Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
File:                     6534CB6AA60711EFA9497E10C4F9AE02.roa (raw, json)
Hash identifier:          lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=
Subject key identifier:   F9:0A:3B:55:30:A4:D1:83:77:2B:98:8E:C6:31:FB:DC:44:B5:DE:A6
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       0127
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
Signing time:             Mon 21 Jul 2025 05:10:51 +0000
ROA not before:           Mon 21 Jul 2025 05:10:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        103.65.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jul 21 05:10:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687dcbdb-5407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:2e:04:f7:dc:08:9a:26:27:9a:c2:76:72:
                    2b:00:9a:61:ba:dd:4c:a0:05:f5:bf:d9:23:3a:9a:
                    0f:91:8c:5d:f2:d3:f5:20:8f:78:1e:ff:0d:f5:3a:
                    16:e3:f9:f4:d2:01:9e:a7:d3:57:54:dd:04:a4:3e:
                    68:61:6d:6e:85:af:c3:3d:d8:a4:11:c8:f4:d1:c7:
                    8b:c5:92:cd:47:23:e4:17:c0:5d:9c:1d:5c:ae:f0:
                    09:7d:1e:98:9d:bd:7c:81:6f:67:ac:42:74:45:89:
                    30:dc:c3:dd:30:33:a1:ad:5d:b2:28:e9:0e:ec:4b:
                    36:9b:b1:98:e9:85:63:87:08:40:7b:fb:6c:0f:02:
                    17:a7:fa:b2:81:e6:c9:c2:ad:e6:29:5a:23:07:52:
                    04:46:c3:40:93:92:da:94:f5:14:77:f4:38:51:c8:
                    36:ba:80:b2:b3:85:b5:d1:36:c8:dd:46:6e:15:02:
                    ad:5b:a5:13:7b:bb:ab:62:c0:14:06:4a:a6:ac:44:
                    fe:ff:a7:27:4e:e5:62:cf:22:a5:73:2f:72:0d:d9:
                    62:db:2c:45:c3:21:91:19:6f:b0:2e:11:3b:3d:b1:
                    91:2f:4c:d6:1b:46:ba:23:ed:44:ca:af:64:a2:42:
                    d7:3e:50:59:3b:9c:79:4f:02:38:b2:3b:dc:76:86:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0A:3B:55:30:A4:D1:83:77:2B:98:8E:C6:31:FB:DC:44:B5:DE:A6
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:97:57:ac:ab:25:02:8e:28:a2:26:24:aa:6c:8b:b2:c0:
         ac:9e:c6:78:c7:a6:f8:19:9f:90:14:a7:26:a2:de:1d:c6:72:
         fe:50:01:ef:69:6d:72:6e:50:ca:2f:ba:c2:3d:c4:ee:98:38:
         d2:16:de:75:cd:56:6c:46:ba:90:90:25:50:dd:c9:69:e2:8d:
         f7:97:fc:c5:4e:5f:26:81:bd:fd:1b:81:8d:7d:7b:d6:f8:05:
         3c:45:0e:f2:34:48:2c:79:8e:57:13:d5:ef:29:3e:05:f0:51:
         2c:c1:ab:aa:a6:4f:7c:81:a9:5e:dc:f1:55:ee:8a:c4:32:71:
         ee:4a:ae:20:d3:28:3b:8b:b9:45:f0:1e:a3:4e:a6:89:1e:df:
         80:2c:4b:ce:c4:7a:78:ae:e0:84:c7:43:cc:e7:0e:49:a8:b0:
         94:0d:74:18:f5:1b:29:f9:d2:d2:68:9b:1b:6d:c2:42:68:d4:
         65:8c:2f:9d:a5:bb:6c:5a:c8:e4:6c:87:79:77:d0:05:17:2f:
         9c:33:d3:a4:4e:e8:e2:2f:9f:93:1e:70:7c:7d:4c:11:e9:49:
         eb:d8:31:91:ae:48:1a:4b:9b:ae:15:62:8d:5c:93:77:0a:0e:
         4c:01:a9:ca:8c:3a:cd:2f:1c:e9:df:e2:80:77:51:47:36:85:
         9c:b6:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:23:41 2025 by rpki-client