Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/DDBCA666F18911EAA922EB1FC4F9AE02.roa
File:                     DDBCA666F18911EAA922EB1FC4F9AE02.roa (raw, json)
Hash identifier:          wAmduclXNrZKRu8/pqGkayPdmVyxI/8+xrVLzFoQnO8=
Subject key identifier:   6B:AC:4E:2E:D7:9B:EE:FF:E7:5E:6B:31:DE:78:4B:97:84:93:F5:93
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       0818
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/DDBCA666F18911EAA922EB1FC4F9AE02.roa
Signing time:             Mon 26 May 2025 21:19:16 +0000
ROA not before:           Mon 26 May 2025 21:19:16 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     49466
IP address blocks:        103.213.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: May 26 21:19:16 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834dad3-317f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:0b:2b:56:21:25:a0:8f:23:0b:ea:1c:60:
                    d2:7e:e0:46:2b:d7:67:99:6a:45:b1:a2:c8:6d:91:
                    aa:bd:06:db:bd:10:80:de:4b:c3:51:77:1c:ec:7c:
                    08:04:10:fb:1a:29:b8:cd:9f:67:13:0a:5e:8c:fd:
                    8a:6a:a9:10:87:ff:1c:76:03:25:80:80:08:e9:c3:
                    9d:15:98:13:cf:2d:91:bc:7d:eb:e6:84:b9:bf:08:
                    5c:cf:1d:c2:29:25:6a:98:fe:fe:79:dc:ab:b8:63:
                    97:d8:6a:1a:2d:0a:05:bc:04:15:09:c9:ab:6f:17:
                    06:b7:3b:b8:c7:a0:47:95:25:80:70:a4:ed:ee:0f:
                    f8:de:9a:93:30:f7:d8:b9:41:2f:56:89:f1:34:7f:
                    8d:7f:ae:aa:96:69:6e:b1:82:a7:f1:2e:a1:85:89:
                    17:67:b9:69:fc:09:41:7c:f5:34:20:6f:fc:2e:f7:
                    63:e9:d1:0d:5c:87:2d:b9:1f:7d:57:c4:bf:d7:b8:
                    84:c1:2a:cc:9c:fe:db:8c:5e:32:93:bb:97:04:b4:
                    d4:8e:d8:b8:e0:d5:03:53:a8:39:c4:42:33:cd:43:
                    75:6f:32:fc:d3:44:ae:d3:04:a9:dd:3e:9a:7f:2c:
                    7f:73:c6:e1:6f:97:7f:fb:cb:be:9b:43:2b:00:e7:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:4E:2E:D7:9B:EE:FF:E7:5E:6B:31:DE:78:4B:97:84:93:F5:93
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/DDBCA666F18911EAA922EB1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:75:2b:c5:ff:dc:8b:15:6b:19:46:84:e7:4f:ef:79:2f:92:
         b5:3c:63:a9:37:14:89:b6:6d:80:93:72:a2:71:0a:32:4c:23:
         dc:88:a4:14:88:d8:5f:30:91:de:1b:7b:52:1f:7c:9a:58:c9:
         d4:19:00:d3:da:dc:af:99:c1:5d:9c:24:1f:13:12:09:97:74:
         91:db:12:98:2e:fe:18:ce:06:c1:5b:8a:79:6e:8d:e5:d5:69:
         ea:d4:15:31:9c:09:eb:b9:62:d1:bf:27:b2:2d:76:eb:77:99:
         ee:06:1e:0e:f8:03:48:88:d7:65:0e:cb:bb:c4:bf:98:9e:94:
         85:aa:dd:dc:f4:4d:17:6c:cb:4f:44:ab:cc:61:39:a0:dc:2f:
         04:33:06:ac:80:9f:93:a7:00:19:39:8a:3a:7c:d9:cf:07:82:
         f4:ed:8f:a6:48:0b:44:66:9a:0d:be:58:ec:a0:6e:05:b1:90:
         74:a7:c9:1d:1e:89:2d:e2:d8:62:f2:4d:eb:39:3f:c6:74:38:
         2e:f2:66:f7:bf:89:fb:bc:40:aa:9d:eb:6a:3c:fe:4f:0e:c2:
         af:da:c8:c8:01:82:0e:07:69:7a:4a:3d:dc:32:8d:7b:52:fe:
         e5:80:78:b7:83:c4:0c:77:bd:73:c2:94:6b:71:9b:ac:1a:06:
         9c:05:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:29:09 2025 by rpki-client