Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
File:                     F99707CEBAC511E9A77CDE7BC4F9AE02.roa (raw, json)
Hash identifier:          5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=
Subject key identifier:   BC:80:DB:EB:32:AD:5A:95:7B:27:E9:69:32:38:48:57:5A:6F:C3:9B
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1536
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
Signing time:             Wed 04 Jun 2025 17:17:52 +0000
ROA not before:           Wed 04 Jun 2025 17:17:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.114.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 16:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5430 (0x1536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:17:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68407fc0-979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:eb:ff:6f:9a:3b:06:86:37:a3:4e:66:af:
                    7a:23:55:46:b0:9c:86:1b:58:61:1e:27:46:17:f7:
                    5d:53:79:57:f0:29:a8:95:1b:9c:12:48:35:1f:12:
                    8a:bc:8f:91:3b:fd:fd:3f:23:36:5f:37:24:ef:55:
                    0b:49:73:40:55:32:13:b3:2c:9f:8b:ff:4a:fc:b8:
                    56:81:72:f8:9b:9a:50:bc:0b:2e:42:b7:94:59:08:
                    21:f6:2d:34:7a:17:a7:b4:55:91:fd:80:ed:15:b3:
                    2d:d7:7b:1b:59:06:56:f4:8b:92:3d:d1:e2:35:02:
                    21:bd:5d:d7:df:04:93:0c:5f:43:47:a0:24:4d:1b:
                    de:b9:36:7c:70:0d:b4:ee:aa:2c:1d:aa:ec:80:c3:
                    e3:29:ca:e1:f3:9f:a2:9e:db:0f:5d:59:35:d6:61:
                    ee:1a:58:63:6a:d8:32:f2:a8:de:50:da:76:06:6c:
                    d6:89:d2:3e:06:e0:17:b2:75:07:66:5b:c0:3a:fe:
                    e7:3d:40:7c:70:1f:18:1b:11:99:b3:81:33:f4:ca:
                    ad:2b:72:26:7c:28:2d:d1:30:0b:f6:71:ab:12:4d:
                    78:47:50:1d:f2:bf:a2:c3:f5:50:06:97:c8:27:78:
                    2f:77:65:61:ad:c0:84:3e:e2:a7:1d:b7:9f:85:55:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:DB:EB:32:AD:5A:95:7B:27:E9:69:32:38:48:57:5A:6F:C3:9B
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:ff:45:1b:74:cf:4e:4d:48:17:1a:ae:e8:de:3d:43:c8:
         3e:62:18:2c:52:16:8a:29:b8:f5:e1:ec:87:b0:c5:62:a4:3a:
         15:6e:e5:81:65:e5:27:16:5a:e1:21:b9:b5:2f:d7:a5:75:f9:
         69:2b:ae:31:d5:74:11:10:42:0c:81:c5:8d:1e:16:b9:7a:b6:
         c4:0d:32:c8:64:fd:91:36:5f:20:0e:ef:ff:18:b9:06:7c:2b:
         8d:e6:47:dd:e3:ee:b2:6e:bb:d6:ae:5f:f4:c7:e4:a2:9b:a3:
         15:1c:b1:f3:eb:71:24:3e:f8:0a:ce:46:20:34:d3:d8:1d:74:
         ef:5f:5c:16:71:fd:b5:ca:d9:4b:55:c3:01:f7:54:0d:f5:0c:
         fa:3c:77:68:20:d2:de:f6:95:28:72:c6:21:e6:d9:3b:9b:6b:
         b8:a5:42:7a:8e:12:23:a2:2d:d8:e5:6e:d6:76:97:29:25:7a:
         fc:d3:c0:30:35:54:d8:79:26:72:42:9d:9e:4e:7c:24:73:01:
         04:bb:4a:0b:85:99:ad:ec:4b:bd:54:ce:fb:38:71:0b:0e:41:
         ce:37:d0:d0:4e:47:59:b7:03:84:25:f6:fd:1b:31:b5:21:15:
         cc:aa:93:35:fa:e8:c4:59:35:28:63:63:d1:e0:8f:a1:4d:0b:
         6d:36:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:58:36 2025 by rpki-client