Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa
File:                     77139F3054EF11E783C5A42EC4F9AE02.roa (raw, json)
Hash identifier:          WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=
Subject key identifier:   FB:7D:D0:25:F7:5D:97:86:33:1D:71:E7:F3:D9:4E:E2:88:16:D3:BB
Certificate issuer:       /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial:       2561
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa
Signing time:             Tue 06 May 2025 15:53:00 +0000
ROA not before:           Tue 06 May 2025 15:53:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63987
IP address blocks:        103.58.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
                          rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9569 (0x2561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
        Validity
            Not Before: May  6 15:53:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681a305c-e20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:35:6a:af:8a:85:61:ce:e7:e2:94:36:b0:
                    e1:d2:24:77:34:6d:ce:43:d6:02:fd:e5:d7:d7:25:
                    50:36:01:b2:cd:2e:6f:69:96:a7:6a:d2:7c:46:9c:
                    9c:f6:78:5c:38:9a:9b:92:58:a8:82:53:8d:b4:f9:
                    80:15:e1:42:5f:e5:c8:73:79:2d:c9:b2:77:8e:78:
                    d7:6f:c8:80:b1:e8:24:06:37:a6:4c:cd:64:07:c2:
                    06:49:8d:b0:2d:b6:ba:02:df:ac:11:2f:3a:d8:08:
                    83:6b:a2:69:7f:1d:9b:a0:56:dc:99:4f:e8:6f:8d:
                    92:30:61:a4:18:4b:10:d1:c0:a2:bf:e4:a0:71:46:
                    47:6f:2d:fc:a8:85:30:20:6c:29:a6:ab:93:74:ef:
                    f0:d0:64:81:84:75:ca:4c:b4:85:db:35:f2:79:57:
                    28:c1:3e:56:f2:f2:a9:15:f9:44:4f:14:e3:ad:62:
                    52:fc:5d:d7:0f:99:87:ee:75:70:1a:98:9e:ad:7f:
                    bb:95:22:87:4f:65:61:14:33:f3:19:06:21:1c:57:
                    01:52:3f:a4:6c:fd:1c:67:7d:69:52:b6:6c:f4:39:
                    ec:1c:bf:e4:c3:96:55:7c:35:88:30:c7:74:5c:a1:
                    b8:8f:e4:0c:1e:ad:5a:1b:9b:ef:81:64:f4:c1:ab:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:D0:25:F7:5D:97:86:33:1D:71:E7:F3:D9:4E:E2:88:16:D3:BB
            X509v3 Authority Key Identifier:
                keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:cc:8b:6d:2e:ae:62:6b:ec:5f:2e:0b:30:78:51:1c:7c:b1:
         95:4c:df:ac:a1:10:42:0f:ac:e4:48:70:59:45:df:d2:ea:4c:
         da:74:6d:b7:cf:bb:df:01:c0:86:e5:77:a4:7b:98:06:de:4d:
         2b:af:d0:74:24:02:d6:77:81:5b:f7:e4:57:1d:7a:c3:33:b2:
         2c:2e:b2:06:6a:1b:1e:1f:c4:48:75:96:05:ed:f1:b3:3f:46:
         af:81:90:4d:b1:bd:4b:c0:6c:1d:60:65:32:17:ea:02:c1:88:
         4a:74:3d:54:18:ed:9a:3b:b6:63:90:67:71:ed:9e:e7:c7:c3:
         ee:2a:39:e7:31:c2:20:3a:dc:28:8c:ae:18:69:ce:5f:2a:07:
         59:f7:7f:c2:f6:03:6f:cd:df:20:01:9e:6e:56:87:48:cf:e4:
         0f:2c:3d:41:36:dd:c1:cc:57:0c:46:29:8b:dc:0f:b9:12:d3:
         62:f7:27:d0:54:3d:8e:57:50:dc:bb:87:16:8f:e7:92:64:34:
         7c:3b:24:8e:31:91:34:83:4b:84:e0:51:5a:73:2f:60:76:2e:
         19:16:36:dc:9d:fe:47:d0:46:52:b4:80:e0:66:da:d6:06:90:
         cc:a3:6a:6b:fa:39:6b:64:2b:8f:c2:b0:27:54:5b:97:6c:7f:
         01:ed:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:43:05 2025 by rpki-client