Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/FF3B3F84B63311E8BAD5A95EC4F9AE02.roa
File:                     FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (raw, json)
Hash identifier:          0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=
Subject key identifier:   17:58:55:6E:65:F7:3E:E0:B2:38:21:05:DA:52:2A:F0:3A:53:6D:53
Certificate issuer:       /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial:       12F3
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/FF3B3F84B63311E8BAD5A95EC4F9AE02.roa
Signing time:             Tue 20 May 2025 17:28:40 +0000
ROA not before:           Tue 20 May 2025 17:28:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137905
IP address blocks:        103.114.146.0/23 maxlen: 23
                          103.114.146.0/24 maxlen: 24
                          103.114.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
                          rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 16:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4851 (0x12f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
        Validity
            Not Before: May 20 17:28:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682cbbc7-1a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:5f:bc:5d:05:06:b1:97:ce:53:9a:6c:95:
                    be:a0:34:42:bb:c9:c7:fb:bf:85:d1:b4:bc:21:b3:
                    8f:d9:0f:b2:db:c8:13:bb:57:c7:4e:ef:45:b1:a9:
                    03:b1:9d:dd:a0:06:a1:90:19:2b:03:fd:e3:e0:d6:
                    6d:0f:a7:b3:02:e5:63:9b:09:43:fb:e6:88:19:38:
                    20:a8:4e:9b:6f:ef:8f:6f:93:1c:4f:86:81:6f:9b:
                    16:89:0e:25:38:b8:ec:bc:d6:c8:af:fd:7c:ae:dd:
                    b5:cd:94:00:24:5a:68:db:9c:87:16:7b:9c:1a:87:
                    65:d1:97:40:c5:d8:c5:e7:0e:73:5d:88:b7:cf:6a:
                    50:d4:28:80:28:1d:89:7b:0f:72:a1:60:c9:25:b3:
                    d6:de:17:c1:2b:b9:80:3d:27:c2:b6:25:fb:4c:91:
                    37:ee:22:f8:49:88:07:9e:02:67:e7:d6:b2:2b:04:
                    a1:6e:b3:44:fb:ca:12:c1:1e:39:bd:9a:ed:29:b8:
                    36:b8:88:ee:1f:f1:5e:92:34:7c:cc:ad:33:c0:74:
                    03:05:6c:e7:e2:86:28:89:97:7c:4b:67:2e:ab:8c:
                    e9:78:eb:42:4e:3d:f8:c8:27:fb:90:38:0e:96:fc:
                    98:f5:99:9c:bf:db:43:d8:1f:e7:b7:d0:53:40:26:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:58:55:6E:65:F7:3E:E0:B2:38:21:05:DA:52:2A:F0:3A:53:6D:53
            X509v3 Authority Key Identifier:
                keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/FF3B3F84B63311E8BAD5A95EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:c3:e0:8a:29:ef:7c:e2:9e:c6:ac:a2:63:ec:b6:12:79:
         6c:05:76:d9:e8:5b:9c:ec:8b:60:69:46:af:ae:67:a5:33:56:
         21:72:af:40:c8:98:9d:b4:2e:f9:f7:52:30:bc:58:e0:df:31:
         ab:3e:09:a5:27:3e:8b:b6:19:7f:76:a6:91:50:37:ae:08:e2:
         48:d1:c9:18:b6:9c:2b:29:30:67:95:09:bb:da:2a:bd:9c:65:
         1c:4d:50:ff:b2:91:00:60:c1:d6:bb:b1:71:d6:d9:c6:3f:dd:
         de:ee:43:52:38:1e:2d:26:6e:39:e0:df:1c:0b:00:d2:ae:74:
         4d:f5:88:53:5e:dd:44:05:b4:c8:94:9b:9e:8f:79:0d:c4:0d:
         1d:da:68:6f:93:1a:4b:84:a7:95:02:f8:cb:71:83:b0:2e:97:
         98:63:b4:02:08:cc:ee:e2:f4:34:ef:f9:e6:db:e6:2e:2e:41:
         73:4f:9a:5c:7e:77:42:44:e2:50:74:eb:47:c3:2a:4e:3c:d4:
         b4:13:77:f0:96:5e:73:3b:ac:f5:a9:9a:59:bd:9a:fd:40:a3:
         4c:4e:fc:4b:e7:f8:d3:07:2f:32:bd:19:fc:d3:89:c5:95:87:
         7e:86:54:3f:f0:46:99:2d:1b:0b:34:2a:54:6a:a5:86:1e:d0:
         b5:f6:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:16 2025 by rpki-client