Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
File:                     B69C27DCB6D711EB9D603F7DC4F9AE02.roa (raw, json)
Hash identifier:          ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=
Subject key identifier:   B8:C1:E3:EF:36:75:FD:A3:6A:17:19:4B:A7:56:D9:B7:AD:21:38:18
Certificate issuer:       /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial:       05EB
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
Signing time:             Wed 04 Jun 2025 23:02:58 +0000
ROA not before:           Wed 04 Jun 2025 23:02:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142059
IP address blocks:        103.166.3.0/24 maxlen: 24
                          2001:df6:7b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 22:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
        Validity
            Not Before: Jun  4 23:02:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6840d0a2-6208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:75:7b:1d:fb:6d:23:24:89:ef:99:a1:73:
                    01:5a:da:9f:ee:44:f1:c1:20:84:88:fa:0c:80:f5:
                    8b:a6:a2:36:02:32:56:c7:f9:12:fe:57:39:8c:cb:
                    7f:39:91:71:b8:d4:00:d9:65:01:77:06:9f:33:e6:
                    1a:8d:f0:e9:4f:a3:b7:3a:79:4e:10:c1:ed:12:49:
                    2a:76:32:ce:f1:a8:64:64:d4:2d:3c:ab:68:ad:63:
                    07:9f:d5:5b:4d:35:07:b5:b2:54:b6:2a:e3:08:b7:
                    0c:39:9d:21:f9:72:22:c2:31:9c:19:9a:77:3d:15:
                    fc:bd:9e:fd:22:c1:c3:c7:da:62:09:aa:01:b3:8f:
                    12:81:13:2b:88:e9:4d:43:bb:59:2f:ac:34:1d:29:
                    8d:86:d4:f4:07:29:bb:36:62:f7:3a:2e:46:45:46:
                    b7:e1:4c:e2:d0:56:47:7f:be:b4:ea:9d:ab:6b:9c:
                    7d:76:85:5d:c0:d1:c4:0e:d3:0c:16:3a:11:53:58:
                    6f:74:a8:0e:fc:3e:e4:33:1c:00:d1:4c:4e:94:bc:
                    68:cb:cf:9d:a3:cc:11:83:9a:d2:49:3d:f4:d7:6e:
                    ed:6a:f2:da:3a:e3:d7:25:77:c2:89:17:e2:ea:09:
                    ad:ba:d6:93:c8:22:94:49:20:19:6a:e4:4a:31:03:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C1:E3:EF:36:75:FD:A3:6A:17:19:4B:A7:56:D9:B7:AD:21:38:18
            X509v3 Authority Key Identifier:
                keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.3.0/24
                IPv6:
                  2001:df6:7b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:32:62:7f:9e:10:1f:84:e0:78:ca:2e:9b:a3:f2:12:ef:18:
         b4:fa:6f:69:e6:e2:20:f0:c2:41:72:0a:d6:f1:2c:25:ab:fb:
         73:5f:b6:0a:2f:0b:51:92:31:43:48:ab:31:23:3f:e1:9a:d6:
         ac:16:b8:9f:e0:d6:1e:81:dd:fc:c4:e9:ab:33:c1:a0:9b:05:
         e5:bc:cb:b7:cf:f1:51:c8:a6:e1:61:72:4d:2a:7b:05:a2:41:
         aa:39:e6:78:85:d2:cc:17:44:b9:b0:28:09:2c:39:fa:23:89:
         0e:40:71:3d:61:c2:88:ca:2e:dc:9e:c3:58:c4:91:4d:a1:3a:
         e7:73:07:8a:87:6e:4e:ce:f2:c5:38:fd:ec:d0:0e:f8:1b:c9:
         e3:a9:dd:4e:cb:fc:ce:ae:eb:9f:97:3b:8b:bb:b0:91:93:14:
         d3:74:d4:05:66:a0:bf:6f:07:f2:2e:44:e3:f3:25:40:ae:09:
         1b:7b:38:b3:b4:2e:37:fc:c1:01:9e:6d:00:41:20:81:d3:0b:
         19:bb:dd:99:4a:ca:aa:32:b9:64:d5:af:b0:9f:25:68:5a:84:
         85:0e:6e:12:1c:8b:06:27:8a:66:d5:a8:7c:25:15:f7:1b:b0:
         97:b5:76:ac:a1:e3:39:91:7d:15:95:2c:b6:30:56:c2:8d:c1:
         9a:af:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:55:12 2025 by rpki-client