Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
File:                     9680FCD2A87011EFB3944C13C4F9AE02.roa (raw, json)
Hash identifier:          zs+47Dsw1gUVHnfCNkqFYR5V7IW/citmpclZUpon2fQ=
Subject key identifier:   90:7F:92:FA:48:20:CE:88:35:67:39:CA:C3:E9:A8:8C:80:F7:81:5B
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       18D9
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
Signing time:             Thu 12 Jun 2025 16:46:49 +0000
ROA not before:           Thu 12 Jun 2025 16:46:49 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152472
IP address blocks:        103.243.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 16:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6361 (0x18d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Jun 12 16:46:49 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=684b0478-7da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:e6:97:91:89:6f:f3:95:88:63:2a:fd:f1:
                    bf:67:e1:74:2e:6e:13:ff:94:d5:d6:e8:59:e4:ca:
                    30:6d:81:df:ab:e4:43:c0:6f:da:f4:7f:ab:bd:a0:
                    b9:de:c4:e0:53:37:9b:2b:0a:5c:48:35:33:cc:2d:
                    78:94:30:a2:41:1f:1f:a9:59:5c:d0:4e:3c:16:64:
                    8c:e7:f7:af:94:7c:ed:fb:5f:b1:bb:c1:e6:32:46:
                    a7:53:6d:59:b6:eb:ec:de:0c:5e:84:32:5f:cf:96:
                    c6:5a:95:da:15:54:7a:35:f7:d6:1c:54:05:85:be:
                    55:eb:6d:6d:b9:90:1d:ac:14:78:14:b1:cd:d0:62:
                    bd:ea:f1:4d:8c:43:89:f3:2c:c8:88:fa:e1:15:aa:
                    9f:77:e0:39:9b:94:5b:c1:cb:9a:3f:65:1a:36:89:
                    73:2b:04:d6:23:0c:2a:67:c7:89:0f:af:a2:e9:d4:
                    4d:48:88:05:58:b1:5e:cf:77:4b:da:6d:61:02:5f:
                    52:0b:5e:1c:05:93:65:35:7c:6e:fa:39:82:7a:aa:
                    f9:59:ae:1e:6a:63:c0:fa:ac:51:9a:13:f6:f6:a6:
                    92:62:26:55:25:0b:29:04:3b:7e:f4:fd:cc:88:2f:
                    60:de:ec:e3:2b:3a:c7:65:1e:c5:f7:ea:5a:e9:aa:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:92:FA:48:20:CE:88:35:67:39:CA:C3:E9:A8:8C:80:F7:81:5B
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:2b:e6:c3:94:ff:6e:f7:e2:b9:e5:41:db:35:26:f0:f8:
         0f:eb:54:ab:8c:82:53:74:25:f6:8c:17:03:49:1e:e7:15:1a:
         c0:e4:67:c3:41:95:a2:25:98:22:ab:f9:9b:70:95:cb:47:ff:
         56:a3:f4:d4:8c:b8:95:08:0f:e1:45:f0:ed:12:26:18:9d:90:
         c1:22:88:9c:2f:39:b0:5a:ec:1d:fc:a3:67:e1:7f:ab:fe:bb:
         b3:84:2e:0d:aa:2b:a1:6c:b6:0c:ed:44:ef:2a:37:f4:21:4b:
         62:2a:4a:72:ea:23:e4:b7:86:8a:85:10:f4:f8:2a:95:fb:0a:
         0e:fd:e6:3c:b7:b3:6e:e6:15:2d:18:45:ff:2c:f5:02:ab:fc:
         8e:39:c9:80:3f:82:58:9a:e2:09:f2:16:78:4c:80:cf:22:b1:
         ef:07:08:35:75:e2:bf:c0:98:4f:1e:b9:67:7a:0f:8b:ef:9f:
         51:c1:49:0d:53:05:d8:53:af:00:98:a6:83:63:c3:8c:6b:f3:
         1c:f6:43:cc:fe:fb:5a:e3:51:e2:31:a5:f0:34:8b:5a:16:6a:
         1d:00:6e:b5:cf:74:4b:3d:72:54:0e:56:78:19:c7:e5:3a:dc:
         d1:03:eb:d5:15:f1:ae:5b:0b:9c:73:69:96:02:fb:1e:e2:38:
         3c:51:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:41 2025 by rpki-client