Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/03643212905F11EA94823C28C4F9AE02.roa
File:                     03643212905F11EA94823C28C4F9AE02.roa (raw, json)
Hash identifier:          HOv6woKgZ16Bnc6yr+WXy4C1GAOaPia/dFqUxc6c7eU=
Subject key identifier:   4A:68:D2:A7:1A:18:7A:B7:28:D5:0F:1C:D7:46:BF:ED:5B:53:48:52
Certificate issuer:       /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
Certificate serial:       0983
Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/03643212905F11EA94823C28C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 20:25:31 +0000
ROA not before:           Mon 02 Jun 2025 20:25:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140586
IP address blocks:        103.150.188.0/24 maxlen: 24
                          103.150.189.0/24 maxlen: 24
                          2001:df7:8580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl
                          rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 20:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2435 (0x983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
        Validity
            Not Before: Jun  2 20:25:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e08ba-bb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:ae:af:eb:b1:e4:96:5d:dc:02:48:56:96:
                    49:a4:96:f5:86:7b:ce:22:95:38:60:20:bc:81:3d:
                    99:f2:ae:91:72:8e:d9:ce:a1:97:d4:d1:03:c9:3e:
                    48:de:c9:02:ba:2e:c2:6d:0b:26:70:25:92:4e:8a:
                    db:ab:eb:33:26:13:2b:33:93:c7:27:76:08:04:d5:
                    69:54:f5:0e:b8:b0:44:04:a2:4d:e6:f2:aa:89:11:
                    b0:66:10:44:d0:0d:b1:b8:1f:95:bd:e8:10:fd:17:
                    6b:2a:04:80:41:02:44:3a:f0:1b:69:cc:10:e2:fb:
                    7f:30:f9:e3:f1:fb:4b:f3:ee:56:3d:2c:e8:bd:10:
                    17:a1:16:5a:a4:97:54:6f:16:1c:fb:b4:5e:6a:0c:
                    ff:b2:2f:b8:8f:07:c2:40:c7:fb:6d:cc:ba:ef:e1:
                    62:24:2c:41:55:ba:68:f0:5d:15:96:6d:5a:f1:bb:
                    18:24:78:bd:04:a7:90:aa:c8:f2:89:ca:0a:e8:93:
                    3a:a0:b2:f7:2e:d3:22:f8:00:fa:3a:1e:cc:41:7b:
                    43:3e:1d:2a:4d:55:dc:73:e1:7d:64:fd:96:ca:5c:
                    ea:6f:32:72:d3:af:1b:e9:fa:a1:d8:d8:1b:db:de:
                    aa:b8:ee:8b:16:3d:ec:d5:87:73:1b:ad:e7:3c:7b:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:D2:A7:1A:18:7A:B7:28:D5:0F:1C:D7:46:BF:ED:5B:53:48:52
            X509v3 Authority Key Identifier:
                keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/03643212905F11EA94823C28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.188.0/23
                IPv6:
                  2001:df7:8580::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:95:e5:c6:f2:ba:02:bf:b2:42:6a:0d:7b:29:f4:f2:0d:ca:
         15:31:3c:99:b9:0f:e9:0f:4f:ec:cd:e1:38:41:a3:2a:f6:6f:
         4d:e9:65:3b:68:d7:6c:6b:42:f2:ca:8e:02:75:33:1d:e2:5f:
         f0:cf:b1:5a:ad:eb:c5:c2:62:99:1f:8f:4e:09:60:5d:ba:23:
         01:32:35:4b:bf:f2:da:04:5f:c0:82:09:d1:96:4f:59:fc:e7:
         2b:f2:2d:7e:df:24:c0:e6:3c:26:e4:2b:67:6f:be:0e:14:eb:
         0e:27:81:87:41:15:3b:58:de:3d:0e:58:39:ba:a7:fc:5f:78:
         d7:21:f5:03:7e:4c:c2:55:07:d7:db:f7:7b:99:73:5f:80:25:
         d5:33:34:67:aa:16:7d:79:28:76:79:55:33:1c:fb:0e:84:f3:
         39:b7:16:62:cf:00:33:a1:a9:0d:b2:d4:11:a2:12:3c:72:ae:
         dd:ed:fd:8a:8d:80:c7:21:ee:96:be:ce:a0:ca:56:75:69:75:
         46:70:16:70:dc:a6:bc:ee:38:02:71:5b:41:0d:a8:2e:a1:6d:
         ee:65:17:55:d6:18:72:8c:c3:19:72:80:24:69:c1:4e:61:79:
         3f:95:50:22:e9:aa:47:97:ee:4e:3f:ee:9f:24:01:4b:27:62:
         a2:b0:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:26:19 2025 by rpki-client