Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
File:                     027BBBCA12B211EF8197C737C4F9AE02.roa (raw, json)
Hash identifier:          snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=
Subject key identifier:   08:D5:B1:03:C0:34:12:13:7C:9E:35:16:D8:10:9D:82:34:C5:0E:61
Certificate issuer:       /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial:       D5
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 06:12:20 +0000
ROA not before:           Tue 01 Jul 2025 06:12:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152857
IP address blocks:        103.159.172.0/23 maxlen: 24
                          2001:df3:d040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
                          rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
        Validity
            Not Before: Jul  1 06:12:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68637c44-7df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:31:07:c6:d9:2a:9b:9a:74:b9:9a:ee:76:
                    f1:4c:65:61:a9:9f:f6:99:83:b6:74:34:9e:ac:de:
                    58:39:46:d8:05:7c:9c:b0:fb:9b:2f:09:78:aa:39:
                    1f:01:ca:99:7c:ec:81:be:8f:94:9f:1a:52:39:cd:
                    e1:25:96:42:47:87:5c:63:d4:56:97:86:f4:8c:79:
                    ad:6e:13:70:9c:83:1d:7f:86:13:47:e9:c1:26:dc:
                    d1:80:76:78:21:90:a0:e1:f2:86:43:70:90:d1:fb:
                    0c:c1:d8:44:8e:5f:f6:bd:63:1c:7e:e9:d1:b3:e8:
                    1f:e1:8b:a8:d1:e8:ca:40:c3:f4:74:df:81:d3:e8:
                    56:4c:fb:da:e0:19:dd:6b:02:35:20:d7:01:15:6d:
                    25:3c:9c:41:0f:eb:0c:87:6d:af:c5:39:ad:84:71:
                    ba:44:8d:7a:11:e3:df:2a:3d:48:29:62:05:e2:7e:
                    78:43:0e:7b:62:60:81:63:57:13:a5:ce:09:f1:6a:
                    de:52:9a:b6:5e:35:44:32:b5:4a:95:75:ed:f9:a3:
                    e6:b1:e9:fc:07:40:cb:84:4d:1a:6a:6d:89:2e:47:
                    66:6d:fb:23:e3:1b:11:84:a4:56:7a:37:26:1c:66:
                    00:e3:78:72:ac:7d:b6:fe:e2:86:a9:c8:ff:23:39:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:B1:03:C0:34:12:13:7C:9E:35:16:D8:10:9D:82:34:C5:0E:61
            X509v3 Authority Key Identifier:
                keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.172.0/23
                IPv6:
                  2001:df3:d040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:49:ef:75:f6:8c:c9:a2:62:1b:5a:f2:87:f4:08:cc:2b:
         fb:38:00:72:f0:47:de:80:03:95:ca:2d:f0:04:62:bf:79:62:
         55:52:47:26:cb:0e:8a:ce:61:c4:43:6f:2f:b9:ce:91:66:3b:
         7a:a1:c5:2a:8c:3f:e6:70:90:0f:0a:42:12:49:5c:6d:aa:f3:
         b2:54:2e:93:aa:af:75:8f:06:dd:3e:51:73:b9:74:bc:e9:47:
         c2:11:3f:1e:ad:76:7b:60:c1:26:0e:86:94:46:3e:75:7e:1b:
         c4:13:78:27:bf:a7:f9:c4:f6:cf:aa:38:63:5d:ec:c0:d1:46:
         33:0e:da:96:5f:65:0e:0e:f9:27:3d:90:a2:6e:ae:f7:eb:16:
         5d:95:33:8b:06:57:fc:69:bc:a1:08:bb:24:3e:64:5c:68:c3:
         b0:ee:43:fd:79:94:ee:96:a5:63:ba:09:16:96:95:81:55:43:
         de:60:d0:06:35:31:a5:8f:e1:36:a7:26:89:43:d8:eb:a8:b3:
         ee:d3:e4:bb:08:51:97:0a:9a:6c:a6:ba:51:b5:cf:76:45:6d:
         e4:f8:8f:45:10:65:12:c7:68:be:33:a6:cf:80:25:db:40:9b:
         eb:75:ef:71:7b:17:b3:c4:a1:e8:21:b4:18:70:73:29:b1:03:
         9a:67:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:23:00 2025 by rpki-client