Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
File:                     9BC27CB01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          Ovw/0G0kQVHTCfhH/cwDBOhTKrEcoAEPs59cohYwI0U=
Subject key identifier:   B1:19:CB:20:71:59:56:BF:6D:CC:69:0A:C4:B6:B5:A6:97:16:7C:9E
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39B7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:16 +0000
ROA not before:           Mon 14 Jul 2025 14:50:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132063
IP address blocks:        171.102.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14775 (0x39b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751928-11d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:ee:0b:d3:40:9c:f8:88:f3:86:58:d5:fb:
                    5d:22:5d:92:74:73:ad:03:91:6e:74:52:5d:81:68:
                    55:21:dc:23:d8:35:2d:ec:03:74:34:34:71:c6:03:
                    81:74:f8:19:d0:1d:7b:16:85:a0:ee:64:fa:11:dc:
                    11:3f:2a:d8:1d:14:80:7f:d8:77:ae:c5:d2:7b:af:
                    fa:7f:17:df:00:6a:a2:1f:79:4d:89:71:4b:39:42:
                    08:83:98:9f:0c:b3:53:1e:cc:2b:05:49:08:7c:38:
                    d8:1b:c0:00:5f:07:5a:09:45:86:f3:ff:92:00:67:
                    d9:00:6f:cc:fd:82:6b:9c:f4:bb:2a:ec:89:e2:f3:
                    f6:37:cf:66:13:e9:82:3b:45:fc:d1:c6:79:3e:2a:
                    43:9f:72:01:b9:55:92:44:0e:a6:67:99:48:37:a0:
                    7d:2b:65:bc:c0:e3:9e:76:f8:40:0f:28:64:28:0e:
                    c3:56:5d:86:8e:2a:8f:46:72:fa:78:f9:9c:c9:5a:
                    38:81:c4:25:c3:31:5d:62:23:9e:ae:fa:64:a4:99:
                    dc:6b:8f:fd:a0:9d:65:72:ad:d9:d2:d5:6a:c2:aa:
                    42:b9:b5:f1:5e:e0:0f:18:08:25:cc:7e:a0:4f:8a:
                    0b:12:5a:bf:66:c0:2e:43:9f:43:87:e0:93:a0:a7:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:CB:20:71:59:56:BF:6D:CC:69:0A:C4:B6:B5:A6:97:16:7C:9E
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:c6:11:85:1b:6e:7e:c1:91:5a:12:d2:ff:a7:c3:b2:79:
         2e:9f:09:75:66:73:c7:71:87:7f:71:38:7d:db:3e:54:c8:13:
         e0:1c:eb:57:11:d1:44:67:c1:3a:aa:84:08:f3:62:c4:1c:99:
         3a:e9:e9:10:a2:18:c7:eb:8e:0f:64:99:96:25:e1:52:34:a5:
         c0:a0:6b:f2:b2:da:c1:09:c8:2f:5c:86:87:4f:a8:a7:5c:a2:
         25:bb:d7:e5:d0:23:72:f0:55:7a:9c:bc:8d:a3:17:ab:7d:3a:
         2f:03:80:be:59:30:5c:f0:45:97:38:c6:25:81:83:fd:28:ad:
         9b:f6:37:50:1c:f9:04:d3:a3:cb:ee:c6:37:bf:c8:af:e9:4b:
         9c:ad:9d:02:1c:31:91:77:85:bf:61:4d:42:ee:e7:ea:e5:0f:
         14:11:de:b4:dd:d4:85:96:f8:0e:80:fb:6b:18:b0:66:b2:94:
         3a:47:e2:a4:89:3a:33:4c:67:8b:1d:9b:1a:c6:76:3c:0d:ea:
         60:46:0f:ca:53:5f:6b:b0:0d:14:c1:11:1f:53:72:86:74:85:
         81:ac:a9:95:33:7c:97:cc:24:0e:a2:a0:bd:5a:f4:73:8e:4f:
         fb:f4:45:c8:22:45:13:03:9b:5b:15:ca:c9:d7:24:86:9c:71:
         38:ae:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:20:30 2025 by rpki-client