Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
File:                     311647C0896C11EBA85B0747C4F9AE02.roa (raw, json)
Hash identifier:          MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=
Subject key identifier:   AF:36:F5:EA:CA:3D:F8:ED:23:8F:F9:2F:80:D6:31:B9:55:A9:D0:8F
Certificate issuer:       /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial:       096A
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
Signing time:             Fri 18 Jul 2025 20:30:48 +0000
ROA not before:           Fri 18 Jul 2025 20:30:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132290
IP address blocks:        103.140.82.0/23 maxlen: 24
                          2001:df0:b380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
                          rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 20:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410 (0x96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
        Validity
            Not Before: Jul 18 20:30:47 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=687aaef7-8802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:43:c3:27:56:9d:77:98:36:c4:84:50:61:
                    59:e1:bb:d8:54:b3:8f:06:51:96:f7:17:29:f9:33:
                    bc:35:81:96:a5:a9:3e:82:ca:78:f0:70:cc:14:fe:
                    07:d3:1e:b9:e5:04:2b:cb:c6:10:9d:9b:ab:c3:4c:
                    ea:73:39:f2:ea:d7:bc:3e:49:c3:be:fd:91:43:54:
                    bd:91:b5:f4:a6:20:84:5d:b1:c4:7f:66:a1:98:1c:
                    14:1c:3b:4c:98:b4:5f:6b:8f:4a:e7:a6:4e:a7:07:
                    93:ff:6a:ea:30:9f:91:99:51:c1:03:e2:f1:8d:37:
                    67:08:45:fb:01:0a:54:4e:9c:dc:f2:8c:0c:5b:0f:
                    cd:b0:71:18:fb:48:ef:e5:4b:f0:40:3f:aa:58:fc:
                    70:f6:5f:8f:28:95:d9:15:d0:6d:6a:f1:e7:d8:fe:
                    a4:86:4e:2e:67:19:81:90:d0:bb:34:12:f5:5a:98:
                    72:fd:8a:ab:d7:92:b8:ee:ca:cf:06:98:20:7f:3f:
                    64:66:bd:f1:b3:dd:29:b5:c9:6c:3b:d0:53:33:a6:
                    1e:89:8f:26:e6:b8:64:c5:68:47:65:73:4a:e6:c7:
                    6d:28:09:8b:f4:d4:af:65:5e:53:ef:72:2a:21:19:
                    cb:8a:3d:19:b3:67:29:91:2f:eb:65:f0:84:fd:fc:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:F5:EA:CA:3D:F8:ED:23:8F:F9:2F:80:D6:31:B9:55:A9:D0:8F
            X509v3 Authority Key Identifier:
                keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.82.0/23
                IPv6:
                  2001:df0:b380::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:0f:01:ed:2f:04:45:9e:54:d7:7b:0d:bd:ad:e6:73:73:
         2c:54:10:9b:d8:17:27:d7:97:e3:d0:24:e8:6e:1f:19:c9:29:
         2e:d0:d2:61:45:2b:24:9b:61:c2:df:cf:24:11:ec:20:54:eb:
         54:b2:2a:3b:4a:27:a3:c1:a6:81:29:bb:e0:25:6a:8e:30:b1:
         82:66:3d:47:f4:d3:11:c9:77:4e:f5:bd:51:0b:84:10:98:ac:
         91:02:13:ca:60:2c:4b:f6:fd:a6:a1:57:e9:9b:51:44:4e:07:
         ef:8d:e5:6c:75:e4:6d:cd:e2:ed:f3:04:85:b3:d7:67:ad:64:
         e4:32:d8:1d:00:b7:c6:59:e5:13:2a:0a:f0:0d:75:f1:8d:3d:
         3a:5d:81:28:50:2d:c4:31:bf:1e:1f:a3:58:e9:34:6f:af:31:
         44:db:ad:df:67:2e:34:08:db:67:73:ec:b8:82:c0:8d:4f:67:
         64:dd:db:17:8c:80:b8:77:b4:0f:7a:d2:1e:96:a3:fe:48:cd:
         6d:e7:73:3b:ca:55:ff:29:21:e4:3e:e2:be:06:86:d3:0c:9a:
         a7:9b:53:03:24:a2:80:36:be:1c:8b:bf:e1:c6:7e:7a:7c:f9:
         ec:4f:5e:9a:a4:56:06:63:9c:f6:73:9e:dd:59:c0:ff:ea:a1:
         e8:e0:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:23:50 2025 by rpki-client