Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
File:                     D66E75F0A5CF11EC94CFB734C4F9AE02.roa (raw, json)
Hash identifier:          l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=
Subject key identifier:   09:16:82:30:A9:72:51:E7:2C:FC:FB:37:9A:92:E4:71:C4:33:F1:09
Certificate issuer:       /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial:       036C
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 01:26:44 +0000
ROA not before:           Thu 03 Apr 2025 01:26:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136964
IP address blocks:        103.183.142.0/24 maxlen: 24
                          103.183.143.0/24 maxlen: 24
                          2001:df0:8840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 00:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
        Validity
            Not Before: Apr  3 01:26:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ede3d3-63a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:e8:eb:0a:80:8f:c4:95:b8:ee:6b:61:e3:
                    af:40:77:65:79:9c:0c:a9:bc:4a:18:2d:79:d3:00:
                    2d:ce:31:e9:c4:29:21:22:0a:ed:75:e1:33:37:12:
                    01:27:4d:2a:d6:5a:1b:ce:82:39:b4:e2:3d:52:7b:
                    56:ad:d3:38:ea:a9:f8:54:25:7e:5c:6f:e5:95:97:
                    47:ef:9c:2a:fd:71:71:6b:12:de:55:70:d6:c5:c8:
                    c0:a0:47:8e:47:b4:17:4f:6c:1e:ae:9a:00:86:9a:
                    18:e2:01:c1:5c:0e:44:27:92:ba:04:b9:9e:36:33:
                    b8:b7:95:b2:cd:52:8c:93:2c:2c:da:3f:61:ab:54:
                    35:f4:6e:50:d6:93:20:ae:a9:c8:f2:95:7c:e6:76:
                    4d:8b:3c:94:f4:c9:08:d0:18:54:43:25:c5:d7:8d:
                    e1:65:1a:e8:0a:26:6f:29:d6:83:51:9d:44:24:2d:
                    47:eb:f1:ec:5e:01:f1:86:a6:dd:52:a3:ac:5b:87:
                    dd:1d:92:4a:a9:60:34:b0:1e:65:35:d2:af:89:ca:
                    3f:98:55:bd:9c:fa:8e:4f:04:67:c2:3c:ca:6b:50:
                    0f:80:dd:72:4c:4b:a4:69:ce:84:7f:60:c5:a9:39:
                    3b:30:29:b5:3b:6c:6e:7d:c5:ca:41:e4:04:1a:f9:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:82:30:A9:72:51:E7:2C:FC:FB:37:9A:92:E4:71:C4:33:F1:09
            X509v3 Authority Key Identifier:
                keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.142.0/23
                IPv6:
                  2001:df0:8840::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:41:ac:90:d4:62:32:5c:df:d2:d7:09:59:96:ff:f6:61:32:
         95:65:ce:27:16:cd:13:8c:e7:fd:12:c6:bd:4a:be:eb:2c:2f:
         b6:e0:8f:ee:c0:a8:44:48:3c:e1:74:7b:db:1f:2e:59:7a:f6:
         e2:4c:8c:09:6d:32:ac:43:9c:eb:7c:c8:d0:01:dc:76:46:9a:
         f7:0d:8c:c2:27:b3:c9:6b:4d:48:ae:ef:db:ee:1c:fa:00:a8:
         8c:73:f5:98:f8:43:a3:b1:55:ed:71:59:2e:79:2d:90:c4:3f:
         6d:3b:fc:cb:99:67:84:60:2f:ed:6b:28:13:ea:72:2b:2a:c6:
         4e:9a:78:41:9e:ca:a2:e4:93:f3:9a:aa:d0:4e:40:e9:7d:d4:
         af:f7:d9:bf:b0:64:c7:8b:03:4a:df:33:3c:63:b5:67:98:2d:
         bf:5b:e7:e3:91:56:4b:ce:57:50:4d:f1:61:d2:87:d3:dc:3f:
         42:44:44:3f:73:f4:8f:3c:6b:c7:8b:d2:22:bc:e3:7b:09:3a:
         10:16:28:5c:0d:55:03:70:54:6b:f6:a0:e4:2d:ac:c2:8e:07:
         40:56:93:7f:56:7a:8f:8a:44:ad:db:a6:1f:7c:d4:ec:00:f3:
         88:1f:4b:cd:3a:61:76:df:de:f8:8d:25:c3:1e:16:43:58:d0:
         de:fe:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:16:49 2025 by rpki-client