Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa
File:                     E23B9C48F97D11EDB12DE418C4F9AE02.roa (raw, json)
Hash identifier:          VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=
Subject key identifier:   98:5F:A1:C9:B4:EE:10:9F:A7:7E:50:A2:A2:07:CA:7A:01:C0:7A:F9
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0F45
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 18:00:16 +0000
ROA not before:           Wed 04 Jun 2025 18:00:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     61112
IP address blocks:        103.232.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  4 18:00:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684089b0-cbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:4d:f4:86:b8:52:af:64:1e:d9:4c:80:62:
                    61:cd:53:1c:8b:94:bd:77:b3:6f:26:d0:b5:03:24:
                    3f:01:34:c4:77:52:f7:d6:48:df:b5:20:db:f5:46:
                    f1:49:40:a2:18:da:49:26:ae:cd:82:97:95:d4:2a:
                    de:94:41:28:57:21:25:d2:b2:c0:6f:43:ad:bb:b9:
                    74:f1:f1:66:96:f8:ff:63:07:71:a2:4d:37:de:37:
                    ff:00:45:01:08:2f:33:79:34:5a:7d:9d:aa:63:17:
                    ed:03:29:fe:2f:e8:33:e5:c6:06:a8:b4:3b:3e:3f:
                    ae:d0:1f:ca:82:fd:4a:80:a4:c7:26:ed:97:7a:14:
                    63:e5:37:55:85:f7:55:ca:43:dd:3f:1d:40:30:1a:
                    1e:39:c4:5d:af:08:a9:b1:34:fb:fb:98:ec:60:7d:
                    27:71:61:e0:ab:06:f1:5d:7e:76:01:c3:0a:2f:7b:
                    0a:ac:37:19:15:f6:4d:da:8f:9e:8e:c7:74:b0:1e:
                    41:19:5d:03:fb:09:85:fa:8c:4f:67:6b:ea:83:c4:
                    81:78:52:69:d4:56:0e:20:b5:8b:41:0b:20:0a:d3:
                    36:8e:39:b8:76:19:f6:ae:31:57:2f:4a:f3:5e:e9:
                    91:05:f1:0b:71:db:7f:82:13:a8:5c:de:b6:3e:5c:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:A1:C9:B4:EE:10:9F:A7:7E:50:A2:A2:07:CA:7A:01:C0:7A:F9
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:bd:3d:53:65:a3:e8:5a:cb:05:b1:92:79:4d:33:8d:8d:
         bd:32:5c:a5:1e:42:89:89:df:5c:8a:60:09:9e:9a:16:5f:94:
         a0:eb:e9:5e:a1:d4:04:dc:34:9f:dd:aa:3e:36:43:1c:4b:1d:
         ea:45:68:49:80:05:c6:47:29:57:9b:39:71:4b:aa:c8:61:9a:
         7b:1f:00:67:c1:d0:23:f7:2d:f6:90:0e:a3:ae:9b:2b:6a:3b:
         eb:ad:bc:2c:ec:61:49:93:9f:5b:08:23:28:9b:9f:6c:37:3c:
         e5:50:3f:7e:89:88:b2:7b:16:7e:72:04:d6:03:73:50:93:d7:
         16:12:29:f3:a2:05:34:bc:9c:10:0b:4b:3a:35:cd:07:1d:6e:
         39:61:2d:6e:19:1a:ab:d1:32:bf:15:f4:31:0c:cd:02:80:fb:
         bc:53:09:67:a6:29:f0:77:c0:bb:36:89:57:97:d8:78:87:ff:
         0d:c0:f6:83:bd:96:6a:32:b5:eb:c8:eb:b3:a3:c9:70:2f:37:
         5e:00:e6:8d:1d:25:24:d2:2f:41:09:01:95:26:65:53:66:15:
         77:1e:d6:de:0a:40:e4:90:76:d4:9e:da:d5:58:c9:19:c6:3b:
         83:df:98:fd:67:1e:d4:00:22:e4:33:86:e3:3c:a7:9c:0a:29:
         1f:fc:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:55:41 2025 by rpki-client