Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa
File:                     B1471960C69F11EEA49B0321C4F9AE02.roa (raw, json)
Hash identifier:          bClFpBC9mwnTKx4HCNP/SDG+E1CzpdvfmXEpzsco47s=
Subject key identifier:   12:FD:95:74:55:AA:AE:EB:0D:52:B6:7E:98:BC:FB:AD:EF:81:27:10
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       0757
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa
Signing time:             Sun 15 Jun 2025 05:38:28 +0000
ROA not before:           Sun 15 Jun 2025 05:38:28 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     58061
IP address blocks:        103.104.141.0/24 maxlen: 24
                          103.104.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 18:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Jun 15 05:38:28 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=684e5c54-3310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:74:3f:18:c7:a1:23:f1:ca:f4:67:58:ad:
                    86:7d:9d:48:c9:f2:39:fc:1a:36:13:4b:ab:4f:99:
                    cd:d8:0a:1c:60:94:33:37:30:08:7f:76:00:42:0a:
                    43:d9:c3:ba:a4:e4:5b:c9:ca:aa:c6:36:5a:0e:98:
                    25:15:43:e1:c0:fa:25:18:1e:ac:fb:ae:93:6f:82:
                    f8:9f:59:92:06:fe:9e:03:ee:0d:ea:c0:1e:06:43:
                    4b:48:49:e1:a3:b8:f1:4d:04:0e:85:7d:5f:2c:9c:
                    d0:c8:06:40:2e:1d:ba:9d:66:cc:09:e6:1d:63:e8:
                    0c:51:de:73:fd:30:2b:a3:76:2a:6b:b2:2e:92:3c:
                    e6:a0:83:94:47:91:5c:66:14:7f:c0:67:6f:3a:17:
                    8e:c9:19:2b:4f:b4:cb:2f:6a:d2:54:e8:e1:fa:01:
                    15:d3:50:b9:d8:9c:ba:92:a7:85:57:a3:39:da:6e:
                    96:78:f0:ab:b0:19:66:27:db:b6:93:ea:95:e3:4c:
                    fd:61:f1:d4:66:50:8b:83:c2:9d:f8:6c:fe:0f:dd:
                    4b:25:92:52:3e:23:26:1d:84:ff:3f:06:1f:ba:c1:
                    85:02:11:a3:d8:ff:d1:39:9b:d9:7a:ed:3a:24:2c:
                    ef:d0:56:af:05:82:45:21:1d:a1:94:39:6b:5e:0e:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FD:95:74:55:AA:AE:EB:0D:52:B6:7E:98:BC:FB:AD:EF:81:27:10
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.141.0/24
                  103.104.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:57:aa:20:b7:ae:2d:3b:0c:26:21:b5:6d:29:b8:af:83:e8:
         f1:76:d7:50:81:ac:91:cc:04:5f:dc:bb:86:2f:02:a1:88:6a:
         38:ed:b6:97:f4:a6:66:a0:e5:eb:77:40:03:4a:4c:2b:e1:4d:
         11:e2:4c:e3:e9:be:c9:a8:36:03:76:27:72:9d:20:09:53:e2:
         bb:63:2f:8a:95:7b:7d:71:df:07:bb:1b:75:79:15:be:c6:22:
         87:35:d3:5f:3b:b8:3e:d1:f4:9b:21:a9:77:83:46:ba:a2:be:
         83:fa:5c:f8:9f:5c:f7:ec:c0:6f:bd:ae:c6:90:fc:58:ed:8d:
         7a:4a:f7:ed:2a:83:96:7c:72:42:b5:46:81:6d:8d:84:b2:c0:
         50:70:36:56:46:74:0d:03:a1:ec:b3:2b:92:ad:9d:ae:83:37:
         6d:8a:d0:38:9b:eb:0c:e4:46:a6:1a:85:9b:43:a4:02:a7:c6:
         c2:52:cf:74:6b:af:d0:8d:3e:31:81:88:e2:e6:f4:5d:c8:c8:
         3a:f0:e3:d6:7e:18:96:db:a5:be:94:76:66:e9:97:98:4e:ad:
         a1:cf:2d:f5:b4:64:61:6f:c6:40:9a:37:83:e6:aa:44:e5:ac:
         93:b7:f7:3d:6c:25:82:c5:11:78:5f:56:b0:fa:48:4d:c7:9d:
         b3:2c:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:09:19 2025 by rpki-client