Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
File:                     6580E03C79E511EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=
Subject key identifier:   DC:D9:C5:42:1D:90:8E:E4:C9:03:7F:93:C3:DC:B7:90:68:79:F8:06
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0A81
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
Signing time:             Fri 02 May 2025 20:30:42 +0000
ROA not before:           Fri 02 May 2025 20:30:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     10103
IP address blocks:        115.160.135.0/24 maxlen: 24
                          202.64.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 09:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689 (0xa81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: May  2 20:30:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68152b72-6672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:74:58:56:c4:fb:61:c6:d2:15:18:2f:bf:
                    d0:4e:e4:08:35:86:68:83:4d:10:cd:8c:07:ef:4e:
                    26:99:67:49:db:cf:bd:58:b5:58:3e:3f:eb:27:e6:
                    ac:26:e4:29:20:73:3c:9b:ab:75:48:89:75:fe:6b:
                    9b:71:48:c1:40:1a:a1:df:b8:a1:b0:51:80:94:74:
                    11:c5:d4:e7:1d:a2:8a:9e:0d:68:23:97:b4:c1:21:
                    99:d4:c3:9c:3c:e8:ac:a0:99:0c:0f:75:5c:95:9b:
                    4a:8a:00:b8:02:aa:34:e1:e0:87:31:b4:8d:2c:89:
                    f2:26:b6:ce:f6:35:0d:1c:4a:f6:9f:b7:16:fe:f6:
                    69:a1:d7:2e:e9:6f:fd:f7:bf:05:76:87:0d:c8:1f:
                    d3:01:f6:46:63:db:6f:f3:fc:d2:9a:96:aa:6a:af:
                    c8:69:94:30:09:3b:fc:be:19:19:bd:79:a2:38:a9:
                    3c:68:a1:2c:50:7e:b0:d8:d1:b9:a7:3b:c7:a5:82:
                    15:c0:fe:a0:46:01:24:d8:a8:5b:3e:05:5e:80:b8:
                    ac:f8:4d:1b:20:8a:ef:af:3e:e8:5b:a4:13:35:21:
                    00:7a:23:ff:32:2d:2f:35:de:a5:f6:0e:71:8a:69:
                    b0:54:87:71:fc:c5:54:4b:9b:06:ac:a8:7d:55:d9:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D9:C5:42:1D:90:8E:E4:C9:03:7F:93:C3:DC:B7:90:68:79:F8:06
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.160.135.0/24
                  202.64.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:fb:2f:08:5e:95:8b:7f:c1:8f:fb:87:fe:80:82:48:49:
         32:e0:a5:c3:d0:c7:c2:1a:58:f8:36:8f:d7:e5:a7:f8:4f:56:
         50:7f:ee:a8:a3:0e:f0:45:f0:ba:93:b4:97:b2:a9:3d:f0:8f:
         d3:ac:2f:65:54:67:17:bc:31:6c:ca:9f:be:28:a8:87:51:f8:
         d4:20:95:e5:f3:bf:7d:12:51:a3:fd:ef:24:cd:3e:79:e8:94:
         f8:06:e8:b4:ae:f3:b6:1a:41:54:f6:bd:05:56:26:ac:fa:34:
         93:8b:74:ac:0e:38:bb:27:c1:cd:8b:3d:04:4a:ee:18:18:55:
         5a:0b:ce:c7:7f:1b:6e:88:fd:c2:f7:9b:69:b9:ef:48:a8:93:
         a0:d8:b3:c3:63:d3:d1:e1:c2:85:c8:c9:84:ea:4c:a0:f1:7d:
         fa:44:2d:3b:bc:40:a5:fd:c3:84:31:5d:0b:4f:83:ce:b5:13:
         4b:cf:83:31:06:94:46:23:48:26:33:40:2d:cc:be:3a:01:0e:
         b0:ca:b5:82:83:c2:33:54:24:e2:89:f8:d8:c3:fe:ff:2d:91:
         34:4f:0e:c5:a1:32:cc:24:61:7e:5f:12:b6:c1:1d:8e:21:8b:
         a0:37:6f:21:09:8a:11:67:b1:ce:73:42:e7:63:92:d9:62:f0:
         87:eb:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:24:42 2025 by rpki-client