Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
File:                     0913CC14A59911EFBA373D1BC4F9AE02.roa (raw, json)
Hash identifier:          zLl/IZu0xffl+i5k4Uqz4PGyZN+zw+IO5hcnnTBBL7Y=
Subject key identifier:   B0:48:0F:B6:FD:D4:32:6E:A0:00:2D:18:B4:A2:5B:E4:F4:DB:FC:C2
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       CB
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 06:05:10 +0000
ROA not before:           Tue 03 Jun 2025 06:05:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152734
IP address blocks:        103.142.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Jun  3 06:05:10 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e9095-bf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:9c:bc:1b:37:9c:a5:bd:ef:54:15:e7:59:
                    b9:d8:e3:a4:d7:19:16:00:72:6a:3b:74:ed:58:96:
                    f8:d8:fd:98:fd:37:f5:59:d9:57:ee:46:4d:f9:43:
                    3f:e8:f6:b3:b2:88:83:ec:13:a7:6f:c4:55:a6:be:
                    bb:77:9f:c8:f9:1d:d6:95:ec:0b:0e:5d:e9:af:56:
                    46:3c:ee:4e:75:20:07:53:5a:29:09:6a:4f:d7:6c:
                    1f:ff:f1:41:2b:69:9a:59:a4:75:89:b0:22:db:29:
                    d0:c2:be:9b:b4:57:26:4c:93:0d:4e:b9:39:50:22:
                    5d:98:0b:4c:c7:82:5a:04:60:76:3e:ab:5c:9a:68:
                    a8:58:f8:f1:5c:1d:28:8b:d9:69:f1:f2:e2:af:f6:
                    92:6a:1b:d6:ef:20:92:bd:f7:00:1e:4e:c7:e4:88:
                    b4:89:0b:4c:7c:c8:9d:10:0c:14:ad:4c:45:76:a0:
                    32:27:80:31:11:ec:3f:0a:6c:b7:91:26:36:57:37:
                    64:be:94:a7:6e:ee:dc:ee:b9:bc:05:e6:99:7c:52:
                    2f:72:df:42:91:c1:0c:d1:e9:1e:5c:cc:41:83:90:
                    2c:8b:4a:ad:35:91:31:4b:a8:66:f5:9a:dd:bc:4d:
                    1c:65:83:cd:e7:df:07:76:f9:95:cd:55:6c:84:cc:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:0F:B6:FD:D4:32:6E:A0:00:2D:18:B4:A2:5B:E4:F4:DB:FC:C2
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:5e:85:4d:47:bc:3e:46:39:f9:b5:39:4c:63:fb:7d:f8:2a:
         98:67:7a:d2:66:25:52:4f:62:4c:1d:48:0e:21:bc:1c:a0:ad:
         71:42:de:0b:8c:81:0f:7a:18:d5:09:0e:ed:96:65:bd:14:ed:
         e0:f2:71:ef:83:0d:d6:71:42:6e:2e:3d:40:56:a2:7f:06:3e:
         b9:65:b0:b2:bd:39:0c:f4:87:21:ce:91:17:fd:6a:5f:a7:78:
         21:21:24:10:14:de:47:c1:6e:bd:9f:58:9c:61:72:5c:6a:a6:
         41:a4:3b:cb:38:54:59:53:96:aa:97:79:69:89:ca:6f:d0:29:
         17:be:91:dc:ca:b6:70:69:24:ac:f9:9f:81:16:85:31:dd:67:
         23:13:9a:eb:ee:33:73:cf:85:c6:6a:01:8c:aa:80:bd:ed:d5:
         5a:75:b8:1d:4f:81:26:9b:80:e4:3d:a7:9f:5c:25:d1:6d:94:
         f0:25:8b:82:5b:2a:47:60:5d:b4:86:6d:bd:ac:86:9a:80:0f:
         82:ff:05:aa:1c:d9:c2:e0:50:7a:2f:6a:fe:fc:bb:9d:93:3f:
         f4:42:f9:1b:a7:bd:01:b0:19:68:98:a3:44:ba:5a:45:ff:13:
         15:fb:30:b0:08:1d:e0:48:81:9e:42:89:32:73:34:fe:d5:73:
         fb:d5:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:37 2025 by rpki-client