Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9F4683A0B86211EDB9EDAD2CC4F9AE02.roa
File:                     9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (raw, json)
Hash identifier:          xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=
Subject key identifier:   DB:1D:F5:3A:11:1C:82:B6:3E:0B:A5:22:1B:35:A0:5B:54:56:65:A9
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       01D5
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9F4683A0B86211EDB9EDAD2CC4F9AE02.roa
Signing time:             Sun 11 May 2025 02:31:48 +0000
ROA not before:           Sun 11 May 2025 02:31:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38136
IP address blocks:        103.100.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: May 11 02:31:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68200c14-1b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:69:2e:5b:bb:54:4c:b3:69:ec:a6:27:ae:
                    0b:e5:0d:1c:9e:fb:90:2e:ab:f8:f3:0b:7f:a4:a1:
                    81:b0:46:d9:d8:a3:00:95:58:ed:fa:c1:40:d5:60:
                    89:94:70:3d:a8:bf:a6:1a:0c:db:40:b3:7c:67:3f:
                    5d:fe:5b:24:a8:e3:15:d3:b6:91:47:d6:d8:46:15:
                    69:c3:32:56:e1:4a:81:f7:06:d1:ca:3f:c5:99:be:
                    25:d4:96:6e:23:d0:6e:d5:33:24:98:68:07:db:df:
                    c8:b3:67:cb:5b:78:83:0f:43:34:6c:c0:de:16:af:
                    4a:28:9b:8e:87:e0:87:77:ab:68:1a:78:54:90:5a:
                    e7:ec:89:92:fc:4e:e2:c2:10:5b:af:cc:42:27:e4:
                    04:35:18:b8:42:0e:46:e7:d9:58:4f:c5:b0:95:53:
                    18:1c:27:a1:e2:63:e7:e8:4a:57:1f:6d:3a:89:b1:
                    78:25:54:f7:11:51:7c:a9:e5:11:2d:fa:e8:1d:1a:
                    8a:b3:51:e7:d6:14:3b:f0:34:a2:45:b4:c7:b4:fb:
                    7c:37:e4:e7:7b:29:22:c8:98:7a:63:48:b1:b3:14:
                    f6:f6:00:61:bc:32:2b:7c:5c:81:4d:40:07:3f:d0:
                    3e:84:29:1b:60:43:33:59:06:6d:df:f0:7a:f8:89:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:F5:3A:11:1C:82:B6:3E:0B:A5:22:1B:35:A0:5B:54:56:65:A9
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9F4683A0B86211EDB9EDAD2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:66:8d:a5:98:98:80:23:7f:7f:b9:6d:59:e1:09:ed:53:
         26:c9:7d:c1:d5:04:82:8e:7f:da:39:ef:b5:3c:0f:68:6e:94:
         51:94:df:4b:7a:b8:a2:e0:e4:3e:cd:35:28:e6:fa:15:26:ce:
         15:c9:05:29:2d:62:15:7d:c5:2b:e7:b1:60:9b:ce:5b:b5:60:
         2e:9a:47:fd:bb:0a:be:71:f2:ae:49:4f:51:7f:c4:3c:36:ab:
         5b:2b:85:78:8d:14:72:84:f9:3f:10:61:62:c8:ae:29:cd:54:
         dd:19:0e:a2:d7:e2:79:20:29:d9:4e:31:ec:c0:19:1e:1e:30:
         4d:db:b5:ec:6b:a3:fd:99:b0:62:0c:5c:c4:64:50:a3:b1:c7:
         54:9a:88:04:43:57:14:5e:03:0b:3d:70:c4:20:02:e0:9b:59:
         e0:38:77:9a:8e:9c:58:33:3b:c9:03:b8:76:36:f6:09:02:71:
         ea:76:dd:59:e5:74:d2:66:8d:5d:03:5a:75:44:2d:92:40:df:
         a6:6d:44:32:cd:20:2e:c6:7f:00:51:eb:7c:d7:1e:ab:9b:19:
         bb:97:a3:ab:7c:f7:31:d8:2e:35:3b:dd:2b:2d:2d:49:a0:3c:
         42:76:58:23:4c:3e:31:bf:53:fb:12:16:69:6a:87:56:63:bc:
         d7:c5:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:09:24 2025 by rpki-client