Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9A1761AE360C11F0BE192015C4F9AE02.roa
File:                     9A1761AE360C11F0BE192015C4F9AE02.roa (raw, json)
Hash identifier:          Fw26f1I4qdIDtPBFyxHtGDABfOJiQUm7+UVQXV1qLq8=
Subject key identifier:   02:46:CE:A9:F0:9E:5B:5B:52:74:2B:EA:BA:4D:2F:EA:24:8A:1C:23
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       0789
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9A1761AE360C11F0BE192015C4F9AE02.roa
Signing time:             Wed 21 May 2025 06:27:00 +0000
ROA not before:           Wed 21 May 2025 06:27:00 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140543
IP address blocks:        103.142.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: May 21 06:27:00 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=682d7234-15f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:ef:2e:e1:91:ee:ab:49:21:29:39:34:83:
                    07:9b:eb:f8:20:c4:37:e2:bb:2f:ed:19:6d:ff:ca:
                    03:65:4b:c4:58:1a:0a:94:9d:69:85:22:e4:1d:ae:
                    14:d7:80:00:f8:b1:07:80:ae:c2:97:00:b2:e8:67:
                    db:85:8d:f1:02:82:b3:80:2a:94:8f:4b:63:a1:69:
                    43:fc:38:ef:04:2a:f0:38:cf:88:b5:dc:8b:68:fd:
                    09:81:79:b1:ec:90:bd:e4:00:67:e5:31:22:62:2f:
                    73:a5:c7:92:9c:f2:c1:d7:b2:55:a2:ae:57:d0:81:
                    b2:09:d7:26:04:c6:85:e0:d9:db:fe:f2:37:fa:e1:
                    a1:0b:80:2f:32:f1:16:89:aa:69:c6:39:17:5d:4d:
                    f1:57:bf:34:ca:c5:ee:b3:b6:14:83:d9:37:2f:87:
                    62:6b:98:1b:48:d1:6e:1c:c4:62:cc:69:47:ea:32:
                    78:1f:db:1e:d7:56:26:d7:37:0c:78:af:44:29:5a:
                    bb:e1:88:47:fc:a4:b6:7e:b9:2e:9e:69:a2:2e:cc:
                    96:a6:38:2f:35:ea:83:86:1a:1b:60:47:f8:45:58:
                    ed:3a:84:1e:32:f3:c1:20:10:ba:ce:af:b1:f4:18:
                    b8:d9:4b:2d:52:f9:82:35:d4:bc:39:e5:15:02:60:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:CE:A9:F0:9E:5B:5B:52:74:2B:EA:BA:4D:2F:EA:24:8A:1C:23
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/9A1761AE360C11F0BE192015C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ee:5f:db:8d:db:0a:e3:ae:48:d3:09:24:da:15:03:b8:4d:
         a6:30:b5:b2:ec:4d:c7:06:81:12:20:dc:2a:1e:81:c7:ff:f1:
         cb:45:42:ee:b5:44:0a:df:57:40:f2:a1:60:4c:9b:e4:fd:23:
         28:32:e7:b6:dd:92:21:01:07:ae:26:b3:ea:34:ff:ea:df:35:
         7e:13:1f:d7:b1:06:a4:92:66:5a:55:ee:fc:3e:30:85:82:ad:
         38:ea:f4:d8:30:1d:f8:1d:07:5b:07:87:d6:d2:c4:53:ba:33:
         63:2f:94:2b:ec:28:0a:43:9d:99:48:55:b7:fa:fd:6c:f1:43:
         d0:ef:34:57:2c:51:d9:61:3f:d9:75:72:2b:5d:0d:d9:82:e6:
         e7:67:3f:7f:66:ae:b9:23:8a:5c:69:39:47:45:ee:c6:cc:cb:
         68:69:9f:cd:c3:5b:6d:1b:3b:17:30:27:22:51:60:5d:bd:99:
         24:8f:e9:f9:eb:98:bc:e6:90:93:60:62:13:d0:1b:3b:aa:b2:
         01:47:12:76:91:cc:a4:c4:05:1e:5e:c2:4b:37:97:52:c3:16:
         fb:2b:01:a5:a8:fd:73:41:fb:07:e5:b5:65:d9:56:cd:c8:43:
         f2:82:31:f7:36:54:1b:91:8d:1d:91:f7:bc:77:0f:a3:c6:41:
         36:5b:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:55:50 2025 by rpki-client