Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
File:                     32538B4EBCE311EA953FBB5EC4F9AE02.roa (raw, json)
Hash identifier:          /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=
Subject key identifier:   FB:A5:B1:78:71:AB:B6:B0:29:16:4D:B9:82:27:CB:16:23:F5:01:2C
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       3170
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 15:32:24 +0000
ROA not before:           Mon 02 Jun 2025 15:32:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132827
IP address blocks:        103.10.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 15:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12656 (0x3170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jun  2 15:32:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683dc408-0643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:a7:cd:fc:11:72:3c:38:25:be:c2:48:59:
                    d5:d8:7e:c3:6e:d1:f3:3b:90:ab:6e:f0:72:84:ea:
                    4d:30:41:fa:d6:40:c9:e7:1a:d3:7d:07:1a:cb:78:
                    a9:52:70:07:7e:42:68:a3:d9:9b:7a:de:f6:d4:ef:
                    23:19:89:94:21:94:14:0e:3b:ac:21:de:3b:ef:20:
                    03:5f:4b:71:23:d1:99:03:14:ee:29:20:07:cd:cb:
                    36:48:46:c1:eb:56:f5:b9:cc:51:1d:92:cf:b0:ca:
                    86:4b:ef:51:9b:8e:f6:3d:cf:97:49:ef:be:dc:64:
                    d7:69:cd:e7:f0:37:11:aa:fa:38:47:ca:2e:06:47:
                    d8:27:f7:5a:ea:05:33:e4:30:2d:a0:10:42:3e:92:
                    ed:58:21:82:f1:5d:f3:df:d6:70:d3:79:eb:6b:7c:
                    77:86:79:ed:9a:19:0e:15:6c:bd:cc:18:4f:2e:bd:
                    08:49:a5:47:5c:9e:81:ea:2b:16:07:1a:10:46:8b:
                    d1:60:e3:0e:e3:6d:33:b3:77:86:aa:3e:0c:80:0d:
                    9a:84:6b:4c:2a:2b:ec:92:f4:9e:e2:6c:0f:84:fd:
                    d3:15:4d:df:f8:90:8f:2c:4f:d2:10:60:89:56:29:
                    33:e0:7d:b5:aa:75:9c:58:98:b0:37:fc:20:dc:39:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:B1:78:71:AB:B6:B0:29:16:4D:B9:82:27:CB:16:23:F5:01:2C
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:ad:37:ea:3a:9f:54:2d:09:4e:23:d6:74:a9:18:56:da:
         50:99:9b:ec:f0:ca:0a:d1:6e:bd:1e:fd:13:92:4d:bc:b4:31:
         c8:48:be:aa:84:e3:01:74:94:3d:6c:ee:2e:e8:3c:c5:dd:15:
         fd:82:38:19:e5:d6:c6:e6:62:dc:5e:ab:22:bf:ba:69:b7:36:
         60:27:b1:92:7c:da:1e:9a:ad:9f:a7:36:96:13:08:50:70:be:
         ab:91:59:64:20:99:50:47:6a:29:c1:f8:98:d1:bb:d1:3a:07:
         40:02:51:69:4b:c4:da:aa:54:9c:26:47:5a:a6:5d:9d:32:aa:
         c2:56:63:d6:0c:d2:c6:a2:97:61:08:a3:80:1e:da:69:90:d2:
         72:85:5b:36:a4:4b:ad:87:49:9a:0f:28:0d:89:de:ae:06:98:
         3e:f6:e4:79:a8:b4:c9:4f:2d:80:e0:6f:e5:eb:e5:36:1f:31:
         43:62:de:63:63:1a:c5:8c:2a:ff:b7:2b:7e:32:e5:6b:62:91:
         26:e7:47:f6:73:a9:82:8d:d5:0e:00:d5:6b:87:82:da:8b:1f:
         5e:bf:a2:4a:4d:c0:da:86:bb:62:ae:1c:3f:1e:56:45:df:e4:
         2a:c5:18:1e:0e:ba:28:c8:cd:9c:fc:c0:95:4b:b4:c2:1d:3c:
         0d:0d:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:42:24 2025 by rpki-client