Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
File:                     D4811B86EDB011EF8DFB1285C4F9AE02.roa (raw, json)
Hash identifier:          SBQxEfvRtigT5bEDI6seg5kkik1Rm2jHZgM5BeYrFDs=
Subject key identifier:   D4:84:A5:9F:8C:0D:88:FD:50:D2:FA:32:57:11:22:77:FE:25:E8:7D
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       049D
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
Signing time:             Sun 15 Jun 2025 03:07:48 +0000
ROA not before:           Sun 15 Jun 2025 03:07:48 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     7586
IP address blocks:        103.177.44.0/24 maxlen: 24
                          103.177.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: Jun 15 03:07:48 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=684e3904-2de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:1d:f9:8e:7b:b6:10:d2:34:69:c2:26:9e:
                    bf:db:81:0c:d5:0d:fb:78:8f:c3:19:ba:81:c0:c4:
                    a5:67:84:5f:53:5c:f3:cc:76:3b:63:c6:64:ec:f6:
                    89:cd:76:73:9d:ac:98:f7:6d:11:cd:90:39:fd:2c:
                    53:7e:f3:63:d2:33:d5:49:20:d9:0d:83:00:fe:29:
                    77:3c:17:40:6f:d3:75:70:76:04:0c:17:e3:fb:65:
                    ec:ba:e3:33:37:4d:bf:90:8f:e3:88:d9:74:eb:27:
                    cd:78:76:e7:59:66:47:7f:89:b7:48:e8:30:0c:68:
                    8f:94:60:45:3d:07:41:00:d8:e2:cd:0b:55:6b:3a:
                    92:59:53:d6:68:09:02:02:ea:e3:6d:2b:cf:81:15:
                    63:de:d1:02:59:c2:c5:43:04:ea:03:59:15:14:7a:
                    66:fc:7b:bf:bb:e1:6c:6d:ea:4c:37:80:44:86:87:
                    e3:d7:a3:88:5d:51:01:3c:db:23:e0:ad:d9:51:69:
                    a6:b9:23:22:35:59:51:65:4f:c4:c5:62:62:3e:65:
                    df:fa:f7:ae:98:c3:89:98:00:ad:3e:8a:7e:96:3c:
                    52:0a:0c:c1:f9:af:0b:3e:af:80:d1:77:77:c9:2c:
                    85:d4:70:a6:f2:bb:29:4c:b9:75:dd:88:8a:8e:13:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:A5:9F:8C:0D:88:FD:50:D2:FA:32:57:11:22:77:FE:25:E8:7D
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:b3:34:72:64:bb:07:67:7e:bc:db:81:86:ab:41:2b:1c:00:
         6b:9b:a1:9f:5e:f7:6a:f3:b9:4f:7b:fe:ff:67:19:47:f7:5f:
         34:31:34:4c:2b:84:14:63:23:62:7d:de:97:47:a8:2c:7b:82:
         ca:c0:02:2c:31:72:37:ba:8a:e6:f2:78:9a:4d:53:cb:28:26:
         60:23:c6:e3:09:5a:7a:e0:47:19:37:10:32:eb:81:af:ae:51:
         49:9c:dc:20:2d:bd:64:72:28:3e:4a:a6:57:53:ad:5d:9b:a9:
         2a:29:77:31:32:7f:44:22:20:41:69:82:09:82:8c:c6:4f:ac:
         42:4d:8c:dd:26:c4:f3:ec:f5:23:47:b1:e8:29:72:e4:4c:59:
         6c:6f:81:6e:aa:5a:cc:b3:b8:b0:ce:d9:54:e1:d0:9a:a1:e5:
         a7:41:cc:ee:75:c5:90:38:34:95:49:9e:74:94:be:37:e6:e6:
         23:02:3e:d4:38:77:d2:1d:9b:80:a5:63:97:b9:c2:a8:71:93:
         e8:0a:ca:08:59:45:16:52:e3:33:68:33:68:48:a3:c4:b4:b6:
         28:f8:1c:d7:c3:e7:1d:4a:26:0d:75:2c:0f:43:0a:b5:0d:7a:
         81:08:2e:82:12:a0:95:e9:36:02:f7:59:e4:f3:82:68:a4:64:
         10:87:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:32:04 2025 by rpki-client