Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/97F3D14844EC11F09F53687EC4F9AE02.roa
File:                     97F3D14844EC11F09F53687EC4F9AE02.roa (raw, json)
Hash identifier:          MvoELB7h/6HO6eU346ZVVf0K4dU0Em3XRNFS943H7mE=
Subject key identifier:   36:DF:A8:39:B0:EF:8B:A9:11:3B:45:23:83:9F:6E:6E:A0:A9:5D:02
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0311
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/97F3D14844EC11F09F53687EC4F9AE02.roa
Signing time:             Wed 11 Jun 2025 04:36:55 +0000
ROA not before:           Wed 11 Jun 2025 04:36:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     834
IP address blocks:        103.26.8.0/24 maxlen: 24
                          103.243.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jun 11 04:36:55 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=684907e7-bc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:86:04:b3:5d:de:43:b4:1b:e3:f6:34:ff:
                    d6:36:1b:51:4a:e7:8d:a8:78:cf:0a:ed:b3:1b:cc:
                    3d:ca:02:b2:bb:2e:23:d0:4c:24:af:1a:fe:ca:b4:
                    a4:3a:ce:c1:dd:7c:ef:cd:7e:34:bf:ca:c4:5c:20:
                    57:84:4b:8a:45:17:54:24:42:f0:60:09:7b:b7:3c:
                    b9:53:6b:84:b1:50:e8:f9:9f:76:cd:0c:30:36:dc:
                    c7:ee:b4:da:35:e7:5d:6e:b4:8e:24:a4:34:7b:04:
                    96:98:e5:2a:09:9c:01:5b:2f:da:e3:fd:d7:c0:51:
                    80:f2:8a:8b:74:18:3e:1b:68:e2:67:5a:55:c5:70:
                    52:45:44:a5:84:25:da:d4:f8:34:9b:3f:e4:62:06:
                    0c:f4:92:d0:1f:1e:ea:ca:1a:68:68:a7:0b:56:e7:
                    54:bd:d6:56:b0:62:4a:1e:c9:25:2b:d8:55:4d:a4:
                    a7:ba:18:08:a7:7a:08:c4:d0:61:fb:c0:a4:ad:d9:
                    1d:b1:5c:d2:da:a8:dd:70:be:fc:df:55:8d:05:31:
                    cc:07:2f:b7:49:d6:ca:dd:05:a9:23:35:2d:b6:11:
                    18:59:cf:4f:9f:99:2b:1d:b0:62:de:30:b0:35:29:
                    bc:7c:07:2b:34:fd:68:fc:48:bd:44:06:6d:25:ed:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DF:A8:39:B0:EF:8B:A9:11:3B:45:23:83:9F:6E:6E:A0:A9:5D:02
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/97F3D14844EC11F09F53687EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24
                  103.243.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:96:1e:96:e0:ed:8b:8c:52:dc:ca:5d:39:14:7b:6c:d8:
         01:8a:5c:aa:12:4c:e0:8e:92:cc:0f:9a:78:54:e2:69:0b:9e:
         c3:ce:f0:1d:a0:46:af:d6:6b:0d:ba:69:16:41:33:2a:92:5e:
         6f:1d:79:37:98:9f:95:a9:d4:3f:5a:c7:5c:36:59:d0:56:94:
         85:09:be:76:7c:09:fa:75:b6:75:51:c1:66:79:72:82:9c:1e:
         43:3f:68:a0:85:24:6d:b8:7f:22:2d:e9:f0:03:f6:8b:1b:46:
         45:20:af:3a:0d:04:e8:a4:b8:d9:e7:31:1f:f9:a2:ab:1a:fd:
         56:8e:19:ee:12:33:ed:74:1f:13:2a:9d:6b:6f:f7:dc:77:29:
         ff:3e:91:e5:66:7b:77:d4:06:25:21:75:07:e1:9e:8d:7a:36:
         a1:f1:e8:65:86:5e:09:09:bf:c6:8d:86:05:11:6c:12:52:fe:
         e8:58:8c:b8:e8:4a:5c:e7:41:be:a1:b0:41:39:bb:9e:c8:41:
         50:9c:b8:06:56:d7:33:48:1e:cc:29:b1:fd:65:b8:37:4c:96:
         da:67:36:10:49:8a:15:88:f8:7a:b2:31:15:31:91:46:b5:97:
         15:ee:e5:82:58:4d:cc:7e:ad:19:99:c3:78:df:6c:ce:30:26:
         ef:71:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:42 2025 by rpki-client