Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
File:                     2F43497CA16711EFBB0B733EC4F9AE02.roa (raw, json)
Hash identifier:          ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=
Subject key identifier:   52:8C:24:E6:40:30:26:DE:7F:D9:ED:45:45:8D:2F:9F:97:DF:61:73
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       01DA
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
Signing time:             Fri 27 Jun 2025 02:19:53 +0000
ROA not before:           Fri 27 Jun 2025 02:19:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135060
IP address blocks:        203.34.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Jun 27 02:19:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685dffc9-8edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:54:88:a3:08:a9:6a:b6:98:a4:52:fc:60:
                    c6:c1:14:42:b7:22:b8:85:1b:b3:7c:88:07:fc:9b:
                    df:bf:6a:73:7e:33:8b:89:d4:1a:b2:07:17:73:23:
                    42:23:b3:7d:c3:1b:59:bc:fe:22:da:c6:94:67:d0:
                    07:20:16:b7:f9:f8:9e:8c:de:df:bd:51:9a:45:64:
                    99:ea:53:6a:93:09:31:92:32:a8:8a:30:da:c1:07:
                    c9:af:01:b5:f8:56:c6:4e:c7:b3:55:ba:d6:11:67:
                    f4:4a:d0:a0:d5:a2:a5:07:24:5d:74:a8:3a:77:2a:
                    04:63:f0:cc:00:94:61:77:71:00:ac:64:d2:5f:8c:
                    31:e0:db:93:38:c7:cd:55:eb:07:1d:69:bd:36:fd:
                    fd:5b:aa:92:19:3c:b7:38:15:ee:f2:b0:06:29:6b:
                    98:10:fd:32:97:15:8e:89:5d:2d:12:30:fc:ab:8a:
                    8c:17:c3:46:26:a6:18:26:5f:73:a3:c5:ef:a7:fa:
                    7d:7a:31:92:21:db:89:06:06:cb:7d:31:97:58:3d:
                    8e:1d:58:96:7d:99:8c:1e:0c:e3:04:43:22:d2:f9:
                    87:43:43:12:96:7c:50:2a:50:92:41:27:ed:fd:cc:
                    dc:fa:70:06:30:85:8a:04:9f:66:b1:78:72:00:eb:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:24:E6:40:30:26:DE:7F:D9:ED:45:45:8D:2F:9F:97:DF:61:73
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:f1:98:e5:30:6d:5d:d3:44:39:fd:02:e3:10:5a:4f:ad:
         df:62:22:c3:f2:53:c9:14:2b:09:6c:04:5b:6f:8d:17:d2:a1:
         78:28:86:94:86:59:e6:b7:ee:6a:f1:96:26:95:09:de:3c:b1:
         c2:bc:8a:e1:51:18:41:d4:50:5f:89:87:3f:c4:bf:75:90:85:
         01:42:54:09:c4:f5:cb:34:64:df:6a:1c:91:f3:92:4f:de:0f:
         d6:83:51:db:9a:75:ea:88:1c:95:d5:6c:23:f5:90:a3:45:7d:
         44:6c:40:41:b9:09:c6:a5:19:48:96:f9:a5:84:74:75:44:94:
         1e:34:77:34:ad:1a:15:55:61:8d:bc:9c:cf:3e:77:9a:87:2e:
         c4:1c:35:08:18:35:a1:cd:06:51:6d:03:33:9f:8f:8c:89:4b:
         69:0d:89:d5:09:d3:b4:3a:d2:7d:60:42:f3:9a:25:70:9f:37:
         fb:b1:b8:b8:7a:9d:3e:e9:61:18:36:15:6a:4f:be:88:8d:96:
         6e:b4:9d:bb:30:d7:72:e8:92:7d:98:0e:d5:ce:ef:aa:49:37:
         7b:8c:ab:0b:1e:93:c0:0c:b6:bd:49:76:be:c4:72:17:93:63:
         1b:05:ef:22:9a:bd:0d:7c:6c:c3:3a:01:50:0f:34:93:a6:cc:
         8c:10:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:56:08 2025 by rpki-client