Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa
File:                     FB2262620C3111EDBD0F7137C4F9AE02.roa (raw, json)
Hash identifier:          gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=
Subject key identifier:   D2:5F:FE:2F:23:48:9D:51:C5:83:5B:41:1B:93:91:64:08:54:B9:79
Certificate issuer:       /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial:       0281
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:48:49 +0000
ROA not before:           Thu 05 Jun 2025 01:48:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141222
IP address blocks:        103.151.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
                          rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
        Validity
            Not Before: Jun  5 01:48:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840f780-eba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:79:d3:11:15:bc:4b:ea:af:b6:bf:ca:18:
                    c0:fb:8f:2b:8a:d3:e3:18:a6:fa:a2:d3:4e:30:41:
                    f8:f1:77:6c:d5:9d:3a:6c:9e:7a:a2:7c:7c:c2:b7:
                    40:f3:77:a8:3d:d2:72:8a:84:99:7f:25:1f:a4:77:
                    d1:8c:41:1a:38:1f:8e:14:c5:10:e2:1d:06:8e:6e:
                    c0:5c:e5:da:fd:93:63:fa:ae:59:7b:09:c9:da:f3:
                    9c:4e:12:b5:e2:e5:07:5c:8a:81:77:06:4d:96:5d:
                    e3:38:6d:96:fe:4e:50:7f:bf:3f:a8:ab:7d:3d:61:
                    a3:dc:39:f6:b1:90:ca:02:8f:01:19:8c:4d:cd:9a:
                    a2:d3:36:38:1b:54:36:6c:ca:22:1f:f4:6d:55:ad:
                    1c:c2:d1:06:4f:ab:11:05:7e:a8:6f:80:0e:55:93:
                    0a:45:7c:82:05:6c:86:39:51:d9:61:fc:67:c9:5e:
                    72:b0:d7:a0:2d:6f:c6:2b:34:e1:3b:7e:98:15:8f:
                    cb:a9:e7:bd:a3:bb:d7:3a:4f:f4:50:21:55:16:04:
                    26:ca:ac:d8:d2:ec:21:02:14:86:68:03:6d:ed:3f:
                    23:e0:ff:59:35:48:3b:e3:73:09:53:c1:48:54:5c:
                    df:18:7e:c4:aa:bc:fd:3c:06:bf:23:1d:89:43:34:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5F:FE:2F:23:48:9D:51:C5:83:5B:41:1B:93:91:64:08:54:B9:79
            X509v3 Authority Key Identifier:
                keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:21:62:4f:d5:43:64:41:6e:7c:e5:89:78:5c:55:46:6e:b5:
         4c:03:1d:12:38:a2:1d:08:1c:24:92:b4:a4:6a:c2:47:01:18:
         6c:1c:d5:6e:b4:95:ab:1c:aa:a8:a3:ae:f5:58:31:26:c9:5d:
         f9:0f:3a:a9:25:f5:be:0b:c5:7c:f0:f4:cf:3c:76:c5:f9:e5:
         db:19:d8:04:b3:68:3f:4e:2b:a1:8a:44:70:d6:ee:db:f5:78:
         80:bd:f2:75:c0:d7:2a:d9:1e:8a:1b:9d:ce:10:4b:27:b6:08:
         9e:79:50:a8:c0:cd:7e:55:01:03:f2:0d:5f:63:67:5d:bf:ac:
         d4:57:3d:75:d1:12:46:d0:5a:b6:48:cd:21:22:2a:a2:ba:e0:
         94:40:92:bb:36:a4:a6:7a:7f:7b:fe:a5:29:6a:36:0e:dd:02:
         80:2b:42:c2:db:57:e8:0f:bc:32:52:05:bd:11:8a:42:98:10:
         6a:bc:e1:ef:ca:66:cd:df:a1:31:2a:67:af:12:b3:d1:14:c3:
         e9:fc:3d:f1:d9:57:4d:e5:a1:ae:7b:8d:1c:bb:a8:1d:cb:fd:
         fd:99:d9:70:09:71:7b:8e:ed:0d:0c:30:91:e9:c7:ba:37:70:
         3d:f4:57:26:01:7c:1e:35:e6:ef:51:88:50:ad:b3:56:05:82:
         1d:f8:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:04:30 2025 by rpki-client