Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
File:                     065737305C9511EDABB9FA49C4F9AE02.roa (raw, json)
Hash identifier:          A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=
Subject key identifier:   B5:06:9D:B6:AF:ED:FE:7D:D7:82:9A:6C:C6:22:5E:94:1B:C7:3A:F5
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1537
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 17:17:53 +0000
ROA not before:           Wed 04 Jun 2025 17:17:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     1002
IP address blocks:        103.114.190.0/24 maxlen: 24
                          103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5431 (0x1537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:17:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68407fc1-5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:f7:a3:3c:0d:b0:8e:bb:7b:c5:02:2a:dc:
                    93:64:cd:1b:ee:a5:3d:af:5e:61:77:f1:e3:52:77:
                    6c:47:4f:b1:87:38:ae:2c:5a:d9:9d:a1:4b:7c:3c:
                    1f:22:aa:f8:a7:cb:ae:05:a5:f7:bb:79:a3:26:eb:
                    31:1e:f8:6d:22:6c:eb:2a:6a:fb:44:b9:2a:c0:31:
                    e7:78:86:f7:5c:30:5f:88:a4:4f:09:f6:7a:e3:01:
                    13:4d:0e:0d:fe:fa:c5:49:07:6f:62:b3:84:db:ac:
                    2c:8e:82:0d:26:4b:64:35:1d:fd:dd:1c:7b:4e:4c:
                    5d:85:12:3d:04:25:5f:54:32:cb:38:83:51:93:77:
                    71:a8:e9:af:2b:1c:53:ab:f8:d5:2c:8c:16:ef:d2:
                    a7:d6:96:c6:17:c0:ce:f6:7f:2c:29:a1:4e:2d:1e:
                    b5:ff:c3:a6:8f:b1:96:c3:69:e5:ac:fd:ea:08:e5:
                    26:d3:f4:27:72:39:48:e0:83:7e:fc:23:04:2c:3e:
                    de:5c:30:3e:f4:98:fc:88:8f:9b:b8:09:ae:5e:f0:
                    8f:60:d7:2d:5e:5f:ea:b0:41:fc:e8:9d:ef:58:23:
                    cb:14:a2:98:46:64:72:b5:c9:ad:db:1a:f4:dd:db:
                    b6:b2:61:68:98:c4:e4:37:ad:bf:25:e1:9b:8b:ad:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:06:9D:B6:AF:ED:FE:7D:D7:82:9A:6C:C6:22:5E:94:1B:C7:3A:F5
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/065737305C9511EDABB9FA49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.190.0/23
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:11:56:e3:a4:c2:a2:2e:71:60:a2:92:c1:3c:55:49:ff:56:
         1f:8d:cd:b5:8a:03:e3:63:bb:eb:61:ee:48:45:22:39:09:b9:
         2a:bd:72:9c:d2:c8:27:11:b5:43:ad:74:43:ca:8c:74:c4:dc:
         45:3f:87:2a:df:b4:6a:57:93:23:e3:d9:cf:d3:8a:55:16:41:
         b9:78:e9:98:29:f2:38:aa:99:03:d6:31:5c:3d:6d:63:76:14:
         59:9a:78:c2:2a:80:27:82:ac:ba:40:d9:62:99:f5:be:c6:b7:
         05:9d:09:50:00:03:d4:7d:94:13:69:ad:79:64:64:13:51:cc:
         62:da:2f:af:aa:90:62:33:0c:2e:ce:d1:1a:a4:97:f0:97:8c:
         3e:3a:cd:d5:7c:e4:50:10:67:84:a3:0a:ee:d1:c1:c7:9e:e4:
         b4:41:6e:25:0b:da:3c:f8:44:a7:c5:fc:d0:d3:f6:17:ca:9e:
         a0:0e:84:53:1e:91:ae:1f:8a:f4:a5:49:d5:ac:03:92:b2:3e:
         d9:17:42:8b:7f:03:01:e7:52:ad:72:5c:41:be:4e:21:86:42:
         49:59:9d:74:97:20:aa:60:01:e7:02:6d:61:26:a6:7e:e8:17:
         03:60:bb:d1:e7:fe:f4:48:e1:5f:4c:a9:7b:d7:c5:d1:b8:66:
         23:c2:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:06 2025 by rpki-client