Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
File:                     2540A3D24C9F11F0B3E79877C4F9AE02.roa (raw, json)
Hash identifier:          6T54i51OGw9J/SGlpB680rrKuAdgx9J1NeMWxwYBKWc=
Subject key identifier:   F6:7A:80:65:BE:37:F0:B1:BC:A5:66:AC:51:36:F8:5C:6E:F8:9A:FA
Certificate issuer:       /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial:       069D
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 23:04:58 +0000
ROA not before:           Sat 02 Aug 2025 23:04:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138970
IP address blocks:        103.137.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
        Validity
            Not Before: Aug  2 23:04:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=688e999a-1836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:ad:f4:46:9e:e4:38:f6:fb:23:2f:03:a5:
                    7b:02:21:9f:f8:70:15:77:77:62:59:7a:4d:1c:1f:
                    c4:bc:ea:ef:bc:55:fc:73:68:da:fc:40:bd:ee:be:
                    06:60:a9:d0:1c:96:91:ec:ed:1f:cc:43:ed:f9:33:
                    57:e3:be:cf:b1:8d:f8:ba:dc:35:e7:07:33:e5:29:
                    96:a0:74:5d:d6:96:46:86:04:5e:5e:b9:a4:99:68:
                    2a:3c:e5:88:ac:d0:1a:0c:c7:cd:a9:85:6d:98:fd:
                    c6:c4:4c:93:d4:47:d7:18:82:75:be:25:21:e3:bd:
                    dd:ac:c5:e0:84:a3:04:f0:c8:4b:1d:8a:85:82:b9:
                    e4:ed:bd:9c:97:3b:0f:52:cd:76:53:ad:b7:92:37:
                    e9:f6:ab:74:e2:6e:ee:f1:bd:54:82:61:29:a8:c9:
                    73:86:d7:57:bd:72:b9:13:a3:c3:10:fe:1e:fe:c0:
                    a5:4a:86:d3:92:4e:ca:c1:f6:b0:a8:cc:2d:cc:6f:
                    dd:a9:a2:f0:b6:61:e8:a0:67:6c:d5:c4:4b:ef:c2:
                    85:8c:60:f7:79:f1:27:e6:3e:7f:22:35:b3:39:31:
                    d7:93:61:72:10:ee:10:8e:aa:13:e5:99:04:2e:60:
                    60:22:f1:bc:bc:40:a6:8d:5a:a2:59:2f:7c:a7:ad:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7A:80:65:BE:37:F0:B1:BC:A5:66:AC:51:36:F8:5C:6E:F8:9A:FA
            X509v3 Authority Key Identifier:
                keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:50:2c:3b:28:80:0d:65:ca:6e:53:dc:bd:f3:b2:ef:09:84:
         92:1e:ec:cd:0e:a9:3f:4c:f4:35:0b:19:15:60:61:cf:54:ac:
         30:e1:bb:3b:a7:52:74:d4:67:f5:d3:c8:16:a0:68:80:3f:83:
         a0:22:11:8f:0e:0d:1c:97:00:d2:05:06:25:5d:c8:d5:0a:d6:
         f8:ec:be:dc:48:d2:21:34:0a:d2:70:c0:9d:eb:a1:7f:80:2c:
         28:63:f2:2e:24:61:c0:15:fb:65:87:c7:cd:45:f8:96:84:cd:
         82:93:2e:35:cf:fb:dd:47:67:38:97:4a:9f:12:a2:65:18:ff:
         4b:18:d8:44:d6:13:d8:d5:5d:5b:15:3e:a0:c2:df:12:81:b2:
         56:28:e0:0e:4a:0d:1c:24:d1:cd:3d:ca:c1:99:c8:d5:81:e6:
         96:71:5b:18:eb:73:67:f5:8e:cf:16:fd:ca:e0:e8:b1:56:bb:
         98:ad:83:00:9b:2c:5e:2a:46:4b:a7:10:18:69:61:39:65:35:
         30:f7:cc:04:16:cb:06:c5:1e:4b:97:33:99:df:aa:d8:13:2c:
         64:3c:ee:a7:f5:a1:ee:35:b1:96:cb:37:08:6b:a5:31:04:2c:
         9b:f8:bf:06:03:9d:72:c0:f6:62:ac:34:9d:83:92:1a:1b:f1:
         cd:93:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:07 2025 by rpki-client