DE:C4
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       050D
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/47B1CB6E460D11F091179886C4F9AE02.roa
Signing time:             Tue 10 Jun 2025 15:12:10 +0000
ROA not before:           Tue 10 Jun 2025 15:12:10 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4788
IP address blocks:        103.168.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 23:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Jun 10 15:12:10 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68484b4a-6080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:b0:f4:18:81:32:bd:1d:5b:a1:21:72:2e:
                    ff:ca:f9:f2:a8:85:15:56:6d:2e:07:a5:27:96:c4:
                    c1:31:16:c0:9e:16:ce:29:cd:c1:b8:33:5e:ee:ea:
                    f9:3b:a8:1c:4c:3e:28:26:2f:1c:2a:87:b7:31:0a:
                    18:48:8d:ec:b0:c8:3b:06:0c:4f:7a:55:00:b0:0e:
                    b2:d1:b3:9a:09:a3:50:a1:da:98:86:c4:b8:5c:bf:
                    b1:e4:4c:9d:61:2a:12:ef:ae:bc:cd:a9:85:82:9d:
                    13:8b:1c:bd:a7:2d:64:e6:8e:f6:04:c9:ea:70:33:
                    cf:98:d8:2b:84:ed:45:bc:29:12:b1:eb:d0:c2:01:
                    a3:ca:4b:9f:e9:c8:71:d5:c2:2d:a2:5d:12:85:2d:
                    ad:ff:63:41:a7:69:53:36:2c:d6:08:6c:fc:e4:bb:
                    36:1a:22:c2:8f:d2:4e:a1:cf:12:0b:b3:20:d5:ef:
                    8b:41:3e:a3:65:2f:44:80:a6:3c:16:14:72:91:bc:
                    36:4e:81:c7:96:37:e3:b8:ed:1d:6c:aa:06:34:59:
                    2d:d0:71:65:6f:76:63:61:e0:07:da:7e:f2:52:d8:
                    53:05:1f:18:41:a5:94:a5:dc:ad:65:e2:b5:b6:a8:
                    88:53:fd:cf:77:bf:5f:25:e6:b1:5d:84:f8:f7:d0:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:E1:CA:AE:2B:89:40:7D:37:BC:45:02:43:63:81:CB:0B:DE:C4
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/47B1CB6E460D11F091179886C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:60:83:d3:d2:09:0b:58:30:2a:05:ff:f3:a7:7f:f7:06:e6:
         9e:0a:b0:82:c0:cc:54:e4:2c:f6:70:f2:bb:65:b9:c4:01:30:
         cb:8b:2f:35:37:94:a3:e9:32:7f:b5:81:9f:6d:2a:68:7f:48:
         0c:0b:e5:2e:1d:f7:a0:94:e8:d3:11:90:98:15:df:7b:70:0d:
         8a:ef:82:4e:18:83:22:be:3e:81:1b:d7:98:3f:03:37:57:69:
         e3:d4:a7:6b:a4:a7:ee:60:3d:79:f6:4b:23:0e:29:5b:6f:bd:
         b8:ae:4d:d8:96:13:32:21:f4:51:2b:19:05:1e:ce:5d:21:79:
         1c:ac:00:8b:83:88:5f:ab:ba:c2:9f:bb:c9:f9:c3:69:1d:44:
         c9:99:25:18:85:40:08:e1:ac:ae:34:4e:33:92:69:21:b7:0b:
         cb:7c:bc:bf:d9:dd:8a:34:f4:45:99:86:3c:fd:f7:a8:8e:08:
         b2:fa:13:c5:71:ca:53:1e:2b:63:75:2a:25:43:36:9e:c7:9a:
         30:38:32:de:57:88:0c:e5:eb:75:02:e6:64:83:29:1f:c9:12:
         ae:12:19:e8:49:e9:fd:48:71:1c:d3:f7:76:52:e7:7c:d3:97:
         63:92:0d:d3:69:a1:bb:88:a4:9e:f9:b6:d8:52:24:59:61:24:
         01:41:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:04 2025 by rpki-client