Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa
File:                     A778E94E598911EBA7B14777C4F9AE02.roa (raw, json)
Hash identifier:          Z21NxB4s+kOX44LQC1mykWpLjv30/E11cYoVZ/qqS00=
Subject key identifier:   AD:08:80:DC:B8:AD:93:FB:E9:D5:EC:59:B8:D2:A1:DB:80:E4:A4:74
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       08E0
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:59:57 +0000
ROA not before:           Wed 02 Jul 2025 20:59:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140864
IP address blocks:        103.152.147.0/24 maxlen: 24
                          2001:df4:1480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Jul  2 20:59:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68659dcd-8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:b8:65:8d:c0:07:0b:a5:e1:9c:8e:23:3b:
                    0f:90:9d:2a:32:f3:f1:64:20:d2:e7:e0:e1:3b:51:
                    d4:90:34:83:b3:d7:02:9f:84:07:86:5c:41:37:3d:
                    bb:11:13:f9:0f:21:eb:40:a6:1c:ad:d7:e9:7d:a2:
                    e5:45:d8:4d:39:ee:20:0d:97:ef:0b:48:3a:18:72:
                    56:5d:41:9b:86:d9:f3:9e:34:5a:6d:9a:e1:ec:0b:
                    fc:ba:61:95:8e:2a:7a:de:04:0f:98:6b:d7:f1:5c:
                    e8:96:25:49:83:ec:08:2d:18:24:e2:c3:32:ad:60:
                    6c:11:ea:aa:fd:0e:6f:9c:74:6c:15:32:5e:e9:d8:
                    4d:b6:8b:0e:c7:8d:ab:41:e6:8e:34:c3:9b:1d:08:
                    8d:4c:e7:7a:ed:ad:d4:ef:a3:80:4a:5b:91:d7:1f:
                    43:09:4f:03:70:5c:6f:12:03:42:bc:41:59:a8:56:
                    47:13:36:e2:94:46:ad:50:aa:75:e1:c5:4a:b4:9d:
                    0d:ab:a2:6d:5b:50:96:e7:75:f5:14:a5:14:12:1d:
                    c4:52:4c:1a:83:6c:50:c2:bf:14:26:58:04:e8:7b:
                    ff:a5:bc:cf:8c:b4:77:79:31:2e:4b:8e:ac:f2:c4:
                    cb:10:4d:34:6f:22:d0:80:5d:65:16:77:77:85:44:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:80:DC:B8:AD:93:FB:E9:D5:EC:59:B8:D2:A1:DB:80:E4:A4:74
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.147.0/24
                IPv6:
                  2001:df4:1480::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:fd:1b:c2:e4:99:99:bf:7e:7d:61:63:be:49:4c:43:c7:
         c0:92:f3:3f:56:1e:87:ec:bd:01:e2:b3:7e:25:59:18:6c:60:
         2f:f3:0d:14:86:4a:ce:4d:33:a3:b8:42:86:63:b0:f1:c4:e6:
         b0:cd:02:7b:08:23:88:78:90:2e:b8:72:a7:5f:73:7c:a0:81:
         08:b4:19:64:3c:3e:de:a1:92:96:96:47:e9:69:3e:2e:4c:f6:
         68:33:b7:ed:51:0b:c7:8f:6c:47:17:e2:fc:99:77:ad:47:69:
         29:4c:f5:72:6a:86:ac:db:17:e9:c5:80:09:94:7a:dd:ff:26:
         c1:6c:7c:3a:74:68:08:e7:1e:a4:b0:27:cc:61:38:34:58:04:
         5c:c6:cc:82:5e:08:39:3b:3a:8f:58:f9:f4:98:71:7d:ef:0e:
         44:72:74:ed:0b:65:d7:c0:c9:18:c1:42:e4:5d:4f:99:41:13:
         87:6c:b1:87:12:38:86:bb:d4:4c:12:41:1b:f9:e5:aa:2c:17:
         04:8c:45:f2:f9:7e:6c:d8:ce:d1:e8:6d:27:0a:95:e1:ee:b3:
         c0:87:9b:91:44:f9:a7:fc:f2:b2:d9:b0:01:05:6a:1f:f3:b6:
         d8:f3:2c:8c:ac:12:99:fb:d0:09:c3:28:67:fd:ca:b8:ba:dd:
         17:48:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:00:38 2025 by rpki-client