Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
File:                     09513072DE3B11EC9F25BA5FC4F9AE02.roa (raw, json)
Hash identifier:          WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=
Subject key identifier:   DF:AF:9E:A7:BD:C2:21:43:91:96:86:30:60:1C:06:49:49:00:BB:E5
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       02E4
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
Signing time:             Wed 23 Apr 2025 01:27:07 +0000
ROA not before:           Wed 23 Apr 2025 01:27:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137537
IP address blocks:        103.112.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Apr 23 01:27:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680841eb-bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:43:c6:91:67:9b:71:70:ad:1f:52:9a:19:
                    a9:c0:d6:94:12:30:cd:c9:3d:15:d9:3c:93:99:4e:
                    4d:9d:9b:59:b6:6e:41:5a:8b:a4:b9:5c:6c:a4:13:
                    3b:e6:c1:f5:66:61:13:bb:c3:97:e9:b2:98:69:7a:
                    8a:65:a7:05:c8:65:dd:60:b0:07:d8:45:e7:9b:09:
                    c7:2b:26:b8:5a:49:44:6b:15:8c:87:a2:57:87:d4:
                    27:df:54:d3:ee:8b:ff:85:a6:49:b3:4d:cd:7f:b8:
                    fb:f1:8c:cc:47:81:7a:25:f0:cc:02:8c:e6:51:59:
                    e3:95:50:81:a4:b4:90:97:e5:d6:fa:ba:3b:16:b3:
                    e6:94:a0:7d:c2:a9:5d:c0:4e:37:ce:d2:f7:2b:0c:
                    5f:35:91:3a:00:b5:69:6d:d0:b8:9d:b0:c0:9e:6d:
                    81:5c:dc:3f:33:a6:15:99:9f:39:13:0f:7e:c1:75:
                    5e:07:a1:b2:29:e6:b3:dd:12:dd:3f:74:ff:5f:c5:
                    eb:d0:39:56:d3:07:c1:f7:ef:f8:71:a3:b9:02:77:
                    37:0c:68:0e:98:bf:6b:3b:1b:d5:f7:1f:3f:f6:b0:
                    c7:52:2d:ed:ee:58:b0:2f:32:a7:e8:aa:4f:1e:01:
                    e8:b2:84:82:5a:aa:e0:68:02:c1:41:f2:29:c7:87:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:9E:A7:BD:C2:21:43:91:96:86:30:60:1C:06:49:49:00:BB:E5
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/09513072DE3B11EC9F25BA5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:a0:18:f6:dc:b0:31:5c:f7:60:00:d0:c4:66:5b:7b:cf:
         10:98:84:5d:8c:ff:f8:b0:3b:78:78:b5:73:f9:78:fa:bf:e3:
         b6:35:ef:09:36:d5:05:ed:99:dd:d2:f6:b8:55:e3:b2:9b:6d:
         19:30:b0:a8:48:45:b4:fa:90:9b:e7:04:67:ba:58:43:e7:52:
         a2:c3:7a:d2:bf:f2:21:4f:27:ec:86:59:ba:5a:30:68:09:3d:
         d3:40:87:ae:bd:66:f0:6c:df:a2:83:bb:4a:13:2c:10:6b:d4:
         8e:c8:25:31:50:54:3f:32:29:4b:92:79:66:cc:00:26:0a:2b:
         06:70:c3:9a:13:03:8c:b1:2f:d1:22:a3:02:ce:eb:89:b5:a8:
         e4:7f:32:d1:a7:b6:95:d1:f3:c0:fa:93:16:70:70:af:9d:8c:
         19:04:cb:49:77:35:76:1c:2b:5e:b7:cb:2c:f1:4d:96:9f:0f:
         d0:60:13:07:0d:10:1a:49:98:41:17:d7:a6:a8:7e:bb:d3:8c:
         2b:c7:c3:a9:7a:50:53:67:33:d2:a4:b5:68:cd:e8:f9:81:a3:
         d8:17:ab:ce:96:a6:19:b6:42:95:e2:0a:b6:ad:3a:dd:ef:bc:
         9e:a0:ac:bd:72:50:7f:78:4a:bf:eb:60:0f:f1:da:e8:3f:6f:
         40:08:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:03:42 2025 by rpki-client