Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EE63AFE737B11F080BF631FC4F9AE02.roa
File:                     5EE63AFE737B11F080BF631FC4F9AE02.roa (raw, json)
Hash identifier:          cq22IKoRKxuzmLtJtQSqpRFTWA5QHH2JWx1QfUn4Y84=
Subject key identifier:   E6:16:E4:B9:24:00:E8:A7:24:98:B6:36:87:FF:AC:81:1D:29:BC:E8
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       0311
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EE63AFE737B11F080BF631FC4F9AE02.roa
Signing time:             Thu 07 Aug 2025 10:43:36 +0000
ROA not before:           Thu 07 Aug 2025 10:43:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     29802
IP address blocks:        103.209.76.0/24 maxlen: 24
                          103.209.77.0/24 maxlen: 24
                          103.209.78.0/24 maxlen: 24
                          103.209.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Aug  7 10:43:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68948358-55c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b8:ea:94:b3:f1:3c:10:26:77:2a:a2:04:51:
                    ba:ea:b1:a5:8f:ac:6d:ec:ef:70:ac:8f:3b:a2:21:
                    a9:9a:b1:dc:97:b4:35:bb:df:17:af:f2:8f:a8:0e:
                    ff:af:78:bf:14:fa:0c:96:01:ac:1b:47:24:d9:6f:
                    c7:00:6b:15:59:16:3a:19:58:14:ab:87:3c:06:0c:
                    25:8f:65:02:61:d2:a7:96:4c:cd:21:8d:90:bf:10:
                    42:c4:2d:c3:78:86:99:8c:ee:f3:12:14:f1:a9:62:
                    b7:64:cc:19:c2:18:3a:45:40:08:f3:5b:f3:25:45:
                    cc:68:76:a4:f4:91:fe:1c:19:de:11:fd:3f:28:83:
                    5b:24:1a:3d:f7:09:60:eb:0c:95:d1:f7:be:53:7c:
                    88:bb:60:f8:d6:ef:45:62:6c:57:76:90:6d:26:0c:
                    16:95:ca:c7:04:fa:f0:c4:97:6b:e1:de:d2:9a:b1:
                    7a:c0:81:21:9e:66:81:db:40:87:c6:37:6a:51:a5:
                    b7:53:19:0b:23:89:1b:46:11:3f:97:b9:c1:a7:81:
                    ea:a9:36:72:8f:c7:3a:c4:9b:1c:52:d1:45:0a:28:
                    b9:8d:34:7c:1a:c7:b9:67:64:16:01:59:03:21:f7:
                    93:8f:b2:54:02:81:27:fd:ee:cd:58:97:0d:27:35:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:E4:B9:24:00:E8:A7:24:98:B6:36:87:FF:AC:81:1D:29:BC:E8
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/5EE63AFE737B11F080BF631FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:77:b3:04:1d:bd:e0:52:07:b5:82:fe:2b:55:6e:ed:dc:fc:
         a8:7e:79:52:34:b4:51:29:f5:65:44:b7:29:f2:fd:7b:13:17:
         3f:17:0d:0c:87:5c:f4:0b:39:a7:6c:d0:be:22:19:af:b0:1d:
         05:18:61:5f:f1:eb:9c:17:8b:04:38:ec:00:04:92:55:71:22:
         c2:35:6b:23:ee:8a:cc:e7:b5:cd:28:2c:d1:82:6b:4a:66:76:
         f1:be:0c:97:05:9f:7e:b0:cf:44:06:e2:9f:08:59:0b:02:06:
         07:6f:e6:fe:83:09:c8:60:38:28:f2:35:f5:67:de:c7:fc:a9:
         1c:64:8c:ba:f7:bc:1f:2a:ea:de:9d:f7:19:39:d0:cf:05:46:
         57:34:a4:29:12:27:fc:a6:11:f0:b8:cf:9d:4f:64:81:a3:86:
         b1:f8:8e:3e:de:c9:99:a5:37:17:1f:ed:a5:e6:95:da:8d:ed:
         f7:7f:50:40:5d:d7:e7:54:2b:a7:bb:d2:04:7d:a0:72:e8:6f:
         16:6e:29:ef:d0:2e:44:3e:f2:ae:7d:72:6f:03:cb:41:65:fc:
         ec:77:da:d2:bd:d2:a6:80:ae:c2:29:c2:bb:98:81:a2:06:cc:
         3f:46:bf:85:5a:47:a2:eb:3c:77:7c:8c:dd:8d:df:e2:f6:3d:
         7e:23:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:12 2025 by rpki-client