Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/632E90B0C6C811ECA5A9AB33C4F9AE02.roa
File:                     632E90B0C6C811ECA5A9AB33C4F9AE02.roa (raw, json)
Hash identifier:          lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=
Subject key identifier:   3C:19:E8:F5:55:F9:94:C4:D0:7E:BC:DE:6C:BB:54:C1:80:C6:60:F2
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       0348
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/632E90B0C6C811ECA5A9AB33C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 01:36:16 +0000
ROA not before:           Thu 03 Jul 2025 01:36:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        45.121.80.0/22 maxlen: 24
                          103.61.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Jul  3 01:36:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865de8f-2f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:22:11:9d:15:4b:69:3d:91:fa:79:49:d6:
                    5d:f3:aa:2d:f2:79:73:75:0a:dd:5b:d3:b3:63:e3:
                    fb:e9:98:57:82:35:e7:f8:90:47:1b:11:eb:f4:6c:
                    79:bb:47:93:f7:0e:c3:81:70:54:52:e1:1d:36:e0:
                    e9:b7:c4:53:a8:30:df:d9:04:1c:b8:ac:1f:ef:4e:
                    3e:71:f5:ad:37:89:a8:3b:19:54:09:0f:b1:8f:c4:
                    f1:c5:36:73:d8:d6:b9:1b:8f:cc:d2:53:45:c2:74:
                    40:bb:15:a5:19:6b:fc:10:3d:11:c0:ef:6d:8e:d6:
                    cd:8f:35:be:1b:62:77:a3:26:e8:ac:5e:ce:3d:e7:
                    1e:d6:ec:b0:20:3e:01:f1:e3:0f:85:bf:ba:24:d2:
                    e6:92:9f:a4:8a:a3:92:36:22:17:a3:92:a6:d8:b5:
                    69:de:d4:bb:6d:38:4d:59:61:82:b3:e7:82:56:d4:
                    5a:01:da:17:07:a5:6c:ba:b9:91:58:18:1b:39:98:
                    cd:dc:18:64:c4:43:4c:1b:90:af:52:5e:49:db:df:
                    43:0b:d7:24:1f:61:d9:66:44:c6:25:36:3b:6f:2e:
                    36:00:ed:f1:04:0d:ba:06:f4:80:1c:dd:66:19:9b:
                    5c:a3:b7:97:5c:cc:ba:f5:38:aa:ce:02:67:46:90:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:E8:F5:55:F9:94:C4:D0:7E:BC:DE:6C:BB:54:C1:80:C6:60:F2
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/632E90B0C6C811ECA5A9AB33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.80.0/22
                  103.61.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:63:71:8c:5a:7b:f4:4d:65:a7:36:bb:86:62:62:82:f1:4f:
         2d:2b:02:76:e7:85:33:16:5e:c1:98:5b:65:fb:7a:79:ce:df:
         d4:49:0c:42:65:2e:5b:74:48:9a:7e:52:e4:a3:85:26:0b:9d:
         4e:81:d6:b0:d0:cc:81:75:56:8e:1b:00:32:90:42:7b:86:b8:
         fc:dc:b6:bd:f6:5d:a2:73:89:12:b6:07:86:d6:72:7b:2e:62:
         fd:30:e6:59:3d:80:9e:10:84:cc:1d:3b:48:39:52:a7:33:bc:
         0a:2a:fb:c1:89:c6:25:48:84:c9:da:cc:02:59:77:ea:a8:2e:
         e7:74:4e:d7:3b:4f:52:51:52:91:b0:14:db:0b:5a:8e:46:64:
         cd:62:53:97:d2:14:12:70:b6:29:e9:8c:5e:5a:ae:1f:09:41:
         ea:49:a2:83:6f:99:2f:c0:98:b5:c1:dd:8f:8a:e7:c1:2b:f4:
         02:97:e8:2b:b6:58:9b:01:4d:99:f2:cc:2a:98:e8:e0:86:ca:
         ea:db:ea:3f:df:6e:cd:14:55:8f:56:f5:14:4b:c2:52:73:d0:
         ff:37:11:92:10:8a:e9:f5:92:4c:c1:a3:30:81:af:e8:b6:cd:
         16:4d:0f:5e:d2:20:3b:24:d9:d0:cf:7e:8d:10:d0:cb:45:c3:
         9e:ae:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:38:08 2025 by rpki-client