Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/27A6D5CAAF1C11EC94FF9534C4F9AE02.roa
File:                     27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (raw, json)
Hash identifier:          tuiOvz0EtN5gYIcDBljazRXB+32WdpyvWw0LqnkHLT4=
Subject key identifier:   0F:E8:D2:6B:B1:CB:83:AE:6B:8E:A5:D6:88:09:A2:4E:D1:8A:CF:65
Certificate issuer:       /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686
Certificate serial:       03BF
Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/27A6D5CAAF1C11EC94FF9534C4F9AE02.roa
Signing time:             Tue 25 Mar 2025 00:36:21 +0000
ROA not before:           Tue 25 Mar 2025 00:36:21 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     139922
IP address blocks:        103.180.240.0/23 maxlen: 24
                          2001:df0:6240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl
                          rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175906
        Validity
            Not Before: Mar 25 00:36:21 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67e1fa85-27c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:72:ec:4c:ac:4a:e1:f3:b1:a9:45:a4:48:
                    9a:6e:7d:d4:a7:2f:0a:8f:38:ad:b6:66:e5:ab:6f:
                    35:d8:0e:ca:5f:44:2e:70:4b:b6:ee:b4:36:39:1e:
                    d1:ff:5e:11:ce:96:63:4c:91:66:de:92:a0:30:29:
                    24:99:b2:34:42:37:65:db:6a:06:76:12:3a:d9:a7:
                    ea:79:1e:2e:f0:c1:5c:d9:99:ff:38:d1:bd:3f:f4:
                    f3:13:35:b3:ea:46:0f:8f:58:b6:4b:4f:59:bc:94:
                    e0:41:8d:18:2e:e9:df:61:3c:d1:2f:cf:22:b9:0b:
                    4f:54:33:5b:6e:7e:c8:22:bf:fb:0b:d7:d3:c5:e5:
                    74:98:52:86:6c:ff:d2:64:3f:33:57:89:5a:56:88:
                    55:d3:8a:0e:b3:57:59:b0:07:c5:62:92:53:3e:6b:
                    0c:1c:fb:1d:61:98:1e:5d:3c:db:64:d1:ba:5b:f3:
                    a0:c0:02:87:ae:d0:4d:44:a4:ff:fe:9c:03:37:97:
                    26:dd:cc:ff:3d:27:d0:0c:69:56:5f:09:d1:5c:ad:
                    fe:a7:13:5c:17:87:7f:80:9e:9d:e9:eb:92:eb:79:
                    94:0d:2f:44:c1:d1:48:38:b9:76:be:42:44:bb:78:
                    5a:fd:b7:03:37:d8:9a:67:e2:88:da:e0:32:6e:3f:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:D2:6B:B1:CB:83:AE:6B:8E:A5:D6:88:09:A2:4E:D1:8A:CF:65
            X509v3 Authority Key Identifier:
                keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/27A6D5CAAF1C11EC94FF9534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.240.0/23
                IPv6:
                  2001:df0:6240::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ce:9a:e5:f2:4e:c2:0f:0d:85:41:75:af:d0:20:d7:f6:bf:
         a1:cc:55:78:0e:1b:59:b7:02:b3:80:82:47:e0:af:63:7c:d0:
         6d:16:e8:d8:e9:6d:70:e0:c2:ac:24:c6:69:51:23:78:36:d5:
         a1:2e:32:6c:b2:d9:26:e6:19:e7:40:9d:b3:d0:a6:d9:f9:e4:
         5e:0d:19:6a:93:10:82:fc:d4:94:7f:6e:d1:bc:74:10:c9:31:
         96:c2:d5:ac:cf:42:45:8a:2d:51:a7:71:c2:5b:94:72:43:ee:
         ec:c0:3e:1d:e7:a0:36:0a:73:7a:b9:49:58:e4:61:19:cf:97:
         1a:5b:11:eb:a5:45:d5:0e:5c:af:7f:4f:ce:bb:f8:f4:a4:df:
         02:f4:06:0c:f9:51:0b:b9:4c:65:9f:20:ef:c7:3c:7d:1b:69:
         7b:47:f2:a7:c9:07:cb:cd:80:48:31:cf:b7:af:cd:de:c3:ad:
         4e:af:13:8e:6e:0a:ed:e5:2c:cb:de:87:63:ec:7a:43:8d:a8:
         29:b2:be:83:3e:ed:ab:b2:51:c8:95:81:ad:6c:d4:d5:92:2e:
         27:ea:b5:3a:68:f3:08:43:8f:21:45:44:17:8b:14:3f:1f:ae:
         ef:b0:bf:c1:bc:96:cd:04:37:fd:77:95:ae:04:a6:a4:b9:84:
         cf:71:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:39 2025 by rpki-client