Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
File:                     075B4CC80AC511EEB25A152AC4F9AE02.roa (raw, json)
Hash identifier:          oHGClGt0Y+/Ca/fTjOnKQ8pJUUYEh+Yq1JxoBHlpH4s=
Subject key identifier:   07:AF:2B:43:45:48:70:E2:1B:F4:53:05:4A:15:39:4D:61:82:7E:43
Certificate issuer:       /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Certificate serial:       0182
Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
Signing time:             Fri 27 Jun 2025 03:41:36 +0000
ROA not before:           Fri 27 Jun 2025 03:41:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141192
IP address blocks:        103.131.136.0/23 maxlen: 23
                          103.131.136.0/24 maxlen: 24
                          103.131.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
                          rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
        Validity
            Not Before: Jun 27 03:41:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=685e12ef-f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:b7:19:8a:86:b0:01:b9:e5:a0:45:83:f9:
                    a7:9c:cf:87:56:97:b8:29:dc:00:b6:1d:f4:93:d8:
                    5a:5f:be:08:7c:20:b9:20:fc:d7:9e:89:55:00:48:
                    5d:b0:da:20:bd:17:99:fa:f8:ff:76:05:50:83:c1:
                    c9:6f:ea:10:a8:b4:21:5b:7c:3a:63:e1:df:4e:c7:
                    a5:39:8c:56:64:81:05:03:43:c7:1a:3f:7b:5b:dc:
                    fe:25:94:ce:24:80:0a:7b:92:c5:34:60:5a:93:7d:
                    d4:2d:65:ba:6d:fb:b7:10:62:3d:a4:af:0e:15:bb:
                    a5:83:26:7f:11:87:47:d3:ab:c5:31:e8:ca:b4:1b:
                    fa:13:4a:c0:9a:c7:4e:1f:8e:4a:b9:20:6f:b9:70:
                    54:e9:b8:60:e0:61:24:2e:88:ce:18:a7:70:6a:6d:
                    66:7e:26:1c:e3:b0:22:a3:36:57:27:22:64:5d:0f:
                    2e:41:f3:79:11:e2:de:bb:45:ea:7a:4d:63:74:dd:
                    77:8a:9e:b5:99:68:9d:99:d2:15:7b:0d:7c:93:15:
                    74:c4:5a:0b:b9:23:6f:2f:67:2f:f7:ac:99:b0:c4:
                    e4:1a:04:b2:c9:66:c0:c5:b1:95:65:42:4a:28:a7:
                    8b:4f:ae:1d:2f:d1:07:86:71:ad:99:e3:03:a1:f9:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AF:2B:43:45:48:70:E2:1B:F4:53:05:4A:15:39:4D:61:82:7E:43
            X509v3 Authority Key Identifier:
                keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:16:fa:e0:06:9a:53:64:01:47:12:f1:64:7b:d6:6f:92:
         87:2a:0f:1f:ef:d4:e6:48:14:79:57:87:60:77:db:cd:e6:52:
         75:e3:d2:7b:87:4a:03:aa:38:3f:1d:b4:2c:74:b7:7e:75:58:
         83:01:21:e4:eb:07:d7:46:e6:b5:3c:aa:ee:7c:cb:ad:9d:a6:
         3a:72:25:3c:a7:dd:a8:26:dd:50:97:dc:8e:b4:5b:db:f1:5e:
         82:e7:88:40:c4:77:d7:9e:c6:b6:62:f2:f0:bf:2a:28:32:a5:
         3b:3a:b9:07:1c:71:ea:bf:ab:5b:c6:46:2e:83:1f:e4:4a:99:
         cf:98:2d:1a:7c:73:4a:e4:0b:11:86:44:dc:25:6e:c6:2c:18:
         e0:d5:93:57:b4:7d:2f:42:26:26:3e:68:66:fb:d0:e3:d1:14:
         e8:2d:bc:f9:a1:45:85:78:39:44:ae:80:ec:c5:12:3b:6e:c1:
         66:0f:e3:6e:83:80:54:45:35:9d:8a:21:bb:97:32:45:59:8c:
         4f:1c:30:c7:d9:68:43:8c:74:02:60:59:34:73:25:14:ca:73:
         a7:e7:a8:67:cc:93:d0:21:f0:d6:03:94:b0:3e:a4:8d:d4:cb:
         58:71:a2:57:44:ee:ca:f6:60:6c:8c:46:d9:c7:3e:23:75:21:
         20:72:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:51:27 2025 by rpki-client