Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E4C72AB2E1FF11ED8291C918C4F9AE02.roa
File:                     E4C72AB2E1FF11ED8291C918C4F9AE02.roa (raw, json)
Hash identifier:          evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=
Subject key identifier:   66:95:1C:25:00:1B:07:24:75:EA:7A:67:AA:47:68:12:BB:18:F9:78
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1538
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E4C72AB2E1FF11ED8291C918C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 17:17:53 +0000
ROA not before:           Wed 04 Jun 2025 17:17:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     208046
IP address blocks:        103.114.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5432 (0x1538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:17:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68407fc1-20db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:ed:fd:f7:73:c7:2e:f0:43:04:34:90:d8:
                    d2:06:d8:d1:16:04:d7:6d:74:f2:68:e6:bc:07:b4:
                    7a:85:06:04:e4:91:c5:1a:d1:2d:c6:d9:9e:2c:26:
                    32:6d:0a:39:a6:d8:cf:cb:a2:da:e1:d0:b8:60:22:
                    e7:76:d5:76:e1:8a:ec:64:de:33:82:40:28:91:d6:
                    cf:0e:dc:f9:38:46:2d:a0:10:66:14:fd:3a:4e:00:
                    c8:2e:2c:dc:0a:5d:03:2f:1a:11:06:a3:d0:b4:55:
                    f2:8b:51:dd:2d:71:46:6d:f0:b2:a6:3c:97:c2:18:
                    60:86:09:8b:9a:94:35:80:29:74:78:c7:a4:91:95:
                    4e:b6:0a:60:d4:2d:bd:86:9c:ce:36:fa:6f:17:8f:
                    c4:3e:3f:ba:46:97:fe:f9:a5:94:e9:b7:8a:49:9e:
                    9e:70:5b:28:97:25:a6:4d:f4:c2:c9:d3:aa:ce:0e:
                    9e:b6:73:fb:31:df:98:59:a7:5c:65:8a:49:a5:0b:
                    c8:40:54:01:7b:72:6d:4e:1c:b1:1f:23:a3:47:ea:
                    b3:ba:fe:23:fc:a8:4b:2f:74:47:cb:eb:d9:8b:50:
                    e5:da:ce:96:7d:35:50:5c:41:02:5a:20:99:26:ec:
                    bc:b6:8d:d9:0b:c2:ae:ba:c6:28:2b:e6:52:95:f2:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:1C:25:00:1B:07:24:75:EA:7A:67:AA:47:68:12:BB:18:F9:78
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E4C72AB2E1FF11ED8291C918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:94:a8:d8:2e:3a:bd:e1:87:e7:04:9e:69:11:29:38:84:f9:
         d3:a3:ce:9e:e1:e3:89:f2:f2:36:92:66:47:62:f5:f6:2e:c5:
         9c:a4:dd:84:9b:fe:0f:30:6d:0d:9c:ea:f2:ca:ab:e4:cc:fb:
         06:45:6c:0f:86:c5:8d:8d:92:36:6b:fe:64:75:c2:34:d2:5d:
         5e:35:a8:5a:2f:29:40:ab:68:7e:37:b7:1f:be:2f:60:47:6d:
         18:09:2e:d0:eb:fa:fb:02:2c:98:34:75:5c:c3:86:27:7c:65:
         ee:6b:95:d7:96:c1:f7:ab:54:f0:ae:89:a2:aa:a8:9f:e2:da:
         1a:1e:50:6b:4f:94:45:0d:d2:ec:ab:eb:bf:b4:6c:dd:b5:fd:
         d0:be:01:28:57:a6:24:01:19:4f:33:9f:13:ca:c9:b0:1e:5f:
         25:9b:2e:7d:77:b0:20:2c:09:7e:e4:6a:29:e7:f9:2d:13:ef:
         0b:73:f3:bd:c3:8c:19:18:82:80:38:0a:3c:91:64:ab:42:ae:
         ec:e6:55:fc:03:3d:1a:da:65:03:6d:2f:c9:27:15:3f:08:51:
         1f:6a:1d:f1:33:bc:7e:af:da:9f:56:4b:2e:13:a2:10:3b:2b:
         ba:a8:43:18:29:2f:8b:42:a4:77:1b:6d:e5:72:1b:72:c6:3b:
         69:ec:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:14:54 2025 by rpki-client