Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
File:                     923C51A8BE8811E998F37222C4F9AE02.roa (raw, json)
Hash identifier:          uZutnh3IDqFkeTM2HclLSv5xEA3RHi+jQtpjzohkCIY=
Subject key identifier:   13:BB:BD:F7:74:BC:F6:F0:CE:47:46:75:A5:5E:72:93:A8:6B:96:0E
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0DD2
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
Signing time:             Tue 08 Jul 2025 18:27:28 +0000
ROA not before:           Tue 08 Jul 2025 18:27:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131332
IP address blocks:        103.24.134.0/24 maxlen: 24
                          103.163.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Jul  8 18:27:28 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686d6310-1a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:b8:99:9f:a8:f9:4e:33:84:28:3c:a7:de:
                    a3:5d:99:60:62:8b:f8:51:a6:58:72:55:4d:48:19:
                    21:bb:ea:4b:25:33:95:d8:eb:9f:25:21:8c:ee:fc:
                    a1:0b:95:05:8a:02:b3:db:b1:04:95:6b:aa:22:ca:
                    bf:6a:2c:40:91:20:4f:6c:03:64:88:ad:37:bc:54:
                    9a:a2:c6:08:f9:27:a3:73:64:f5:36:94:88:e3:f1:
                    15:2f:5b:2e:1d:0d:ec:e0:ae:80:ec:57:08:97:6c:
                    35:d0:0c:b5:9a:50:6f:d1:e2:b4:d5:22:94:90:c4:
                    fa:19:59:ac:7f:85:85:13:3f:ed:87:55:e8:ff:f1:
                    71:c2:ed:4c:b7:f0:79:01:95:88:7b:d9:ac:39:8a:
                    0f:82:70:63:f8:5c:6d:e6:bc:a9:87:7a:5a:db:89:
                    d8:dd:f4:6e:69:4a:7e:fb:c9:ae:9c:98:ee:a5:c8:
                    cc:34:ac:1a:f7:f3:a4:d4:42:b4:74:cd:2c:88:db:
                    88:a8:b3:0b:d9:43:ae:dd:68:27:a2:1c:e5:43:e4:
                    fd:80:7e:73:d1:7c:60:d8:bc:e8:66:fe:1d:4d:9f:
                    63:e0:f5:6a:92:f2:c4:0c:ef:b0:61:a5:e2:53:61:
                    05:a6:88:2b:25:af:8d:ba:45:85:aa:88:1d:8b:d7:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:BD:F7:74:BC:F6:F0:CE:47:46:75:A5:5E:72:93:A8:6B:96:0E
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/923C51A8BE8811E998F37222C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.134.0/24
                  103.163.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:8a:a1:61:2c:2b:48:91:dd:14:a4:0b:a0:41:46:7f:ca:
         b3:f8:65:10:cb:a7:6c:5c:30:ca:73:4e:1f:c5:27:a5:62:a1:
         46:4d:d5:5a:a8:3a:6e:ab:39:a9:76:b0:0a:f3:46:4b:e9:d3:
         96:d3:5f:53:3b:1f:f5:62:97:c2:87:8d:e6:fe:08:8f:66:f5:
         01:36:eb:62:ce:31:d2:6e:56:69:d9:80:6e:64:07:ed:14:5e:
         30:b2:92:28:00:99:ea:03:d3:90:1f:f9:e5:e4:f7:18:fa:41:
         1e:a5:3b:01:1c:f8:24:f6:a9:88:f3:77:1d:a4:a7:70:9c:99:
         0d:09:96:4d:7c:1c:2d:5c:a6:9a:a3:ea:73:3b:73:8e:39:e2:
         da:49:df:12:49:84:62:ab:17:b0:09:92:c5:a5:0d:51:68:3a:
         26:e1:92:21:76:1d:55:4a:7a:20:73:3b:fc:fe:6e:7d:dd:d9:
         27:0b:21:c6:aa:86:21:e0:be:72:39:8f:00:20:b5:3f:91:46:
         f4:56:46:a9:c6:ee:7f:24:f3:5c:07:1a:a8:0c:91:10:fd:ae:
         b2:86:04:31:d5:28:6b:51:99:39:58:f1:d1:77:1c:c0:d1:e6:
         ac:65:e2:cb:1d:6f:b6:14:24:c5:46:45:cd:2d:14:f2:07:04:
         6a:c9:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:02:56 2025 by rpki-client