Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/6C113EF8EB1211ECB34A394DC4F9AE02.roa
File:                     6C113EF8EB1211ECB34A394DC4F9AE02.roa (raw, json)
Hash identifier:          V0UtMWuGfgSKuCGeFi3ruRU1wDK2vvS2zyP8f3YgcB8=
Subject key identifier:   41:81:F5:E7:C7:17:5D:23:F7:8D:64:21:84:52:CE:74:70:EE:CC:5A
Certificate issuer:       /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial:       02E0
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/6C113EF8EB1211ECB34A394DC4F9AE02.roa
Signing time:             Tue 17 Jun 2025 00:58:32 +0000
ROA not before:           Tue 17 Jun 2025 00:58:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137493
IP address blocks:        103.189.144.0/23 maxlen: 24
                          2400:8620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
                          rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
        Validity
            Not Before: Jun 17 00:58:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6850bdb8-aaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:0d:cd:c0:7e:48:4c:9e:2a:92:07:cb:69:
                    89:4e:03:02:4c:60:f2:c6:55:be:a2:c2:9b:2a:67:
                    c4:7e:4f:ea:d0:d0:11:00:9d:56:f0:0a:49:88:22:
                    92:fa:a8:32:6b:b1:73:72:4c:96:38:9d:57:99:8f:
                    b2:e2:38:86:0b:64:c7:f4:82:f3:8e:4e:ff:3b:a0:
                    6a:7b:1f:72:4c:bf:e0:15:71:71:61:19:40:6d:8d:
                    08:4a:29:cb:11:b1:74:b7:17:89:0e:83:b4:8d:ae:
                    70:54:da:94:8f:36:be:a2:46:8a:de:52:26:69:24:
                    d0:cf:67:3c:6b:2c:ed:26:76:e2:a6:a0:1f:06:63:
                    42:e6:2d:96:6f:17:de:e3:68:32:ca:4b:87:fa:5a:
                    6c:7b:30:ca:d0:43:b2:06:3a:1c:ae:8b:dd:c0:ad:
                    db:1f:1e:57:79:62:2c:18:c7:be:8c:13:bc:3f:42:
                    18:27:81:7f:e9:6c:8d:22:ca:d1:ac:83:fc:8e:1f:
                    84:b2:e5:a4:6d:5b:c0:96:6e:bd:f1:43:68:ad:22:
                    32:0c:39:4a:85:26:dc:9e:01:73:27:70:0a:9f:90:
                    73:a8:a1:24:56:44:c6:e2:70:a4:f1:2b:bb:9f:7f:
                    44:9b:39:6e:6f:e8:cc:2a:63:d2:4d:2b:ab:c4:28:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:F5:E7:C7:17:5D:23:F7:8D:64:21:84:52:CE:74:70:EE:CC:5A
            X509v3 Authority Key Identifier:
                keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/6C113EF8EB1211ECB34A394DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.144.0/23
                IPv6:
                  2400:8620::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:ce:10:6e:58:30:27:99:4c:2d:cc:69:61:d7:4d:c4:64:
         72:a5:9e:6c:2b:0b:05:87:88:ec:f0:0c:46:5d:68:da:81:5b:
         ef:dd:0d:e7:26:c2:a7:47:5a:08:10:36:0a:9a:3c:6c:13:81:
         ed:50:49:c0:f3:b8:94:1f:75:46:cc:15:ed:fc:47:40:2a:21:
         83:60:61:dc:40:db:85:6f:40:8f:b2:03:56:fa:c4:7a:ba:9e:
         b0:7a:4d:c9:fd:8d:e6:0c:b9:32:48:cb:8d:a6:48:6a:08:3a:
         89:97:50:0f:53:f5:ef:1f:66:76:12:49:07:c8:42:c5:9c:4f:
         f4:f7:88:ea:51:06:5c:d7:c8:73:49:b6:ee:1c:16:e2:3d:7b:
         9d:05:26:6b:a3:3f:bf:0a:79:b6:19:b1:46:78:94:09:21:eb:
         f4:a2:3e:7c:69:8e:f5:b3:b5:79:d7:cb:dc:b9:2e:12:05:1a:
         9e:1c:92:8e:73:df:cf:31:78:a5:2e:0d:f2:92:63:ff:de:10:
         78:3b:6f:0a:1e:35:a0:76:9d:78:8f:57:6d:9f:bf:46:d1:05:
         ba:08:0b:1a:02:bf:6e:ea:0f:4d:52:62:a7:11:32:9b:06:2d:
         1a:ca:4c:c5:31:65:e7:12:2a:9d:5f:73:25:df:a2:ed:53:06:
         3b:56:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:54:25 2025 by rpki-client