Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/69A20286514B11F0B8A8C66DC4F9AE02.roa
File:                     69A20286514B11F0B8A8C66DC4F9AE02.roa (raw, json)
Hash identifier:          FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=
Subject key identifier:   E4:78:32:14:E1:60:2D:4B:F1:8A:CA:BA:61:5B:5F:42:23:91:02:A4
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       038A
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/69A20286514B11F0B8A8C66DC4F9AE02.roa
Signing time:             Tue 24 Jun 2025 22:34:38 +0000
ROA not before:           Tue 24 Jun 2025 22:34:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139074
IP address blocks:        103.185.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: Jun 24 22:34:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=685b27fe-249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:b2:eb:3d:9a:50:63:4d:ba:ba:aa:d8:a3:
                    0d:dd:aa:a8:9e:35:24:e9:e4:7c:4e:2d:63:22:7b:
                    a3:c3:9e:27:28:e8:75:8a:ea:91:2f:90:80:7b:02:
                    f2:ca:16:83:3e:21:89:7c:b4:0d:56:a7:ab:f7:e0:
                    06:60:1a:84:82:ce:03:8f:21:1e:1c:38:b5:d4:dc:
                    9d:16:a5:59:2a:e5:ad:0d:4f:13:1a:a8:9a:f1:d7:
                    ac:35:87:2f:dd:36:e8:90:ec:02:db:28:89:a7:1f:
                    30:55:4a:8a:c2:e8:a6:1d:a3:89:68:2d:5e:69:4c:
                    89:df:5a:2f:93:8d:56:bb:ca:07:73:13:6a:21:a0:
                    09:ec:53:42:93:2f:4f:95:45:f7:ef:e3:a7:c9:03:
                    e4:e6:9e:c6:14:41:ba:e9:f4:78:ff:4a:0d:89:62:
                    fb:e1:93:45:06:2b:9d:43:be:71:45:40:68:5b:54:
                    df:c8:46:8b:22:47:7b:7a:75:01:ef:4c:d2:d7:21:
                    e3:12:8c:b4:7b:92:6c:cf:e5:a3:63:4f:73:43:e3:
                    6b:ec:60:d2:75:b1:65:ff:86:fd:30:60:9e:ea:f3:
                    62:3b:e5:7b:9d:8b:34:59:01:6b:b2:a9:68:9b:d6:
                    eb:2f:ef:06:31:ea:03:3f:0a:39:07:8d:a4:52:92:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:32:14:E1:60:2D:4B:F1:8A:CA:BA:61:5B:5F:42:23:91:02:A4
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/69A20286514B11F0B8A8C66DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7c:1e:8d:ac:7a:e7:48:99:53:b0:91:c2:0b:57:e4:f9:97:
         a9:e0:27:59:ba:62:d3:b1:83:65:ff:72:00:54:c2:ae:00:00:
         3b:a7:ef:9c:9e:05:db:cb:64:6e:e8:36:ad:41:e2:69:c1:6b:
         8d:7d:f8:01:1f:7e:a8:f5:fa:f4:51:32:a8:a5:0d:28:95:e0:
         27:6e:2a:f4:14:df:ed:88:9c:cc:8a:d7:24:7a:e5:6e:1e:70:
         18:38:13:d3:06:48:7d:0d:93:33:f5:1d:a5:0c:10:03:26:19:
         38:7e:d1:60:0a:d4:f9:ef:1d:d2:3a:eb:c9:ef:b0:8c:7f:4a:
         07:ab:ad:b8:43:9c:a2:a7:70:2d:bf:e4:7b:48:3f:97:64:44:
         2a:42:16:ea:44:17:e1:2b:4b:64:ac:c8:1e:12:d7:58:8c:58:
         71:95:14:bb:b9:b4:37:c2:d2:43:72:d4:72:1a:d4:a8:c2:2c:
         cc:16:67:eb:14:81:7a:8a:42:76:63:89:24:c3:d9:88:2f:07:
         35:a1:28:3a:37:ac:04:8f:bd:e7:46:e6:83:e8:8b:12:38:88:
         73:eb:12:63:11:a0:30:5b:86:6c:4e:2e:c4:97:6e:7e:61:a9:
         67:5f:3c:90:2b:ea:d2:3b:eb:fa:3f:71:3c:aa:a5:af:1e:6a:
         ca:f6:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:41:29 2025 by rpki-client