Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
File:                     09AA16F8DB0011ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier:          Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=
Subject key identifier:   80:2B:3F:CE:AC:6B:51:D5:71:F6:AE:68:E5:A9:FC:8D:C5:C9:07:9E
Certificate issuer:       /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial:       02C2
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
Signing time:             Wed 05 Feb 2025 01:25:00 +0000
ROA not before:           Wed 05 Feb 2025 01:25:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     133914
IP address blocks:        103.47.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
                          rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118422
        Validity
            Not Before: Feb  5 01:25:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a2bdec-587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:28:a2:19:f8:ec:d4:79:e9:68:93:aa:0a:
                    5f:9a:54:70:84:c5:75:f3:6c:be:22:db:db:ad:3b:
                    ef:c6:9e:84:02:55:a1:f1:50:b2:d1:77:3c:5c:a8:
                    1e:44:83:3d:4e:e7:72:1f:b4:b5:2e:13:a3:41:5e:
                    10:f3:df:3f:2f:f0:9f:04:e0:26:f5:a6:30:56:53:
                    61:23:0e:b0:9b:aa:b7:0d:a8:ce:e2:66:87:82:3b:
                    e0:94:36:f7:47:dd:72:cf:44:c6:6b:12:07:7b:f4:
                    f3:fd:1f:01:3f:cb:63:d0:c6:e0:d8:1f:d8:3b:20:
                    56:4c:14:61:d1:57:8b:13:72:1f:0e:61:25:a9:1e:
                    eb:bd:63:78:4a:04:45:6a:fb:c0:2d:ef:4f:93:d9:
                    f3:d9:93:be:28:ba:04:a3:5d:bc:62:70:b5:5f:2b:
                    98:a3:93:d6:45:d2:a8:98:45:da:f3:99:36:7d:30:
                    47:59:9d:16:83:2b:8a:c3:43:da:df:07:09:31:00:
                    f0:94:22:13:a3:e0:93:a3:61:46:cb:39:07:67:d1:
                    8f:4a:39:43:67:1a:49:95:39:18:fc:2e:b0:3e:45:
                    d2:e6:a1:3f:46:b4:79:3a:d4:a8:d9:0c:f0:77:03:
                    d7:3d:86:45:00:27:99:7a:78:e3:cf:0c:80:ac:0a:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:3F:CE:AC:6B:51:D5:71:F6:AE:68:E5:A9:FC:8D:C5:C9:07:9E
            X509v3 Authority Key Identifier:
                keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:23:83:fe:7c:e9:c8:82:69:b7:ef:de:a8:98:d2:3e:05:fc:
         d6:44:35:c0:ae:44:79:8c:e7:45:d9:94:75:cf:53:69:e0:93:
         e9:5f:c0:7a:58:be:1a:8d:6a:d8:1c:c8:a7:f4:73:99:3a:37:
         a0:1d:ef:15:02:a0:ad:42:a7:ad:03:df:f7:f9:03:06:6f:cb:
         09:b2:a4:1c:71:ae:d6:8f:cd:6f:09:83:33:4e:2a:91:d1:b9:
         f1:9f:15:f6:c2:b3:3f:89:b7:0b:14:d7:4d:e1:3c:c2:f6:a1:
         4e:11:b2:3d:f7:a3:7d:09:cf:73:a5:05:da:27:52:5d:68:a0:
         12:7f:42:17:ec:3a:81:fc:22:3c:fe:b0:23:59:4c:de:dd:03:
         b9:a8:ba:94:bb:9a:5f:55:16:1e:b9:f0:a5:36:ff:98:25:2e:
         6b:9f:f7:5c:55:7d:9e:a3:a6:76:50:ac:1e:45:b4:db:ff:9d:
         6c:89:8e:26:a6:31:eb:8e:cf:94:d1:ed:7e:03:ff:aa:4b:f8:
         07:31:44:ad:c0:06:45:1d:dd:e9:fd:4b:f9:d7:6f:a3:e7:81:
         cd:69:fb:5c:e2:ab:82:c4:2f:ae:e5:71:3b:19:5d:c5:aa:fd:
         32:df:40:a6:59:29:9a:db:07:fd:7f:10:25:ed:21:a9:fa:ba:
         49:1a:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:53:55 2025 by rpki-client