Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa
File:                     12EDB8D284C711EFA075A16AC4F9AE02.roa (raw, json)
Hash identifier:          5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=
Subject key identifier:   B7:31:B9:51:89:BF:F3:EB:EF:66:BE:19:5C:DD:31:CE:93:C1:F5:17
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       05AC
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa
Signing time:             Thu 12 Jun 2025 23:03:05 +0000
ROA not before:           Thu 12 Jun 2025 23:03:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6134
IP address blocks:        103.214.172.0/22 maxlen: 24
                          182.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 22:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 12 23:03:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=684b5ca9-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c0:96:7b:5a:3d:14:4b:0a:fc:97:4b:b0:7e:
                    a1:34:e7:5d:54:85:2c:b0:72:36:21:6f:f0:17:1f:
                    f4:cd:32:b0:02:f1:d7:db:4f:22:a6:0d:7c:49:69:
                    3e:46:fd:0a:de:14:1d:91:28:ea:37:df:3f:9a:ef:
                    67:8e:ed:6c:42:67:20:01:2a:aa:06:8a:94:9e:75:
                    0d:69:3d:99:7a:ed:f1:f2:2e:6a:bc:3d:05:47:d6:
                    3e:85:10:16:8f:2f:12:a6:23:6f:f1:a5:10:f0:bd:
                    94:24:46:fc:5f:95:f5:b9:5e:17:83:2d:ac:46:55:
                    51:9a:4e:13:a9:fb:70:3d:bc:82:26:c6:c4:7f:72:
                    c0:6c:e8:37:ba:8d:54:59:cd:f0:0f:0c:01:51:ee:
                    49:86:8d:a5:ad:f4:b6:35:cd:bc:7e:34:40:c9:f1:
                    d7:27:8f:4b:74:c3:e6:7f:81:0d:1a:14:5c:4d:1e:
                    49:2d:35:59:17:19:39:d1:90:a4:49:16:3f:36:ff:
                    14:43:fa:5f:16:7e:60:3d:46:96:3a:db:b3:d3:07:
                    95:00:fa:62:be:9b:9d:04:30:f8:f1:fd:cb:3f:8f:
                    e4:6a:4d:9a:92:df:0b:df:94:e5:8b:0d:3c:9d:e1:
                    ef:88:6f:5b:f0:7c:b7:f7:e3:09:59:9b:88:7e:27:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:B9:51:89:BF:F3:EB:EF:66:BE:19:5C:DD:31:CE:93:C1:F5:17
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/12EDB8D284C711EFA075A16AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/22
                  182.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:12:b6:fe:2d:f0:65:e0:c6:71:85:48:01:12:3d:7f:c5:
         fe:d8:1a:f4:d9:de:61:27:ca:ab:a3:68:4d:be:35:2d:26:17:
         6c:ff:47:cc:a5:7b:bf:68:1a:64:db:cd:e2:c3:c2:72:22:c0:
         ec:01:fd:de:2d:3a:32:3b:ca:51:46:3c:44:ec:fa:2a:7e:88:
         85:00:3b:6d:88:9b:25:cb:6b:19:95:d8:38:a1:c7:79:bf:15:
         ac:19:be:1a:bc:4f:f2:d4:0c:1f:ac:28:7e:88:c2:c7:79:39:
         fc:c6:8e:7f:b7:13:a6:ae:40:5f:a2:99:97:e2:44:35:59:e5:
         fd:4b:b2:c6:1b:83:bf:f2:83:d0:e0:ba:28:62:84:c1:d2:01:
         e4:a6:79:e1:e0:2c:f0:08:06:de:1d:88:36:cb:28:c8:b2:44:
         39:4c:0b:b5:52:31:a8:76:57:06:12:3a:ac:fb:aa:b1:e7:71:
         34:9d:23:fd:f3:73:76:f5:59:ef:4c:f7:b1:f0:3b:eb:23:99:
         76:72:6c:9d:aa:74:0c:11:a7:26:87:7f:d4:cb:28:fd:77:49:
         d1:d3:06:04:92:da:f1:8a:f7:01:68:ec:95:05:38:39:d8:73:
         a2:bf:e3:2a:d4:c4:b6:5a:83:3b:b8:78:c2:96:cb:e5:75:15:
         25:3b:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:43:16 2025 by rpki-client