Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa
File:                     9D006D76ABFF11EFB2C29330C4F9AE02.roa (raw, json)
Hash identifier:          sav0Vfh9ahqBtsGl4vXlcCzgGz1PO39Q+R+5OKHm5uw=
Subject key identifier:   FB:91:C4:AD:29:82:84:4E:AA:08:A8:AB:E8:DE:A3:C3:09:FF:E3:76
Certificate issuer:       /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial:       01BB
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa
Signing time:             Mon 05 May 2025 02:39:29 +0000
ROA not before:           Mon 05 May 2025 02:39:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139223
IP address blocks:        103.112.42.0/23 maxlen: 23
                          103.112.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
                          rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
        Validity
            Not Before: May  5 02:39:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681824e1-06d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:86:18:d3:62:43:e4:45:18:f5:e8:d3:fc:
                    c5:ba:12:90:71:d9:01:3b:9f:c9:3a:03:93:3d:21:
                    39:82:0a:02:02:a3:b4:42:dd:e0:42:84:cc:a8:7c:
                    e3:e5:9d:e5:08:b3:01:e1:db:65:a5:b3:51:57:b9:
                    5d:04:70:3a:55:30:e9:8d:ec:cf:ff:7f:e0:71:39:
                    3d:09:f7:ca:06:fa:65:93:ef:7a:0c:fb:ea:62:c7:
                    6b:08:7b:6d:00:0c:d8:07:60:69:0a:28:d1:b9:29:
                    d8:ca:ba:3e:14:a3:11:da:4d:76:3a:03:d4:f2:e2:
                    ec:a2:16:34:6c:52:0e:84:a3:1b:2d:e2:ef:ff:ee:
                    26:59:9b:31:c3:8f:e7:3f:cb:ca:14:d9:74:e5:c0:
                    99:2e:26:51:c5:12:18:82:1a:9b:28:f9:1b:7d:b2:
                    bb:db:89:ec:25:0a:87:5a:a9:5a:3d:76:5d:f2:ee:
                    18:31:5a:f4:90:32:ba:c2:dd:40:ea:e9:a9:bd:a1:
                    9a:47:c2:a2:9f:3b:04:9f:d3:fb:af:63:61:7d:32:
                    04:03:46:32:21:8f:71:5c:e4:c4:6e:ec:3c:7c:b0:
                    58:5f:6c:6d:d0:10:51:92:6b:04:d8:b7:22:27:bd:
                    59:32:be:83:47:88:6e:5d:74:80:72:b2:f5:d4:d3:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:C4:AD:29:82:84:4E:AA:08:A8:AB:E8:DE:A3:C3:09:FF:E3:76
            X509v3 Authority Key Identifier:
                keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/9D006D76ABFF11EFB2C29330C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:ac:58:40:e9:ca:b2:22:24:f8:ca:0f:42:e2:48:a6:ba:c7:
         b6:5d:12:05:44:31:6b:42:69:b5:36:61:28:97:5c:75:4b:bb:
         aa:fc:be:17:fb:c1:08:d7:24:79:f6:bc:5b:83:3f:8b:54:aa:
         94:fd:e6:bf:a1:67:1f:f3:69:52:df:32:10:dc:f9:ce:7d:a3:
         01:45:aa:55:de:68:c5:42:e4:f3:5f:76:a6:b6:a1:05:12:84:
         ef:e5:bf:62:81:cd:39:7b:ca:e2:50:b2:be:ab:7b:f8:1a:fe:
         ce:f2:9e:d5:c2:c9:c5:f5:f7:62:1b:86:68:7f:d9:44:54:df:
         c7:8c:dd:94:45:4c:bb:d7:a2:06:8f:9b:6e:86:17:0c:34:f3:
         21:bb:23:01:78:db:57:a4:9e:10:0e:a7:a9:0f:e5:d2:77:0f:
         f2:f2:b5:cf:61:3a:93:df:1d:bc:cf:3e:52:fb:d5:ba:49:2b:
         ea:6b:32:79:0b:3e:bb:8b:36:84:3b:3d:b6:88:eb:19:c8:21:
         6f:04:85:31:62:5c:d3:73:d4:ed:43:02:2a:b4:1d:2d:2d:3b:
         1e:a4:bf:40:8a:aa:96:a0:32:9d:f8:31:b5:8a:eb:1c:71:87:
         55:0d:f0:59:08:15:da:ab:2d:2a:6d:81:fe:44:04:d9:17:07:
         b1:f9:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:15:35 2025 by rpki-client