Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
File:                     6FE0D496064A11EDA0A92068C4F9AE02.roa (raw, json)
Hash identifier:          JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=
Subject key identifier:   CE:97:05:4B:44:BD:E7:B4:1E:7F:C0:CD:1C:6B:6B:8F:9A:D8:73:57
Certificate issuer:       /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial:       0284
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
Signing time:             Wed 07 May 2025 01:39:05 +0000
ROA not before:           Wed 07 May 2025 01:39:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132730
IP address blocks:        103.88.155.0/24 maxlen: 24
                          103.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
                          rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
        Validity
            Not Before: May  7 01:39:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681ab9b8-e0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:b8:27:e5:06:91:f1:8f:db:6a:42:d4:bd:
                    29:dc:6f:d5:12:0b:14:1a:17:32:c0:85:d8:81:38:
                    34:c3:7b:7a:b2:74:d5:48:d2:8c:af:5b:39:58:56:
                    af:03:1a:76:3c:ee:84:67:91:28:be:ab:2f:f7:e6:
                    18:3c:4e:74:29:fc:a3:46:ea:a5:ef:fa:02:df:b3:
                    65:64:5a:02:c9:c2:cf:32:d5:12:fb:72:7d:34:35:
                    7b:40:71:e2:b6:0b:83:99:7c:73:9a:91:55:4d:8f:
                    c5:f6:ac:c6:7a:3f:48:26:fd:38:09:f6:eb:a4:c1:
                    94:6f:6b:c9:a9:d0:d2:2d:50:81:6d:ae:bd:0d:f0:
                    22:c4:90:50:d4:2c:83:ec:d3:11:03:2e:94:a7:62:
                    95:34:89:7a:3c:9e:c4:3f:0f:2d:b7:c8:d1:0c:5f:
                    92:92:2c:f3:df:1e:1b:4d:9c:ae:ec:19:14:89:9d:
                    32:89:2d:f1:93:dc:27:77:e5:cd:93:85:c3:0a:96:
                    d9:ae:3d:e0:07:fc:22:8f:68:e5:89:4c:6c:f9:0c:
                    03:db:2b:88:9b:34:07:b0:82:8f:62:1a:01:ff:9a:
                    3c:21:5d:ef:9c:b3:ad:80:44:ae:d1:6c:47:35:03:
                    2e:ad:aa:c7:33:96:5c:73:0d:7a:6e:b4:a6:85:79:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:05:4B:44:BD:E7:B4:1E:7F:C0:CD:1C:6B:6B:8F:9A:D8:73:57
            X509v3 Authority Key Identifier:
                keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.155.0/24
                  103.88.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:b4:64:d5:47:e4:79:61:8d:4b:f6:7e:c6:d8:b8:82:ef:d5:
         c6:d1:64:33:b5:af:cc:98:4b:1d:b9:30:c9:59:e2:22:3a:a7:
         2a:71:7a:64:13:a3:40:cf:dd:e7:a9:d1:0f:cf:89:61:42:41:
         77:06:0a:49:81:d8:ce:5e:41:67:ee:36:c7:b0:08:a8:cc:e3:
         3f:aa:3a:6c:40:7e:5e:17:76:8e:5b:00:28:49:68:01:6c:09:
         41:01:54:48:d3:b2:38:ae:3b:87:76:7e:42:78:9d:a8:a4:e8:
         09:56:8b:a5:5b:9c:bf:f3:11:d1:65:cf:70:03:0b:c5:1a:6f:
         90:2e:6a:d4:b5:d8:9b:d7:dc:ff:a2:26:d6:58:cb:3f:8a:e6:
         ae:fe:c0:2c:0b:17:51:77:3e:e4:62:1f:82:a2:48:11:4c:1d:
         0e:d4:5f:7c:62:ea:9e:f9:d6:0e:88:39:b9:a0:c8:c8:99:7c:
         cd:d8:fd:19:aa:ce:de:9d:e7:66:0e:ee:0a:69:2a:38:30:c7:
         b6:c0:cc:dc:04:ad:65:cb:2e:2a:06:2f:64:da:f9:1b:28:30:
         c5:bd:1f:f7:18:75:68:56:2e:82:85:06:55:64:fe:e1:55:8a:
         aa:11:82:62:e9:da:37:c7:07:18:94:8e:d9:8c:34:bc:01:97:
         2a:6d:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:18:51 2025 by rpki-client