Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/CED6A59A032B11EFAC30281BC4F9AE02.roa
File:                     CED6A59A032B11EFAC30281BC4F9AE02.roa (raw, json)
Hash identifier:          62gMKAte/bNphw0tPYUF/ZvmE1/0Yr02LZLp3QQyGq4=
Subject key identifier:   6F:76:14:F7:37:50:F2:24:6C:6F:93:E4:C6:21:73:C7:9B:95:8C:83
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0754
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/CED6A59A032B11EFAC30281BC4F9AE02.roa
Signing time:             Tue 02 Sep 2025 23:44:24 +0000
ROA not before:           Tue 02 Sep 2025 23:44:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     51847
IP address blocks:        103.24.217.0/24 maxlen: 24
                          103.240.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 23:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep  2 23:44:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b78158-48c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:fd:76:4d:c3:d6:26:55:37:aa:f3:10:ed:
                    b7:c3:9f:f8:da:e2:1b:cc:6c:31:8c:59:61:74:55:
                    8e:e7:60:e3:d9:1e:c0:ce:a5:84:d5:83:56:a7:49:
                    2a:de:c9:fb:f5:6d:c7:4d:ed:18:42:1c:f7:58:08:
                    d8:7a:50:f0:7a:03:76:24:7b:b0:67:82:7c:b7:ee:
                    be:76:46:a7:c3:92:dd:7f:48:4d:4a:c0:49:ba:c8:
                    88:c2:b0:c5:a6:f1:9b:f2:5a:ad:cb:46:81:49:96:
                    f2:1d:2d:bf:e9:8e:df:f5:30:19:1c:ee:94:c7:05:
                    a6:48:50:e3:7e:00:f7:06:15:9d:62:5d:96:a0:0e:
                    93:c3:4b:a5:01:12:7b:7b:52:d2:21:95:8c:c2:8d:
                    a5:be:b4:6f:95:68:d9:3f:fb:96:63:3e:0c:b2:06:
                    ce:cd:db:9b:ff:d1:cb:42:bc:c3:b7:02:9c:97:45:
                    e0:ac:57:38:c5:21:df:a5:30:f3:26:a2:a1:e0:d3:
                    50:08:2a:21:22:f2:52:df:2c:0f:2c:1f:0b:97:ec:
                    6d:a3:9c:bc:09:fe:07:7f:61:2f:78:8a:6c:35:b0:
                    5f:fc:10:5f:26:f3:3a:c3:5b:1e:50:49:ed:bc:f7:
                    4d:12:c3:23:db:3e:7c:d7:4b:09:f8:68:39:23:f7:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:14:F7:37:50:F2:24:6C:6F:93:E4:C6:21:73:C7:9B:95:8C:83
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/CED6A59A032B11EFAC30281BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.217.0/24
                  103.240.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:4c:97:75:e7:d2:9d:de:4a:d7:ef:10:40:4e:a5:40:23:41:
         4a:4b:ea:b2:71:68:f9:f0:71:3e:99:da:4f:98:63:db:d1:14:
         a6:11:59:4a:21:d1:21:43:d2:12:c2:8d:8d:b6:6a:54:af:aa:
         fa:02:d4:18:ef:3c:1c:41:74:d3:7b:ac:59:b6:13:8e:93:75:
         2c:fc:c7:c9:09:9d:d8:ce:5c:d7:6e:04:3a:73:f7:8a:f0:00:
         3c:53:40:cc:ce:5e:ee:eb:8e:37:58:35:06:0f:3b:48:69:82:
         81:c6:57:66:ed:d8:ef:66:e6:ff:84:dd:ba:5b:90:f5:ef:71:
         45:6a:f6:2b:43:68:7d:3a:83:07:ef:28:32:52:1a:07:4b:95:
         40:d4:01:0b:36:b3:50:e5:44:2d:bc:7d:db:b4:ce:ed:46:5c:
         2c:4b:83:f8:1b:b6:3e:9b:c1:ae:07:f8:42:22:62:b2:8f:e7:
         39:e4:35:51:38:12:29:35:86:fb:f5:b6:09:85:7c:2c:1c:34:
         1c:4c:8d:fb:c6:54:92:cd:e3:a5:86:0a:59:2e:6f:11:de:58:
         04:dd:9b:95:a6:67:bf:96:c7:b4:c8:e2:19:9f:f0:14:73:b5:
         54:54:c8:32:cc:81:f0:7a:2a:4b:54:88:c9:6b:a4:c8:87:c8:
         6b:7a:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 16:18:50 2025 by rpki-client