Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa
File:                     A87AE518D2E011EDA1EF340FC4F9AE02.roa (raw, json)
Hash identifier:          XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=
Subject key identifier:   EE:B8:C3:28:69:B4:2C:46:56:51:F8:97:29:56:80:72:F3:46:18:AE
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       054C
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa
Signing time:             Sat 14 Jun 2025 23:23:19 +0000
ROA not before:           Sat 14 Jun 2025 23:23:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140344
IP address blocks:        103.230.56.0/24 maxlen: 24
                          103.230.57.0/24 maxlen: 24
                          103.230.58.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 23:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jun 14 23:23:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684e0467-307d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:6a:04:74:da:ef:d9:46:66:f3:aa:81:de:
                    7b:d2:ec:09:3f:69:32:3b:71:c1:57:7d:7c:31:4b:
                    d9:6f:a1:4c:26:16:a8:8f:99:ea:e0:0c:80:dd:d5:
                    c0:4f:9a:60:f4:02:a9:6c:3e:4d:96:8b:b1:15:2b:
                    8a:49:4c:bf:f7:eb:b4:7c:c2:e9:c1:41:e6:21:88:
                    97:f2:0c:54:d8:d7:33:0c:2a:e6:32:cb:2c:d2:20:
                    17:ad:8f:6c:44:11:dc:35:25:3a:5c:33:c8:47:dd:
                    ce:09:74:0d:da:27:fd:b1:ba:17:9d:f4:69:ab:94:
                    60:44:fc:71:24:be:5b:90:b5:f3:b0:45:c9:20:99:
                    8e:b8:c8:c1:1d:f0:96:c7:1a:3f:13:37:f6:2e:de:
                    91:aa:e5:e5:12:c3:05:14:7e:82:28:63:39:8e:d2:
                    b8:b5:bc:f0:03:62:30:89:cf:a4:60:3d:fe:fd:cb:
                    6d:e8:5c:5e:82:fa:57:25:58:dc:49:ee:38:5f:f3:
                    e9:e0:f5:e1:ba:d0:b3:e2:56:9b:1e:bc:70:f0:83:
                    d9:9c:d8:56:1a:1f:4c:f6:7c:0e:7b:2d:81:0a:21:
                    88:83:ba:76:88:f9:01:58:b5:19:92:2c:f0:9c:44:
                    e7:9c:73:e3:3a:56:87:9b:33:ce:65:bf:0f:55:a3:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:C3:28:69:B4:2C:46:56:51:F8:97:29:56:80:72:F3:46:18:AE
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0-103.230.58.255

    Signature Algorithm: sha256WithRSAEncryption
         38:77:4c:bf:01:b2:fb:c0:4e:c3:38:f7:15:84:1b:82:f1:cd:
         9f:eb:13:c9:14:24:54:69:d6:23:9d:6c:f9:cb:71:0a:89:ef:
         c8:9a:a3:3c:6e:80:33:c5:46:53:d2:04:c9:d8:b7:68:0b:f4:
         bb:19:1d:a1:55:b0:71:16:b8:b5:c8:f7:a9:92:39:56:c4:86:
         a1:6e:f6:12:41:33:f8:ff:9e:45:e9:e3:d5:4c:16:fb:6d:3e:
         59:bc:f7:11:6f:60:8a:30:3b:0b:4b:14:e9:4a:5f:bd:26:d9:
         98:ef:ca:a0:76:48:f2:7d:8a:25:b1:ad:25:4f:ff:21:f8:41:
         8d:da:fa:e4:73:ed:72:1b:21:b5:a5:bc:82:3d:6f:33:04:fb:
         a6:2d:e7:f7:0d:59:9e:2b:6d:af:eb:39:92:77:23:e7:11:78:
         1b:8c:a9:16:b2:6b:a8:b9:07:f9:c7:17:aa:55:1c:b8:01:29:
         49:3f:20:2c:b4:98:b5:f6:7c:9c:1c:1e:2f:ad:62:33:fd:6c:
         56:0a:9f:3a:08:48:37:a1:aa:ca:09:6f:a4:02:2c:94:0c:38:
         09:80:b4:c2:69:a4:b8:aa:c4:03:48:73:54:47:31:f8:52:c8:
         7c:1d:75:8e:ba:01:e7:1c:61:73:0c:81:de:0e:9c:0b:a1:d8:
         20:12:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:23:03 2025 by rpki-client