Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File:                     B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier:          nEnauNcK30SC5dUj0ntjcanTMyK24OfS+HXF4N9+TpI=
Subject key identifier:   66:0A:97:08:DB:5C:98:AB:D0:7F:BC:F5:71:87:72:C8:9D:8F:6A:FE
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       0167
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time:             Wed 11 Jun 2025 03:42:05 +0000
ROA not before:           Wed 11 Jun 2025 03:42:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142132
IP address blocks:        103.166.174.0/24 maxlen: 24
                          103.166.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Jun 11 03:42:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6848fb0c-e4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:8e:ba:b8:01:ee:2f:de:d8:78:76:a2:ee:
                    e9:79:ba:69:ae:f4:1f:2d:52:89:17:f8:88:b7:87:
                    68:bf:69:88:03:64:8c:8b:c4:5e:eb:28:d4:52:05:
                    95:af:d1:ec:85:86:91:b2:2b:4b:d7:2e:b2:5a:92:
                    a9:54:19:11:ef:91:0e:84:ca:b6:08:cd:26:f9:96:
                    19:91:a7:ce:e7:64:a6:4d:ec:9e:a7:e5:c9:0b:aa:
                    42:1f:be:b7:75:c6:0f:ae:0b:eb:e0:55:32:9d:e1:
                    cb:38:d2:aa:7f:27:6a:e6:30:ae:04:e9:dc:9c:be:
                    98:be:a6:18:12:e5:de:94:f5:ad:8f:4b:9e:39:9c:
                    d0:ed:f4:02:4c:e6:f2:3e:e0:79:76:27:9a:b2:4a:
                    25:0d:06:c3:ff:24:4e:b7:ae:33:6b:ba:cf:4a:f8:
                    9d:88:94:6a:c6:66:69:8e:2a:02:23:0b:6a:c6:87:
                    27:2e:ad:ab:62:0c:7a:e1:9e:84:92:0b:ff:52:a8:
                    b3:8e:90:60:73:1a:b7:24:2a:23:27:8d:5f:7b:89:
                    94:e1:3a:c8:14:2f:31:06:2b:0c:8a:52:04:35:35:
                    2a:52:9a:da:a8:63:89:9e:80:c6:37:aa:93:cd:34:
                    bf:52:5b:f2:63:00:4b:7e:0b:f2:86:a4:68:48:a8:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:97:08:DB:5C:98:AB:D0:7F:BC:F5:71:87:72:C8:9D:8F:6A:FE
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:df:41:b7:91:b0:1c:38:c2:22:01:de:04:27:84:d0:3e:c5:
         2e:aa:22:71:e3:45:eb:80:e9:f7:67:ef:a6:cb:de:b4:6a:bf:
         ab:4f:ff:ab:cb:ef:15:6f:ce:f2:33:83:ea:f1:ef:fe:7b:f4:
         2c:db:60:17:a2:7f:48:50:48:bd:2a:a9:0a:fc:47:99:23:e2:
         47:e1:4a:5e:f9:5f:c6:d5:ec:9b:87:69:1b:00:1a:2e:e2:15:
         fa:f4:c8:81:5e:88:73:0e:30:94:11:5c:cc:a7:34:b2:bd:83:
         cf:47:c8:f1:dc:53:4c:2a:ff:ad:6f:85:f1:e1:10:92:2c:96:
         9d:84:e8:d2:0a:c1:54:cb:35:2a:01:87:ea:c8:a4:f6:34:44:
         a6:ed:cd:6f:f9:19:4a:bd:73:42:22:c8:9e:b1:ec:cf:56:f5:
         da:ce:1b:f8:8b:0d:53:25:2c:f9:f6:5c:cc:cd:30:38:67:cc:
         16:94:e6:0c:39:51:c9:dd:1b:d3:42:a8:6d:7d:d5:b9:13:1d:
         2d:45:f0:fc:8d:10:18:09:bb:19:32:c6:a4:58:a3:c9:fc:12:
         72:41:42:15:fa:89:e5:55:d3:f7:70:73:ab:0e:90:ec:41:84:
         65:05:37:e5:c6:88:75:d1:c0:ad:f2:15:04:11:bb:39:e1:04:
         2f:2e:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:18:56 2025 by rpki-client