Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
File:                     C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (raw, json)
Hash identifier:          LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=
Subject key identifier:   24:20:A5:A9:BB:71:4B:F2:A4:9D:70:02:EA:F0:1A:DC:CC:25:FD:96
Certificate issuer:       /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial:       05D9
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
Signing time:             Wed 04 Jun 2025 23:03:13 +0000
ROA not before:           Wed 04 Jun 2025 23:03:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142285
IP address blocks:        103.167.116.0/24 maxlen: 24
                          2001:df6:b080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
        Validity
            Not Before: Jun  4 23:03:13 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840d0b1-809c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:82:ab:4e:c6:30:42:08:3b:b1:2a:58:b3:
                    be:71:9d:fc:53:9c:8f:f2:3c:5c:98:93:ba:de:87:
                    f8:89:8c:ca:24:cc:a2:1a:0a:04:72:51:fe:71:55:
                    35:d9:f3:19:42:11:4c:bd:3d:78:f5:a0:e0:73:56:
                    cd:e4:69:75:d9:1a:9b:da:64:f1:f2:04:13:bf:35:
                    d6:2d:90:f2:79:35:3f:58:f1:41:e1:0b:6e:7b:fb:
                    a7:24:c8:84:9e:31:ed:4b:bc:1c:2f:f1:a5:ed:3b:
                    bf:b2:83:02:65:4d:ca:4f:ad:41:71:6f:ba:7b:a5:
                    9f:67:03:c9:76:59:cf:19:36:3a:f8:3b:6e:ef:21:
                    a5:1e:18:98:4f:a1:95:ef:76:f2:4e:ba:9e:e4:8b:
                    c6:f4:98:52:e2:21:09:20:b7:02:f2:bb:7b:05:9d:
                    9f:5d:7d:d4:33:a9:79:35:a8:1d:d4:ce:c3:99:ea:
                    2c:90:82:22:aa:89:d4:a1:1b:b5:8b:24:52:0c:24:
                    a0:a1:2b:56:6a:6c:3c:fe:48:d6:a7:df:93:e6:ad:
                    e5:e8:ac:e3:ca:1e:c1:33:1a:94:c4:4e:29:57:71:
                    d7:b3:5e:80:69:1c:07:60:e6:34:a7:63:19:0d:94:
                    85:7a:99:f4:bd:1b:ed:ec:16:56:cc:20:80:b9:81:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:A5:A9:BB:71:4B:F2:A4:9D:70:02:EA:F0:1A:DC:CC:25:FD:96
            X509v3 Authority Key Identifier:
                keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/C17E1DDCBC7111EBB1423E5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.116.0/24
                IPv6:
                  2001:df6:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:15:53:fb:c4:2e:70:0d:b7:ba:69:b2:4a:77:e2:a0:bc:25:
         58:c8:82:01:53:f9:e7:a3:d7:ee:36:e1:96:f6:31:3d:33:43:
         a5:d4:ca:47:46:c2:7e:63:94:1f:ce:f6:0b:bf:de:56:f7:42:
         ae:99:9c:86:68:5b:09:cd:b6:24:43:f8:e1:dd:db:7a:e0:40:
         3f:63:48:6c:99:1d:2e:1a:69:f2:73:88:c0:03:b0:3f:d4:92:
         07:02:48:61:49:7d:b5:17:97:32:4c:17:b5:ee:5f:63:d8:51:
         0b:1b:19:39:25:07:26:6f:7d:ef:17:68:1d:80:91:cb:8a:d6:
         21:83:1a:87:da:69:57:ff:e5:28:da:68:bd:93:ac:99:8a:6c:
         59:94:82:b8:b8:81:78:22:3e:71:1b:eb:ac:57:35:c0:9d:5f:
         1c:c4:1e:93:a9:74:0c:c7:45:e5:19:a9:7b:3c:37:c7:6a:37:
         bb:39:b6:a1:ef:f5:f6:59:15:c9:84:78:a2:12:6d:b5:36:49:
         a8:27:e8:49:64:d7:b7:d4:7f:c4:98:47:ad:bc:00:79:c3:02:
         03:e5:2f:8e:40:c9:fc:0a:20:39:af:1c:cd:04:f7:f1:12:7e:
         76:78:3c:38:d2:53:45:40:93:06:62:6d:fe:89:e1:fd:08:41:
         d7:6d:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:54 2025 by rpki-client