Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/2264A3AC083911F0B331A472C4F9AE02.roa
File:                     2264A3AC083911F0B331A472C4F9AE02.roa (raw, json)
Hash identifier:          2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=
Subject key identifier:   9A:35:16:B1:B4:31:E6:CD:33:48:62:52:A4:7B:91:07:F3:01:C6:B0
Certificate issuer:       /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial:       20
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/2264A3AC083911F0B331A472C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 07:13:26 +0000
ROA not before:           Tue 15 Apr 2025 07:13:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141767
IP address blocks:        203.9.210.0/23 maxlen: 23
                          203.9.210.0/24 maxlen: 24
                          203.9.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
                          rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70
        Validity
            Not Before: Apr 15 07:13:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67fe0716-4812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:93:43:88:c8:4f:3b:10:30:0d:0b:5b:e7:
                    9e:9a:cc:c4:13:d9:8a:9a:2b:7f:f0:ee:88:db:6d:
                    85:c2:c6:5d:b9:85:57:46:22:e8:77:ae:71:47:cd:
                    64:74:d8:01:7c:3b:7e:10:3d:f2:60:6a:ef:b1:67:
                    60:34:e2:9c:c3:e2:9f:92:8f:0f:4b:62:3c:93:26:
                    98:d4:0c:e6:c5:49:b7:53:62:7e:6b:b3:97:33:eb:
                    6b:af:ec:99:43:57:65:ce:cd:1c:9e:07:d1:23:0f:
                    e9:02:0d:ff:08:51:32:c6:ed:a1:9c:f7:55:e1:e3:
                    70:ae:97:b7:de:f6:04:a4:43:84:10:38:36:8a:29:
                    f1:87:1d:8a:a4:57:3f:90:83:20:90:19:cd:c3:8e:
                    0c:cc:32:9c:45:89:99:4e:60:97:10:72:d3:ab:7d:
                    b2:1a:f8:dd:27:38:41:51:f6:26:8f:c2:81:53:d4:
                    0a:21:b2:bc:5a:d0:69:f2:2e:f9:9d:7b:c8:03:a0:
                    55:ce:d1:46:b8:21:0a:2a:53:79:db:3d:0f:45:ec:
                    66:61:ae:3b:89:93:6d:03:c1:02:b3:45:e9:40:0e:
                    32:22:4b:d7:04:ff:c7:4b:7a:7b:7a:1f:56:cd:10:
                    dc:b4:0f:d4:97:82:05:ee:75:6c:03:7c:58:4b:29:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:16:B1:B4:31:E6:CD:33:48:62:52:A4:7B:91:07:F3:01:C6:B0
            X509v3 Authority Key Identifier:
                keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/2264A3AC083911F0B331A472C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.9.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:80:73:66:7f:68:eb:03:9f:8e:f2:f1:28:05:ad:f9:eb:74:
         b5:f5:90:8a:82:44:9e:aa:83:f7:cf:2b:c9:2e:bd:63:5c:b2:
         c3:8d:fc:d8:12:bd:89:7b:4a:e2:e3:6a:fe:a3:7d:69:99:e7:
         68:df:37:f0:68:3c:c6:9c:78:7c:0a:80:a6:fc:46:e7:9f:d1:
         eb:2e:90:ed:ef:be:9d:9c:29:a4:1a:44:aa:41:88:6b:5b:22:
         7b:fd:3e:0f:c1:34:1d:48:76:a8:65:11:2b:35:01:a4:7b:06:
         f6:1b:e1:c6:77:d1:93:d8:4b:24:a6:d0:67:e9:81:56:b4:fb:
         bd:97:8b:e0:74:03:b4:6e:90:a0:0a:83:a1:74:70:13:da:90:
         cd:70:86:d0:64:cd:d0:37:7f:3e:fa:d5:a9:ef:8e:bd:fa:93:
         83:80:c4:0d:3c:cd:20:e5:8e:b3:65:91:d6:fc:d8:3a:90:ce:
         83:e8:7e:ba:42:28:45:2b:b2:d9:e0:bd:fe:9f:bb:f6:39:16:
         7d:95:23:75:64:99:dd:77:94:64:91:02:4f:d2:3c:f1:f2:7c:
         76:2f:6f:cf:ed:18:77:0c:67:40:6e:22:c7:20:18:2a:9d:c8:
         ff:3f:e6:10:e5:40:48:cc:f4:06:0f:3f:c0:86:18:88:27:ea:
         2f:e6:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:39:29 2025 by rpki-client