Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
File:                     47660D4A488F11EFB89B763FC4F9AE02.roa (raw, json)
Hash identifier:          +k9EGS/XXToU4zgNc3Ty0ZI6VeEVfnDw4hKXtwkqkok=
Subject key identifier:   0C:D5:BA:BE:B7:39:99:41:1D:86:40:70:70:01:F4:AE:02:E5:50:B5
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       050B
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 00:33:35 +0000
ROA not before:           Tue 03 Jun 2025 00:33:35 +0000
ROA not after:            Wed 01 Oct 2025 00:00:00 +0000
asID:                     138521
IP address blocks:        103.127.162.0/23 maxlen: 24
                          2404:2440::/32 maxlen: 32
                          2404:2440:a0a0::/48 maxlen: 48
                          2404:2440:abcd::/48 maxlen: 48
                          2404:2440:b0b0::/48 maxlen: 48
                          2404:2440:beef::/48 maxlen: 48
                          2404:2440:c0c0::/48 maxlen: 48
                          2404:2440:cafe::/48 maxlen: 48
                          2404:2440:d0d0::/48 maxlen: 48
                          2404:2440:dada::/48 maxlen: 48
                          2404:2440:e0e0::/48 maxlen: 48
                          2404:2440:eeee::/48 maxlen: 48
                          2404:2440:f0f0::/48 maxlen: 48
                          2404:2440:face::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Jun  3 00:33:35 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=683e42df-20c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:f2:c8:65:a0:bf:48:4f:7e:f1:7f:e6:f2:
                    7f:e9:67:e2:8a:e3:49:19:36:c6:c5:06:6e:cc:3a:
                    91:60:34:3c:fb:41:78:cd:dd:9e:61:42:b6:81:4e:
                    3f:51:bc:a5:c7:a5:2e:18:0c:67:92:ae:25:ca:b4:
                    af:fb:c1:0a:74:4b:43:09:fb:7a:c9:07:0b:61:59:
                    59:f8:2e:03:9b:11:e7:6e:76:7e:4d:d6:16:1b:76:
                    31:13:1d:c2:5b:11:e7:7d:b8:38:74:8a:0c:e0:b5:
                    ec:e0:f6:03:b7:e0:94:f7:f9:b2:46:a0:f3:8c:c9:
                    e3:e4:54:ec:f3:69:8f:d4:44:72:66:52:08:67:21:
                    b6:6a:e5:1a:5b:ad:99:44:99:cf:a2:ca:55:3a:46:
                    2c:ba:b2:47:ce:09:5b:c0:7e:1a:e7:7c:d4:e9:64:
                    5b:08:0c:e5:db:37:ab:ea:87:65:f5:2f:1a:ad:f0:
                    b2:7d:05:b6:dc:5c:84:11:08:43:95:ea:84:9e:c2:
                    cd:57:d8:31:94:71:48:68:28:79:67:02:39:4f:f3:
                    e3:55:6d:3a:06:87:9c:2c:89:33:71:79:0d:65:91:
                    87:30:df:97:70:10:6f:4b:e1:e5:f4:22:83:1d:0b:
                    4c:86:96:e3:fa:d1:b5:eb:00:47:92:8a:9e:6f:b8:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:BA:BE:B7:39:99:41:1D:86:40:70:70:01:F4:AE:02:E5:50:B5
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.162.0/23
                IPv6:
                  2404:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:ed:7d:0f:35:69:99:3d:3a:c2:d8:27:05:d3:44:8b:e9:
         06:cc:b6:ee:4d:9d:35:e9:cd:98:e3:fc:a3:5d:ab:7a:c8:b7:
         c9:c2:38:57:c1:52:26:cc:15:c6:8b:79:a6:31:bd:07:78:a1:
         73:b5:20:1d:c5:06:12:8a:e5:32:5b:16:28:0c:89:e2:46:9d:
         d4:3a:d5:ba:e2:de:fd:2b:42:58:93:ca:95:8e:2b:1d:13:c0:
         c6:55:27:0e:5f:de:e3:77:a3:96:b9:d3:40:79:28:26:eb:b6:
         b8:2d:2a:5a:85:d1:3d:10:f6:ab:8e:bb:0e:f5:70:dc:22:ae:
         5c:ea:f4:0c:1f:ed:da:d7:e5:3b:c1:42:07:e3:fb:d3:c8:bd:
         e8:36:cd:bc:c6:2e:1b:69:08:3d:82:f8:0d:4c:5d:6a:fb:9f:
         10:47:e1:ee:19:79:15:3f:9e:69:47:56:1d:a8:6f:a4:58:63:
         9d:f5:59:6d:cb:17:84:10:2f:98:9b:4f:29:10:dc:80:7d:a8:
         e6:64:aa:3d:35:21:51:97:93:3f:dd:5f:3c:78:bd:dc:12:fd:
         65:bc:5a:b1:11:4d:cb:42:0a:94:fa:5d:e5:a5:7d:3d:73:ee:
         4d:d1:cd:83:fb:7c:f4:09:96:97:37:5b:45:8f:d6:eb:d5:37:
         21:19:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:23 2025 by rpki-client