Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/0CB9AF5C200E11EF91F18D75C4F9AE02.roa
File:                     0CB9AF5C200E11EF91F18D75C4F9AE02.roa (raw, json)
Hash identifier:          cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=
Subject key identifier:   DC:A6:43:BE:60:DF:30:F2:DE:6A:E4:6C:69:E6:49:15:F2:2A:54:21
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0189
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/0CB9AF5C200E11EF91F18D75C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:12:04 +0000
ROA not before:           Thu 05 Jun 2025 03:12:04 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140607
IP address blocks:        103.69.56.0/24 maxlen: 24
                          103.69.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 03:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Jun  5 03:12:04 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410b03-7570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:7d:8b:36:8a:c6:0f:d2:33:ca:6a:f1:b5:
                    6b:64:e4:ca:bc:ed:e0:3c:ba:85:90:2b:e3:23:18:
                    59:5d:f7:57:55:33:f0:c3:8e:e7:de:c9:bc:b0:ef:
                    c3:a9:02:04:5d:e4:08:70:82:c9:4c:57:fd:66:32:
                    d5:db:2c:b2:c2:e7:1a:41:73:a2:05:a1:50:ca:b5:
                    73:cd:c4:59:e8:8e:bf:fb:84:b6:86:a7:02:b1:5e:
                    76:a1:19:52:2e:c8:39:5d:3e:40:58:ac:30:32:62:
                    2f:b7:4d:83:02:65:fd:cc:a6:5b:4e:a5:65:cc:ea:
                    13:71:b3:21:70:b5:67:72:42:5c:76:ce:96:5e:5a:
                    b3:03:55:4c:f3:7c:f4:31:c0:a9:b5:d3:0a:51:21:
                    70:74:22:82:3c:a6:0c:87:82:a3:88:31:62:93:28:
                    95:7e:37:5c:a8:e4:7a:d8:d4:74:a9:be:26:5c:6a:
                    60:88:27:5a:56:5a:d9:d5:87:bf:be:e5:10:cb:9f:
                    cb:a6:4c:9a:42:f0:c5:86:4d:b3:08:d8:96:1b:d5:
                    b5:99:53:61:bb:73:74:b9:53:32:1b:0f:2f:c4:52:
                    35:36:46:27:f4:26:00:cb:79:16:5b:a2:11:ee:47:
                    0c:63:b9:73:69:d1:23:03:5a:30:a4:61:8f:8f:84:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A6:43:BE:60:DF:30:F2:DE:6A:E4:6C:69:E6:49:15:F2:2A:54:21
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/0CB9AF5C200E11EF91F18D75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:28:e9:f7:e2:81:e4:da:05:9c:97:a7:6b:b0:b8:75:94:b3:
         31:52:7f:ff:77:0d:0b:bf:0f:02:b5:77:4d:fa:f0:87:22:c9:
         7f:bb:ca:b4:a8:1b:47:b8:c3:f8:09:1a:3f:e7:18:3b:a7:f7:
         db:af:1c:ce:ad:87:c0:e0:71:a9:a2:c5:42:f0:dc:e4:90:8c:
         2b:f7:70:67:40:ad:09:42:4f:76:ec:5c:02:7a:b1:4a:75:e4:
         fc:67:5d:9a:ae:43:0e:7a:63:20:79:4a:3f:ba:59:31:0d:f4:
         d4:9a:59:11:5b:82:47:85:f7:21:3c:e0:4c:85:18:8e:65:90:
         88:df:0f:17:51:f0:81:66:6b:38:b4:ba:73:1d:8c:77:bb:86:
         06:48:e2:0c:16:1b:35:7c:1b:63:35:40:b5:91:b9:7a:86:88:
         fd:4e:b1:70:16:52:19:e0:4e:19:d6:cf:93:f9:66:41:fa:aa:
         d9:28:e4:62:e9:f1:f9:8e:6a:fc:b6:1a:3d:20:12:44:75:75:
         dd:d2:df:06:83:33:59:11:39:3b:81:e8:28:b7:ea:9f:9f:75:
         5e:f3:36:b7:c6:29:d8:12:e1:fa:c3:0f:0c:11:83:e9:f7:b2:
         bc:6a:09:ff:ed:bb:ee:a8:06:55:24:f5:17:9b:7e:68:1b:77:
         15:fb:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:03:08 2025 by rpki-client