Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
File:                     C7B754BEF85311ED8D59CA87C4F9AE02.roa (raw, json)
Hash identifier:          M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=
Subject key identifier:   D8:F5:43:11:B3:B4:16:AD:B2:BA:6D:BB:4D:42:DF:1D:47:E6:CB:44
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       054D
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
Signing time:             Sat 14 Jun 2025 23:23:20 +0000
ROA not before:           Sat 14 Jun 2025 23:23:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45352
IP address blocks:        103.230.56.0/24 maxlen: 24
                          103.230.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jun 14 23:23:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684e0468-c0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:b1:9c:b9:44:76:a4:a9:26:3a:5f:8e:93:
                    8c:e5:c6:83:c8:e6:d1:c3:d1:23:3c:2d:6a:cc:94:
                    9e:c1:16:fe:74:10:be:32:4b:c6:5d:72:df:6f:bf:
                    6f:b2:92:9e:e0:23:07:2b:31:b8:2e:be:fd:a6:a3:
                    6d:d6:bc:46:9e:6e:c4:39:17:d5:76:7a:e3:e9:83:
                    e4:ac:8b:e6:fe:76:eb:0a:b1:92:93:ce:87:39:03:
                    77:3b:20:67:da:d1:b0:fd:0e:04:e8:53:67:4d:5e:
                    34:fd:83:b7:14:f9:f0:67:57:93:eb:e5:6d:ee:43:
                    45:af:8e:ea:1a:0d:87:84:74:8f:9e:06:8b:a7:37:
                    a1:dd:f5:4e:3d:81:4a:56:9b:7a:ab:5b:67:32:3d:
                    e4:5b:43:74:0b:1b:da:fa:30:6c:42:cf:d8:54:e7:
                    4c:d6:a3:36:47:15:d6:e1:5a:36:0f:34:e3:42:1c:
                    10:64:3a:34:30:8d:22:95:b2:eb:fa:b0:9e:55:3b:
                    ca:99:3c:f4:c5:60:cc:b1:a5:42:c6:ab:9b:38:e6:
                    7b:0a:22:d1:e7:e4:4c:dd:01:82:67:5a:b9:47:4a:
                    aa:8f:07:25:73:50:71:c3:8d:19:f3:8f:70:20:59:
                    09:87:13:63:cc:60:52:c6:8a:7e:28:27:c9:03:13:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F5:43:11:B3:B4:16:AD:B2:BA:6D:BB:4D:42:DF:1D:47:E6:CB:44
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0/24
                  103.230.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:01:08:10:6a:6b:19:1b:bc:5c:e1:b2:21:ae:a1:5e:b5:8f:
         4a:72:34:68:86:5d:88:2d:3e:33:d2:df:9a:29:1f:ef:29:24:
         fd:4a:26:8b:0e:d6:b6:fd:94:fb:58:a3:4e:6f:4f:fc:b1:46:
         36:85:15:ce:c9:b1:3c:44:51:c5:de:dd:44:47:0d:28:fc:5c:
         72:ac:aa:41:88:80:6d:61:f8:bb:d8:29:e4:36:88:0c:da:71:
         e5:66:0d:58:e8:46:00:47:54:8a:24:e2:a3:74:b0:72:8c:2b:
         bc:ac:1e:33:71:83:21:58:93:34:12:2d:42:64:44:53:99:cb:
         e6:13:bb:a9:53:94:7f:01:76:fb:8d:7c:47:2f:85:80:96:43:
         60:75:ab:c4:39:c4:ac:7b:c5:57:12:4a:2d:26:53:62:b2:85:
         04:e9:fe:41:dc:b9:3b:93:fc:93:c4:fc:01:00:f6:d5:15:b8:
         d2:97:a8:42:e3:65:e0:b8:6d:b0:b3:ee:21:a0:15:71:45:3d:
         ee:bc:f2:43:a5:8a:31:79:69:66:8d:0a:53:ae:c3:b6:4b:11:
         6d:77:2b:09:06:db:c3:08:b1:f0:26:06:88:05:13:df:5d:cc:
         dc:2b:07:d5:a8:f7:38:e0:ef:66:02:3d:b2:5a:e1:eb:01:cf:
         e6:9c:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:07:31 2025 by rpki-client