Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/9446A67E767911F0B8A38C44C4F9AE02.roa
File:                     9446A67E767911F0B8A38C44C4F9AE02.roa (raw, json)
Hash identifier:          DNDE7H5cwWUnb9mWFmW3vtzaVWTNA5fOgNfQPNvFpAk=
Subject key identifier:   7F:7D:DA:4D:36:98:FA:7F:8A:49:B4:43:7C:7F:66:25:08:CC:5C:3A
Certificate issuer:       /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Certificate serial:       0759
Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/9446A67E767911F0B8A38C44C4F9AE02.roa
Signing time:             Mon 11 Aug 2025 06:08:20 +0000
ROA not before:           Mon 11 Aug 2025 06:08:20 +0000
ROA not after:            Wed 01 Oct 2025 00:00:00 +0000
asID:                     141457
IP address blocks:        103.159.236.0/23 maxlen: 24
                          2406:ddc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl
                          rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
        Validity
            Not Before: Aug 11 06:08:20 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=689988d4-963e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:df:30:c0:e2:f0:ea:86:9d:79:78:54:b7:
                    d5:1f:d4:ae:10:cd:b5:b2:22:01:50:5f:23:d3:f3:
                    b7:ce:66:a9:f8:95:b2:51:64:d1:80:32:d6:6f:1c:
                    36:d2:88:f0:1e:72:10:bf:3b:45:bb:a3:6a:87:98:
                    eb:84:35:28:16:15:79:44:91:28:cb:d0:92:15:b8:
                    54:0e:aa:b0:49:28:c3:4d:a0:b3:ee:30:f0:fa:8f:
                    0b:37:6f:1f:72:08:3a:a3:5d:90:13:72:21:77:af:
                    30:f8:c0:49:d9:44:5f:eb:d9:0e:1d:e4:a9:bc:83:
                    85:0e:f8:f2:df:5e:eb:1b:3e:95:81:ec:b8:89:1f:
                    3e:73:d0:69:52:2c:d8:86:f2:5c:09:b7:b2:ec:96:
                    26:79:0f:b6:96:04:0f:63:54:61:87:49:99:cf:d8:
                    dc:62:20:aa:a3:1c:32:6e:b0:26:95:95:af:57:30:
                    4b:65:81:ad:8a:4a:49:fe:90:d0:29:7b:42:8a:0a:
                    26:83:f0:0e:9a:e9:80:4c:62:e0:bd:a1:fe:b8:a7:
                    e4:32:d4:0b:ad:44:67:b8:78:5c:33:75:db:0d:f0:
                    ac:3a:63:d6:3b:36:0f:00:ff:e7:73:31:dc:0a:0e:
                    8a:bc:c3:fb:99:bc:5d:39:a2:34:c7:e1:9f:d0:d8:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:DA:4D:36:98:FA:7F:8A:49:B4:43:7C:7F:66:25:08:CC:5C:3A
            X509v3 Authority Key Identifier:
                keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/9446A67E767911F0B8A38C44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.236.0/23
                IPv6:
                  2406:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:79:16:39:b7:48:cd:e8:d8:25:33:e5:96:2b:19:b9:e4:
         e9:23:cb:0f:c5:bc:9c:3e:24:b8:06:69:a0:08:bf:ff:23:fc:
         92:58:8f:50:e3:30:01:a3:04:f0:5c:7a:ba:01:86:2f:df:5c:
         a8:b1:33:cf:69:e4:6c:49:d7:89:c7:3f:ba:40:dc:4a:d4:c7:
         1b:e8:53:a5:f1:7a:03:db:f4:2e:46:d3:4a:2b:4e:ee:1a:99:
         da:a9:0b:85:4e:2c:2d:b1:35:85:31:43:ce:3a:da:13:0b:af:
         ae:27:8c:f6:c4:d1:b9:2f:a4:c9:02:11:a5:58:e1:a7:c8:20:
         ce:f0:b3:b4:c0:40:a9:f0:0a:84:05:d1:ca:6b:8a:95:83:14:
         9f:21:86:45:55:20:56:4c:ae:12:08:ad:7b:01:e9:0b:bf:94:
         f5:27:84:bb:c5:f9:c4:26:4a:db:f8:f6:89:f3:52:91:ea:4f:
         36:82:33:71:33:a4:93:ca:db:20:47:bd:d7:b4:55:dd:0c:5f:
         6c:6e:94:12:f7:67:83:3e:4c:eb:7a:e2:ba:d6:21:5b:62:08:
         88:56:56:97:31:4f:f0:ad:da:dd:ff:fb:0e:94:c0:c6:70:2a:
         10:dc:7f:02:8e:9b:92:3b:cf:16:c4:08:3b:f6:9a:59:a4:5a:
         ca:89:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 11:38:04 2025 by rpki-client