Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/7E8F60B8477711F0B5973842C4F9AE02.roa
File:                     7E8F60B8477711F0B5973842C4F9AE02.roa (raw, json)
Hash identifier:          WQP1YAfMHPAVDDOkyjQEtv0lcVGgH8rf1IrCEtiCXz4=
Subject key identifier:   22:D2:D3:05:06:B4:2E:91:12:88:64:1A:FA:A6:15:AF:5F:54:71:E0
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       0163
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/7E8F60B8477711F0B5973842C4F9AE02.roa
Signing time:             Thu 12 Jun 2025 10:25:00 +0000
ROA not before:           Thu 12 Jun 2025 10:25:00 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.72.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Jun 12 10:25:00 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=684aaafc-0a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:b3:f4:92:4b:60:82:63:9a:3f:12:39:77:
                    2a:3d:16:8f:0e:6e:13:c5:d2:d7:56:9d:09:6c:e0:
                    ce:d9:93:cb:21:76:c6:7c:9a:c0:06:1e:f6:57:eb:
                    ab:18:d3:c9:ee:47:a7:c3:77:32:90:f5:98:a7:03:
                    0e:67:0a:ba:52:35:57:a8:94:7e:33:54:38:bf:9a:
                    3e:d9:30:92:a9:b6:3c:84:85:20:ef:5f:be:eb:75:
                    1d:28:ce:f2:a5:27:cb:34:a3:67:40:d0:44:22:03:
                    7b:cf:3c:e4:7d:07:26:ef:47:fc:95:8f:a0:51:48:
                    7f:54:f6:9c:d5:9e:0d:0d:b6:c3:cd:b1:37:63:b6:
                    4d:f6:24:78:d5:c6:26:7a:16:fe:e5:44:d7:16:63:
                    bf:78:36:00:c8:e5:85:68:20:e8:18:ee:80:05:8e:
                    b4:0a:d3:f3:50:57:52:e6:94:0c:e1:5a:24:5d:71:
                    a2:47:cf:66:ba:0e:6a:88:75:6e:78:d6:08:ea:5b:
                    d2:21:70:a8:5e:eb:88:62:ba:73:76:fb:2a:8e:bf:
                    df:30:5d:58:29:e3:ca:a1:78:dc:e9:46:88:08:c8:
                    94:76:75:41:90:66:80:2d:6a:16:c0:df:35:85:84:
                    68:3f:5e:57:48:0c:c9:25:0f:ea:4a:9b:db:19:93:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:D3:05:06:B4:2E:91:12:88:64:1A:FA:A6:15:AF:5F:54:71:E0
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/7E8F60B8477711F0B5973842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:08:9a:e9:e3:0d:58:e2:d4:ad:a7:23:28:3d:66:14:42:
         bd:99:bf:0b:14:e5:c7:d2:d9:a2:b2:a9:00:fa:36:84:46:9a:
         05:37:56:46:3c:2e:64:a9:a6:e5:df:b3:e1:79:d1:a3:85:7a:
         78:a5:60:cf:ec:32:0f:a1:95:88:99:a4:83:e7:a4:1b:c7:e3:
         5f:88:37:3f:e3:8a:cb:d4:b5:6d:31:2a:01:50:e7:a9:cf:5c:
         6e:9c:31:32:a0:b8:4d:5e:f5:b7:64:d6:0a:43:4b:fb:92:88:
         e4:56:db:9a:c9:c5:e2:91:58:d2:66:e6:d5:1f:f3:f2:9d:97:
         6b:52:64:5e:c1:6b:2b:89:9c:48:df:68:2c:6f:5f:c1:28:4d:
         d3:89:ff:dc:48:f3:87:77:8f:c6:04:44:34:0c:aa:b3:f9:99:
         b3:26:5d:35:cc:8f:f5:3b:c4:67:74:ce:c4:70:40:01:99:c0:
         b0:b6:8b:69:db:f8:3b:29:c5:96:c6:0d:a1:23:7e:03:18:8f:
         2a:e8:24:91:f6:35:35:cf:56:15:ea:00:f0:9a:5b:ff:26:b9:
         f2:7f:18:c6:b8:a7:02:ff:da:45:96:6f:aa:d4:b4:92:b8:88:
         ef:1f:84:86:31:d3:da:7d:9c:70:6b:de:cd:45:1d:94:66:a6:
         cf:62:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:26:30 2025 by rpki-client