Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
File:                     2540A3D24C9F11F0B3E79877C4F9AE02.roa (raw, json)
Hash identifier:          Oc4JHMwcY/Ua5+4bRXSE8NnF5cfvtlE63OrGRJ6XMls=
Subject key identifier:   65:00:04:7A:45:C0:95:F9:5A:0D:6E:53:D9:70:80:A4:42:90:03:F3
Certificate issuer:       /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial:       0680
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 23:51:26 +0000
ROA not before:           Wed 18 Jun 2025 23:51:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138970
IP address blocks:        103.137.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 23:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
        Validity
            Not Before: Jun 18 23:51:26 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=685350fd-4642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:6d:2b:6f:f3:3c:d9:b1:ad:cd:f6:09:5b:
                    c6:90:8c:64:e4:ed:a0:52:37:48:74:a6:ee:f6:83:
                    f3:cc:b6:2f:e1:21:11:86:25:b9:85:4b:b6:1b:1c:
                    d0:93:50:94:64:24:42:e3:ee:34:25:c7:45:40:bc:
                    bc:ee:05:2e:ae:a7:d3:33:07:4b:58:b0:28:60:46:
                    61:08:be:9f:fa:49:b5:80:61:c3:b2:50:45:60:8e:
                    02:e6:ff:f5:7f:41:01:77:a9:bb:83:d8:a8:2e:57:
                    86:ec:fd:b2:c1:ac:b5:18:88:59:8f:d6:20:7a:24:
                    58:5c:4b:a7:13:55:33:66:d5:c1:ae:51:08:62:f4:
                    aa:5d:01:d3:44:91:23:4c:66:83:cc:60:25:0f:38:
                    b6:ba:53:c3:df:39:ad:5d:a2:24:3c:14:f6:36:1b:
                    12:da:9d:5f:db:3b:69:e5:ac:8e:43:08:15:8a:5d:
                    80:12:a2:98:83:b2:8a:86:47:94:28:5a:ce:34:c8:
                    d3:dc:8d:00:b5:0f:40:56:d8:7a:28:3b:f9:2b:70:
                    cd:de:17:bf:33:9c:2a:23:03:f5:32:71:e8:31:42:
                    24:79:6c:c6:aa:c5:7e:5e:4e:c7:dd:2a:b9:3e:35:
                    70:21:59:19:21:7a:d2:e1:96:6d:e0:90:67:98:0a:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:04:7A:45:C0:95:F9:5A:0D:6E:53:D9:70:80:A4:42:90:03:F3
            X509v3 Authority Key Identifier:
                keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:91:de:ee:8a:c0:3d:c1:13:4a:a9:46:3f:f4:d7:2a:55:56:
         27:73:b7:ea:46:04:0b:59:17:f4:4e:c0:49:44:4c:a0:45:a7:
         d4:f6:32:8e:b7:b2:aa:9f:5f:52:7c:92:64:ba:32:80:9a:ae:
         75:49:dc:bd:92:d6:25:20:2a:f5:8f:6f:d1:87:d3:24:61:0a:
         57:c7:6a:44:6b:57:2d:38:de:a7:d7:c8:00:6a:56:18:b3:7b:
         b4:b7:d2:da:66:f8:91:d6:5d:2d:5d:bd:2a:d1:d7:aa:90:cc:
         5e:2d:e5:a9:c4:c1:5a:04:20:a2:14:44:3f:06:e9:d7:52:be:
         19:41:86:86:2d:15:59:eb:7a:fa:5d:6a:0e:79:a0:82:7f:48:
         5d:4c:65:94:08:b5:42:60:e7:94:fe:e3:4e:56:4e:a3:01:cb:
         04:3d:77:78:6f:ea:a1:1b:8d:c7:18:6a:b5:6d:5e:23:10:a1:
         53:0c:9d:61:81:89:bb:2b:06:4c:2a:9a:c7:8d:77:40:a0:6f:
         2e:dc:db:1c:05:19:01:03:d2:44:fc:01:9f:98:16:3a:37:01:
         7a:47:2a:fe:51:7d:ef:b8:b1:61:fb:0e:7c:70:31:07:50:ae:
         ff:2d:94:09:08:3a:81:54:a0:a2:79:96:6e:d3:cc:3b:86:dc:
         23:99:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:20:10 2025 by rpki-client