Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/B7C5A65A789511EF9F788D6CC4F9AE02.roa
File:                     B7C5A65A789511EF9F788D6CC4F9AE02.roa (raw, json)
Hash identifier:          FLIaC8+H2xNjpJ35zOczqWgOPR2HIQ5C5y39ODcYtx0=
Subject key identifier:   7B:D7:04:39:EC:BC:0F:9D:5D:58:57:5F:06:54:19:4F:7F:12:97:02
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       0621
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/B7C5A65A789511EF9F788D6CC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:55:09 +0000
ROA not before:           Wed 02 Apr 2025 22:55:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49304
IP address blocks:        103.90.136.0/22 maxlen: 22
                          202.8.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Apr  2 22:55:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc04d-5d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:8b:bd:9e:83:77:f8:1a:da:84:3e:86:dc:
                    5d:0f:68:36:d9:3c:7a:10:e7:30:0b:29:17:8b:db:
                    c6:0d:db:36:14:f8:d0:92:d3:26:17:9e:9d:6b:ca:
                    01:5a:e9:69:33:b7:d4:de:d3:98:bd:fd:03:39:bc:
                    27:6a:87:32:23:7c:4d:0c:a3:5e:fd:b8:d6:a8:e4:
                    b5:0b:81:ab:fc:4f:0f:78:88:4b:ac:a9:96:00:30:
                    27:99:66:21:66:49:66:d4:37:30:86:84:ac:bf:ba:
                    9a:b2:db:fa:c4:c1:b2:87:f4:f8:44:c5:17:c8:2e:
                    4b:70:7e:b4:52:d2:b4:ba:6e:54:bd:42:ee:21:6c:
                    72:82:fb:b8:47:85:ed:48:5a:87:7b:f0:fc:02:7a:
                    fd:c3:7d:d0:5f:72:ef:39:6f:96:ae:a2:50:a2:2d:
                    e6:45:be:03:06:6e:ba:ff:0d:d7:1d:13:65:a6:aa:
                    54:4e:35:9a:1a:9a:41:17:ac:09:0d:9a:65:e9:16:
                    d4:39:60:e9:93:bd:17:71:7a:32:3c:3a:88:70:88:
                    42:d4:97:49:ca:b9:63:63:25:f5:74:6d:ac:fd:5f:
                    ce:47:78:4f:63:b6:7d:c2:ec:be:bd:a5:af:df:a0:
                    c1:c8:0b:a6:16:7d:e2:df:21:ca:61:47:bb:e3:64:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:04:39:EC:BC:0F:9D:5D:58:57:5F:06:54:19:4F:7F:12:97:02
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/B7C5A65A789511EF9F788D6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.136.0/22
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:61:b4:05:00:c4:4c:6b:4f:58:a4:7e:c8:e6:fa:17:d0:
         92:f6:23:9f:f5:2b:4a:42:c2:d7:b4:f7:0a:97:82:54:3d:eb:
         5b:ff:6d:24:46:4f:82:af:a8:9d:a7:23:8d:05:36:77:e8:12:
         1d:9a:df:a2:ed:e9:81:1c:8f:64:ea:3d:fd:29:cf:a7:91:5e:
         2a:05:51:d7:be:d2:c5:f9:cc:27:f9:87:66:b2:ec:c5:81:9a:
         db:f1:4d:b6:45:b0:c5:5e:f9:bc:d3:b1:16:cd:f1:f4:9f:73:
         66:14:90:7b:71:1a:1d:5b:41:f2:44:2f:fb:33:9c:3f:18:e2:
         ef:aa:ef:d8:d0:38:47:87:f7:0b:c6:cb:eb:ba:57:d8:8c:ca:
         45:30:37:e1:cf:72:8d:b6:95:17:60:8c:80:20:a0:22:9c:31:
         e8:1d:86:20:53:bb:3d:6b:3f:84:c6:49:bb:12:aa:9d:e8:27:
         8a:91:1d:cc:7f:a4:54:6f:83:e9:e4:41:14:99:4c:e7:45:e1:
         6d:03:6a:e5:5d:b1:5e:83:ce:29:12:f3:79:7a:a8:51:5c:a9:
         8d:29:ec:51:f6:a4:2a:c9:1b:e5:39:04:23:b5:35:eb:a6:a0:
         d9:83:44:23:f8:0e:30:c2:b5:74:fa:08:e0:4e:3e:26:e1:16:
         57:cf:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:13 2025 by rpki-client