Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/3681B720B2D611EF9B481340C4F9AE02.roa
File:                     3681B720B2D611EF9B481340C4F9AE02.roa (raw, json)
Hash identifier:          Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=
Subject key identifier:   78:B3:5D:B1:B3:F1:AB:1D:FA:B5:58:D0:F1:77:8A:4E:3A:D2:5F:6D
Certificate issuer:       /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial:       019D
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/3681B720B2D611EF9B481340C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:11:51 +0000
ROA not before:           Thu 05 Jun 2025 03:11:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153371
IP address blocks:        103.176.0.0/23 maxlen: 24
                          2001:df2:7cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
        Validity
            Not Before: Jun  5 03:11:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68410af7-81b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:f3:b0:c7:f5:c5:aa:90:f7:a0:55:48:5b:
                    d4:8a:21:8b:e6:0a:23:bd:52:2d:06:90:99:fd:96:
                    c5:9e:f4:ce:3d:64:ea:51:f0:71:4b:99:91:e5:cc:
                    bb:24:8a:b9:73:c7:88:1e:7e:c6:6a:21:19:a5:c3:
                    4f:d9:c6:df:ae:38:b0:be:89:ea:97:e0:3b:8b:b0:
                    c6:20:7c:59:ba:4c:16:06:2b:c1:ee:a1:98:e5:d0:
                    ea:8b:19:73:90:98:cb:b0:6b:9d:9d:96:06:40:ca:
                    c4:a7:87:7d:83:d4:df:6d:7b:4f:88:10:c2:04:4c:
                    f2:f2:60:0d:18:d5:fe:9a:45:ad:f1:a7:d1:44:b4:
                    b2:e1:54:f8:cc:1f:12:d8:08:f3:b1:e9:87:f9:ca:
                    c7:10:ed:18:f7:68:d4:de:2b:2e:d0:a0:5a:76:cc:
                    13:6b:35:c7:86:c1:cf:ef:24:ae:5e:97:1b:68:7c:
                    85:8c:b1:51:63:0a:4e:94:44:49:4d:c4:1e:97:29:
                    49:10:43:f4:a4:87:69:ff:32:f5:29:d4:62:96:52:
                    66:de:34:b0:67:63:55:36:e8:da:79:fb:66:72:68:
                    9f:f6:ad:09:71:8f:20:9e:56:37:f0:67:0c:f1:98:
                    2f:ec:a7:ed:93:2d:3f:67:29:72:7d:dc:da:62:cd:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B3:5D:B1:B3:F1:AB:1D:FA:B5:58:D0:F1:77:8A:4E:3A:D2:5F:6D
            X509v3 Authority Key Identifier:
                keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/3681B720B2D611EF9B481340C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.0.0/23
                IPv6:
                  2001:df2:7cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:39:aa:88:fc:c4:31:53:05:77:28:bb:ab:eb:06:b4:2f:dd:
         3e:ab:25:d0:48:27:ec:6a:22:06:61:d0:6f:d2:c8:6a:da:59:
         2b:2b:65:4b:23:47:20:18:42:c1:e3:d7:82:07:8c:9a:6a:49:
         34:a4:d1:f9:dc:c8:12:4f:9b:71:b5:bb:d3:df:11:c8:bf:fd:
         ad:40:1f:73:aa:3e:91:ce:1e:6d:f7:35:7b:40:da:d6:53:5b:
         5a:d3:3f:e8:10:8e:97:17:d3:05:b9:79:15:10:d4:4c:12:c5:
         06:2b:c7:b6:f8:fb:dd:26:1d:1d:e1:1b:d4:2e:5c:d5:97:9a:
         64:e0:dc:0e:9e:85:64:0d:db:76:21:34:fa:2f:70:4f:a8:8b:
         f9:9e:ff:42:02:97:ef:15:8b:ec:c1:5f:ea:0d:8c:98:00:f2:
         7f:8a:36:20:a5:48:5a:a4:21:e8:11:c7:8e:b3:1f:7b:e2:51:
         4c:d0:fe:25:d6:37:b3:a4:71:16:07:8b:50:ce:47:d5:a8:17:
         12:39:32:0f:8d:66:8a:cc:73:4e:9f:27:57:b2:d8:08:7b:85:
         4b:8b:74:0d:30:b9:54:de:07:bd:52:7a:a2:5a:6e:b3:7c:02:
         f8:fc:88:0c:70:a5:3d:82:0c:1a:82:67:4d:1d:63:9b:00:52:
         79:f5:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:42:55 2025 by rpki-client