Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
File:                     B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          H2ihWAWB6DY9VC7vzXmEqGi0VAINu6hF7FGjfy4AExc=
Subject key identifier:   EE:36:C5:91:6D:C0:11:28:69:C5:7C:E0:91:14:36:F6:4E:85:56:7B
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       05DA
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Sat 28 Jun 2025 22:42:21 +0000
ROA not before:           Sat 28 Jun 2025 22:42:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139278
IP address blocks:        103.140.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 28 22:42:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68606fcd-2361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:6c:f6:50:07:e4:3f:56:19:60:ba:b6:37:
                    e5:ed:ec:d0:20:7e:27:84:34:43:f6:b4:86:53:97:
                    1f:8a:c3:01:59:b8:67:27:98:1b:e6:64:30:8f:b5:
                    b2:f8:3b:2b:07:36:2b:0d:f2:7b:5c:fc:2d:5e:8a:
                    23:19:23:d0:cd:57:06:55:f5:25:2b:e5:80:da:0d:
                    ef:df:92:96:7d:27:03:73:de:08:ef:d6:e1:fc:e5:
                    a1:90:93:77:fb:83:fc:b9:ad:6b:da:4e:11:d1:4e:
                    2f:cc:01:4a:59:e8:2e:7e:33:dc:4c:f7:e0:34:66:
                    07:d0:52:40:54:42:7b:2e:96:1f:3a:6b:08:0f:cc:
                    b9:2b:d5:43:40:e6:fb:a1:e1:ea:e3:6d:67:51:64:
                    90:c5:f2:94:2d:67:6d:d8:bc:d5:00:7c:5b:9b:f6:
                    6c:bf:91:eb:7d:09:7e:3b:a1:32:5d:c4:2a:32:f0:
                    40:41:30:a1:f3:93:85:31:ee:28:02:23:39:56:68:
                    d4:10:6c:57:4f:8e:5e:ce:43:70:ca:4e:db:6f:04:
                    ee:8a:e6:e6:b9:65:4e:33:97:2d:b6:22:b2:9e:90:
                    7c:42:e9:fe:18:3a:ea:f0:b9:e6:20:50:fd:5d:0e:
                    54:66:ae:5f:73:68:fe:1a:a3:90:7c:fc:b9:aa:d7:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:C5:91:6D:C0:11:28:69:C5:7C:E0:91:14:36:F6:4E:85:56:7B
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:1f:50:73:1c:f8:94:77:a8:d9:e7:ff:07:85:1c:60:af:
         b5:b5:ab:07:13:0d:cb:22:54:6c:7b:38:54:17:85:c0:b2:f4:
         ea:2a:32:4b:38:8e:aa:b6:5d:24:1d:88:e5:78:38:d7:39:d9:
         d4:95:2b:e8:95:7c:7f:e1:39:71:31:a6:b2:f0:3c:02:3e:aa:
         04:c7:b7:8f:9e:00:d8:c5:06:90:27:f0:a6:ff:26:6f:36:75:
         5e:44:64:0b:19:a6:72:5c:80:86:ed:73:74:14:c1:79:eb:da:
         e5:34:b8:8a:70:c3:ab:e8:c8:41:80:8f:ed:b0:19:c2:c5:fd:
         96:31:44:bd:c8:d3:24:42:4d:53:f8:69:66:c6:a8:70:7e:d1:
         e3:83:2d:16:33:5b:8a:6f:2d:e8:af:a0:6c:ad:54:68:4c:0b:
         cc:c6:8f:31:e8:28:c1:ff:79:03:9b:a5:45:58:5d:c4:d1:0d:
         6d:e4:de:59:eb:23:84:59:c5:80:bf:23:a7:2b:67:6a:d0:99:
         7e:a6:f7:c7:3b:01:83:fd:20:cb:59:f2:b7:fb:27:93:fb:6c:
         70:c1:d9:89:d0:0c:73:d1:58:a4:b2:f2:8b:0f:43:cc:7c:e2:
         6f:cb:3d:86:18:09:e9:2b:f0:49:ca:9e:7d:e1:72:59:26:a9:
         81:a1:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:17:33 2025 by rpki-client