Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/9CC8124414FB11EC89900016C4F9AE02.roa
File:                     9CC8124414FB11EC89900016C4F9AE02.roa (raw, json)
Hash identifier:          Mu5DpSvcAvLSAvKYi5dzkCjd+xb0gmYIGSkhKtbIqg4=
Subject key identifier:   0C:1C:1E:90:FE:DF:19:D4:FC:47:F9:8A:06:4F:65:63:69:8B:03:D9
Certificate issuer:       /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial:       04FA
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/9CC8124414FB11EC89900016C4F9AE02.roa
Signing time:             Sat 07 Jun 2025 00:15:55 +0000
ROA not before:           Sat 07 Jun 2025 00:15:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135293
IP address blocks:        103.139.198.0/24 maxlen: 24
                          103.139.199.0/24 maxlen: 24
                          137.83.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
                          rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
        Validity
            Not Before: Jun  7 00:15:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684384ba-edf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:17:1c:a7:77:73:9b:36:af:bb:97:32:31:
                    12:f5:13:b8:c6:7a:4a:07:13:b0:91:bc:a1:cb:01:
                    a8:5a:5e:3b:62:96:82:6e:74:5d:68:df:0e:be:f8:
                    82:cb:7e:9a:b5:82:89:d9:c2:1e:f8:86:98:a8:e3:
                    19:1a:39:9c:14:67:7e:77:2c:60:5c:50:24:af:10:
                    aa:ab:d0:bb:83:06:a8:b0:00:99:17:c9:77:dc:ea:
                    70:65:e0:e4:09:16:d0:0d:1a:93:79:62:ad:8f:10:
                    28:25:58:d1:64:50:2e:5a:de:60:bc:dd:85:e2:11:
                    94:99:03:b2:76:a9:bc:15:64:42:80:ae:60:76:d7:
                    b8:9f:37:57:e3:9a:3c:f6:68:ea:84:55:28:ce:62:
                    85:a7:19:cd:7b:02:15:33:24:f0:53:70:2c:33:90:
                    51:fb:91:95:21:22:80:00:da:1d:d0:ab:2a:ae:d2:
                    14:f2:6d:fd:a2:ae:99:27:ab:17:01:de:9a:7c:ac:
                    b8:1c:5c:07:ca:a9:ef:d6:06:22:f6:71:02:90:33:
                    e4:2e:4d:ff:3e:8e:5f:04:15:0e:d7:7f:bf:59:92:
                    c8:f7:ba:33:48:8c:7c:94:12:62:c2:00:5f:87:aa:
                    b8:1b:34:65:57:2d:c3:fe:75:02:48:3c:04:9f:92:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1C:1E:90:FE:DF:19:D4:FC:47:F9:8A:06:4F:65:63:69:8B:03:D9
            X509v3 Authority Key Identifier:
                keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/9CC8124414FB11EC89900016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.198.0/23
                  137.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:b8:23:74:07:b1:ed:77:95:fd:fa:21:b3:a6:53:43:04:
         9f:5c:e4:8b:82:36:bc:a8:b1:0b:5c:66:80:0e:6f:70:91:92:
         00:58:50:a1:49:0a:a3:7a:02:e6:9b:b6:e6:fd:b5:32:da:e7:
         1f:5e:79:59:cb:f9:82:43:b6:77:66:16:f2:9a:a0:c3:d8:29:
         c0:c7:c5:0f:99:f5:24:ea:84:7f:8e:6d:60:3e:3e:be:18:af:
         91:a5:3a:9d:cd:c6:59:80:55:09:5b:53:6b:d8:46:c9:7c:be:
         99:a7:f8:45:89:84:74:29:45:53:5f:a1:35:17:49:5a:2f:a4:
         e6:1a:ee:81:12:da:b1:98:e4:d4:4f:24:47:8e:9e:93:2b:7d:
         84:76:ba:c3:a5:d7:35:65:d9:92:fc:8c:10:5d:d1:75:82:e4:
         2e:2c:3e:38:0c:5d:5e:b7:3a:7a:00:7b:6d:dc:9a:23:c1:2d:
         ca:1f:0a:19:12:7d:a4:cd:c9:b2:2e:d3:79:12:a1:28:51:0b:
         fa:21:4c:72:f3:dc:aa:56:41:78:d1:2d:94:46:ce:90:bc:3c:
         75:22:24:6d:72:df:37:87:0a:04:4e:99:40:7d:45:8a:e5:b2:
         41:8f:4e:42:97:b8:dc:69:68:ee:df:04:2e:50:21:00:b9:98:
         c0:a5:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:26:18 2025 by rpki-client