Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
File:                     37BC67B4B18711EC9F9FA058C4F9AE02.roa (raw, json)
Hash identifier:          au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=
Subject key identifier:   B3:FF:0C:25:C6:EC:E3:70:FA:18:44:BE:AA:4A:15:DC:23:B7:D8:C6
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       11B2
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
Signing time:             Mon 26 May 2025 17:48:17 +0000
ROA not before:           Mon 26 May 2025 17:48:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     133043
IP address blocks:        103.206.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4530 (0x11b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: May 26 17:48:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6834a961-34c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:14:2a:e6:c0:d7:f9:bd:4c:49:2e:69:63:
                    92:86:c7:4e:6a:e9:61:c6:66:c7:98:49:65:65:95:
                    b2:b0:01:fb:10:37:8a:10:c6:05:73:a5:81:55:35:
                    e1:64:b2:f8:9c:bc:3f:5f:ad:37:3a:c4:ef:9a:7b:
                    d2:bd:4f:75:bd:f5:8f:d0:9f:ad:ea:15:ee:7d:c1:
                    72:74:1d:33:bd:46:c1:c1:70:10:8d:88:e6:30:49:
                    6d:ba:59:c7:c1:c1:f1:cb:7a:fe:bf:52:ac:1f:c4:
                    91:3e:75:38:39:46:da:82:99:1b:d2:ad:54:c0:41:
                    5d:29:82:0c:00:cf:ea:bd:ca:46:bb:03:f8:a6:a9:
                    b2:6a:57:17:45:9c:93:a7:10:bc:3f:23:cc:d3:c9:
                    bd:c6:14:cc:e1:be:b5:ce:b3:f7:54:e5:b8:b7:f4:
                    16:2d:c6:95:70:04:f2:00:ca:ef:5a:36:be:9f:a7:
                    c8:17:49:4b:7c:fc:c7:54:ea:06:4b:e7:ee:fb:70:
                    00:0b:87:66:a2:49:b5:47:88:78:3c:f8:72:89:16:
                    f8:3f:4a:d6:26:56:5c:7c:c5:7c:b2:e8:3c:1b:7a:
                    e8:75:bb:a8:fa:7b:a0:1a:74:a7:0f:6a:65:3e:1a:
                    2a:50:87:68:8f:95:c9:fd:54:05:ce:51:ff:4c:2c:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:0C:25:C6:EC:E3:70:FA:18:44:BE:AA:4A:15:DC:23:B7:D8:C6
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:e5:51:8a:96:76:d2:38:c8:4d:11:f3:d3:3f:af:fb:25:
         10:fe:11:8c:a3:fb:90:a8:4e:65:c3:03:51:0f:d6:80:ea:5d:
         9a:da:38:cd:81:09:02:8f:a8:55:f2:62:b1:64:7d:9c:6f:95:
         aa:df:75:d4:28:b3:e3:b1:e5:fc:45:6f:0d:73:24:8a:2d:2b:
         de:0d:96:53:8b:59:72:dd:96:97:2b:a5:6d:7d:f3:55:fa:1e:
         46:84:bb:28:eb:6c:11:75:6f:c7:56:88:7c:22:96:35:d2:e4:
         c0:1b:75:1d:22:07:49:eb:42:7d:05:49:6d:c4:12:ea:6c:8f:
         80:15:ef:d9:80:d0:07:67:b0:ad:19:df:b7:ca:cc:44:fd:e6:
         2c:37:29:4b:b8:92:1b:11:8a:9f:35:76:bb:b3:06:7e:5d:62:
         d9:63:35:e8:60:6c:62:9d:df:ec:96:4e:c8:02:1b:a8:5d:1e:
         29:81:bc:fb:36:cf:4f:d9:2f:7b:a9:0b:e2:e2:b8:10:9a:af:
         52:6c:86:57:13:3d:ed:60:20:dc:74:40:92:4b:9d:59:12:2e:
         3c:41:6d:cc:72:3b:44:e3:c4:40:46:68:34:fa:d1:36:1f:47:
         a9:d4:64:7a:c1:2c:bf:f4:9e:5d:2b:0a:6c:6e:f7:64:a3:a0:
         16:67:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:14 2025 by rpki-client