Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
File:                     E09D5D9C7F0711F092740742C4F9AE02.roa (raw, json)
Hash identifier:          xL/q28ZzTyEq426yDF7Cs7m7+jftmvtET2bmtZZg99Q=
Subject key identifier:   74:E4:08:A8:3F:FB:AB:B8:F9:C5:93:82:05:0C:00:EF:96:6C:AB:04
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       06
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
Signing time:             Fri 22 Aug 2025 03:27:06 +0000
ROA not before:           Fri 22 Aug 2025 03:27:06 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     149014
IP address blocks:        103.147.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Aug 22 03:27:06 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68a7e38a-1c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:84:c0:b8:ca:d5:ae:33:04:69:6c:32:b1:
                    f0:08:ee:75:87:60:4d:6c:df:7e:a1:28:46:d8:d9:
                    83:4c:6a:36:c5:4a:37:0b:19:09:0f:9e:12:da:dd:
                    21:f9:dc:60:ee:59:90:30:39:7e:67:48:99:62:e5:
                    96:12:db:ef:1f:10:ec:ae:b2:41:37:37:ae:1e:aa:
                    c4:06:99:66:bd:ad:ee:20:5a:ff:4f:d1:e0:52:a6:
                    db:cc:1d:f3:6c:79:54:ec:6e:7a:86:02:07:25:3d:
                    98:4d:8a:5a:b0:5e:cd:0b:29:90:4b:c4:72:fd:99:
                    3f:7a:d7:f0:00:1a:7a:53:9e:f8:b9:cb:14:ef:1e:
                    d3:cf:f7:83:1a:e0:c4:a7:75:5d:26:90:95:db:85:
                    ac:75:e9:96:ed:2c:db:35:be:30:34:64:0d:b2:ca:
                    02:e1:68:15:1b:43:ca:a6:65:77:0b:5e:69:7c:65:
                    d8:bc:67:35:eb:29:2c:bb:3e:70:c9:db:31:59:99:
                    5c:29:5e:7a:64:37:d6:05:26:15:2e:a3:45:1d:aa:
                    84:3a:02:77:52:c0:c9:fb:5a:44:76:eb:e9:51:db:
                    ba:ee:5e:3e:95:0b:0c:09:b5:c1:92:8d:f2:e6:9b:
                    fb:fe:12:44:ab:46:ce:82:92:b1:d4:94:2e:ff:54:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:08:A8:3F:FB:AB:B8:F9:C5:93:82:05:0C:00:EF:96:6C:AB:04
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:42:fb:dc:2c:18:d1:e2:a2:2d:5e:05:7c:05:b3:1c:18:
         52:53:6f:6d:98:9a:17:2b:2a:a8:d2:2a:e2:81:66:62:68:1c:
         f5:57:70:10:d1:e2:6c:6c:3f:a1:e6:ff:e9:5b:06:2f:a5:b1:
         6f:85:01:ae:4f:b7:1c:05:b8:ff:41:11:71:c5:08:09:22:24:
         5b:e7:aa:97:78:2e:eb:69:c3:62:62:22:5f:2c:62:47:50:7e:
         e8:d3:53:f4:26:6c:35:c8:f3:e6:56:87:5b:2b:46:d7:16:dd:
         0b:5a:5e:9b:b1:cf:5a:18:12:1f:53:2f:76:fe:31:d9:e5:2e:
         55:b3:cf:4f:4a:b0:34:4d:e8:63:41:d6:55:8e:da:80:f5:ab:
         ef:26:f7:a9:1b:41:86:11:1a:4f:57:aa:82:14:f8:73:16:be:
         7f:e4:e4:db:8e:08:fa:ca:15:ed:f1:48:cb:e2:1c:7a:97:e6:
         79:dc:49:ee:1c:6c:7f:5c:60:69:4f:de:50:c4:e6:41:cd:02:
         86:34:84:0d:7a:e8:b0:65:e8:52:fb:db:fa:0c:0c:f3:89:3b:
         1c:6e:8a:2f:d8:e3:89:a7:50:b5:59:bd:cf:d4:52:7d:42:39:
         62:24:99:40:1d:81:c3:1c:e3:07:0b:7b:b4:3e:46:1c:4a:11:
         6e:9d:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:06 2025 by rpki-client