Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
File:                     A6C94076624711EC9B815772C4F9AE02.roa (raw, json)
Hash identifier:          XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=
Subject key identifier:   DA:5A:6D:1D:A7:45:22:70:74:65:05:C0:4D:5B:BC:67:6F:18:BC:DC
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0628
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
Signing time:             Fri 16 May 2025 23:33:11 +0000
ROA not before:           Fri 16 May 2025 23:33:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     10075
IP address blocks:        103.136.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 23:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: May 16 23:33:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6827cb37-b012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:e6:d0:e2:b9:f0:57:0d:65:54:64:56:49:
                    01:83:e2:4d:1a:a7:10:f7:18:0a:2c:4c:be:ed:93:
                    f1:a4:58:bb:95:00:68:89:d2:bb:16:d7:55:f1:2a:
                    13:55:3e:81:c3:dc:40:f6:85:75:e3:df:84:47:c5:
                    37:32:96:a5:8c:bb:d8:2a:2e:42:80:2c:9d:d5:6a:
                    24:7f:f8:58:67:3d:da:2f:37:42:b2:8a:6b:e2:e5:
                    d5:a7:6e:f3:2e:7a:4f:df:07:ea:f2:ce:68:02:72:
                    65:c6:7a:75:8a:1f:5b:cb:67:0e:a8:04:a4:2f:b7:
                    15:2f:67:8f:b8:b7:ec:42:67:43:c6:a9:d0:4a:e3:
                    f4:bf:51:f0:92:97:7a:1d:89:1a:83:4b:75:b4:8b:
                    c4:ed:42:af:8f:b7:4a:a8:9e:8a:75:eb:87:b2:8c:
                    11:5c:04:73:08:58:fb:b8:9e:9f:9f:ce:fd:9b:87:
                    16:93:08:f7:e6:64:e9:11:21:d3:98:98:d2:48:d6:
                    3a:e5:5b:77:ad:db:ad:54:46:a4:42:6d:11:67:1e:
                    7b:32:2e:e6:73:cc:8f:98:9d:56:ca:05:9f:2b:98:
                    5d:94:83:b4:1e:80:aa:6b:82:22:2c:e4:c2:42:58:
                    6c:11:8f:7f:a7:49:20:db:15:8a:16:e5:4b:3a:15:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5A:6D:1D:A7:45:22:70:74:65:05:C0:4D:5B:BC:67:6F:18:BC:DC
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d1:f6:bd:60:66:00:03:49:27:3b:91:e6:21:d3:54:1d:97:
         2b:0e:32:cb:1c:ce:6f:a9:a9:23:cf:6c:a1:50:29:2b:4e:ea:
         be:80:0f:5c:f8:9e:a6:4b:63:b2:70:7d:3e:eb:47:d3:df:18:
         8d:04:d2:a7:62:ef:95:01:a6:fb:09:9d:f4:06:03:99:22:76:
         c6:a0:79:5f:56:95:f7:9f:53:79:6d:b6:86:71:30:25:79:c3:
         9d:9b:f2:b8:b3:ed:e2:b6:b2:47:64:6f:8d:6d:0a:07:ae:33:
         2f:0c:4c:15:d8:9f:29:75:aa:3b:85:50:bc:19:ec:fb:07:2e:
         ae:54:cd:c2:c4:b4:e2:c7:e8:85:2b:c3:c2:7e:17:e3:80:af:
         35:69:68:45:f2:f9:ef:fa:22:12:ea:45:5c:92:c1:73:cc:2e:
         eb:e8:c6:84:48:84:5a:cf:6a:d9:ee:fb:31:02:c8:09:57:82:
         6d:4a:98:83:2f:70:2a:50:c7:0c:68:d6:54:1f:30:11:81:cf:
         6b:95:e6:8b:c8:04:b2:be:66:00:eb:a5:dd:aa:27:e5:5b:96:
         cb:f0:a7:11:9c:64:d2:a0:45:1a:14:d3:67:c0:8c:1d:1a:a2:
         25:d6:e4:67:c3:4a:da:94:24:2c:4e:ed:22:3b:ba:63:37:81:
         90:af:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:21:02 2025 by rpki-client