Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
File:                     DB0C41022A0611EE95A2F00DC4F9AE02.roa (raw, json)
Hash identifier:          EJtO7SCnq7WD6CVqUE1wDTBTGe53mImtDfushaYOSys=
Subject key identifier:   A4:CD:E2:A0:FE:C3:B6:79:42:9A:F0:ED:49:A1:69:11:82:57:DF:34
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       0161
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:51:59 +0000
ROA not before:           Thu 05 Jun 2025 03:51:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151207
IP address blocks:        103.107.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: Jun  5 03:51:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6841145f-3504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:e0:ce:f1:9d:31:db:1a:9b:ab:19:31:02:
                    55:9f:0c:f0:82:a5:7e:5e:3e:44:ea:a8:21:16:a3:
                    7d:f5:9a:23:e5:58:7a:b4:85:62:f8:bf:9d:b4:0d:
                    5a:9e:16:a5:48:64:6a:72:1d:d8:21:df:5e:40:90:
                    ea:4d:d6:09:4c:47:21:8d:89:3c:0e:9d:9b:12:89:
                    80:c0:f0:6d:1d:88:6f:d4:ad:2a:d4:c5:3d:e2:14:
                    f7:57:b2:15:94:26:e2:9e:e6:23:f3:bf:5e:66:bb:
                    28:2c:69:8a:4e:7e:d1:56:4e:1f:d4:a3:fd:30:1d:
                    3a:e8:4f:e0:2a:cd:a2:19:61:d6:b1:d3:41:a1:1a:
                    45:3b:93:03:f9:97:d7:d9:f6:ed:db:ba:f4:b3:24:
                    ac:f0:d7:d7:04:d3:7b:c7:90:c8:ec:ed:69:c4:a0:
                    85:78:f1:f8:75:79:30:bf:41:7f:47:a9:11:af:c0:
                    60:78:f5:40:a9:4f:8e:fc:3f:80:91:a6:6f:bd:ae:
                    c5:0a:15:1d:69:8b:a3:b3:10:fa:84:ed:4f:f0:1c:
                    71:fc:88:1d:13:9c:17:1e:fa:36:48:3f:e9:6a:16:
                    3e:d9:13:c0:84:e4:d0:d0:83:f6:76:ec:45:b2:b5:
                    2c:01:e8:7c:e3:d1:6b:ab:58:72:56:a0:e4:0c:65:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:E2:A0:FE:C3:B6:79:42:9A:F0:ED:49:A1:69:11:82:57:DF:34
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/DB0C41022A0611EE95A2F00DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:0b:34:07:f7:f6:10:7a:e0:40:ec:a0:ec:0a:04:11:23:
         0c:e5:c9:72:16:5d:1f:cc:cf:00:a9:2d:0e:7d:a1:a4:6e:38:
         6b:c5:01:d6:98:5e:da:11:9d:3d:3f:e9:ad:28:33:6f:63:76:
         12:12:59:61:b4:c6:07:31:db:ae:a8:49:d6:07:d3:d2:5a:20:
         f3:8d:cd:e5:5b:fe:ef:a3:08:52:52:ea:d6:fa:be:d0:25:bc:
         6d:c4:3b:4e:1f:93:bf:f1:a4:d2:df:28:c9:d0:bd:1c:e8:c2:
         f5:87:d7:e8:92:96:2b:21:83:83:25:ea:56:aa:cb:91:05:52:
         f8:60:a8:92:dd:e2:e8:2a:f5:b2:e6:77:1b:00:6d:71:2f:c8:
         53:e3:66:38:bd:80:74:79:84:68:82:0f:7f:95:36:af:e2:79:
         db:47:d3:5e:ff:9a:fd:92:d5:f9:59:06:db:4f:de:d1:a4:64:
         96:3c:bb:01:88:ca:8a:c5:db:0e:4e:37:9c:fb:85:f1:7f:1e:
         14:95:2b:0b:d1:f9:84:15:4c:74:ce:e1:15:c2:f4:c2:80:7c:
         f4:c7:29:a2:04:92:c7:65:cd:14:a8:82:05:f6:b0:9f:fe:72:
         90:ec:29:69:26:06:18:3a:87:8d:d8:78:c1:64:64:57:73:b0:
         11:2b:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:34 2025 by rpki-client