Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa
File:                     3726AAFA0C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier:          14kB3SfK8FO3TDcXjwd2x1V5vnXFwADnDTKaZlPfI5E=
Subject key identifier:   5B:CC:55:1B:CA:4B:D8:E5:21:9A:3A:77:E4:8B:C9:3B:95:72:0E:A4
Certificate issuer:       /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial:       0C72
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa
Signing time:             Wed 18 Jun 2025 18:22:49 +0000
ROA not before:           Wed 18 Jun 2025 18:22:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        103.77.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
                          rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 18:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Validity
            Not Before: Jun 18 18:22:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685303f9-3559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:17:7f:d3:bc:0b:45:9d:74:1e:a4:3c:86:
                    e8:a8:86:ac:3b:62:02:53:05:f6:61:50:f9:d9:e3:
                    10:d7:52:e6:76:2a:da:dc:a9:0f:41:60:05:f5:7a:
                    c8:9d:13:1e:c5:df:36:2f:4f:37:9d:8e:90:a5:30:
                    5e:51:22:05:b7:19:dd:0f:4e:6a:f0:81:72:70:49:
                    13:d5:93:9f:4f:d5:ce:11:35:ca:3a:98:50:6f:c5:
                    a1:29:f5:ea:11:ef:d0:5b:3e:cc:4f:8d:94:37:88:
                    e5:f6:c2:3d:50:59:0d:17:14:24:69:ee:c2:24:62:
                    a1:b2:ff:72:66:f2:b9:a7:2e:af:98:1d:c7:5c:81:
                    1a:ac:7e:ae:8c:5f:8f:b1:86:2c:7f:3e:1c:56:8b:
                    28:05:74:5d:7e:b1:63:28:71:3b:ad:fe:c0:b1:a6:
                    5e:7d:1a:bb:44:34:41:8d:ae:ae:92:de:25:fa:12:
                    22:e3:34:38:53:b6:68:cb:6d:dd:0b:ad:3f:9e:66:
                    8f:41:c1:50:99:1a:41:70:2b:0f:a1:b9:72:b6:9f:
                    b2:4a:6c:d9:c5:cf:2b:ba:b6:08:cd:20:5f:18:06:
                    49:34:34:58:43:8e:c2:da:df:08:1d:9a:b0:7b:58:
                    27:f3:af:d8:64:56:74:36:18:39:96:39:47:ea:3d:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CC:55:1B:CA:4B:D8:E5:21:9A:3A:77:E4:8B:C9:3B:95:72:0E:A4
            X509v3 Authority Key Identifier:
                keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:f8:e3:80:2a:b0:45:14:f4:0f:13:81:26:df:30:56:4d:
         e2:ce:53:27:a6:ae:73:2e:aa:f0:1d:11:b1:51:19:50:ee:e2:
         a3:1b:d6:ba:54:2f:6d:3c:7e:d8:86:85:26:06:29:0a:be:83:
         a9:15:ed:f7:6c:21:bc:53:39:71:91:dd:26:3b:1f:a8:74:b3:
         9d:d8:35:32:6d:3e:c9:94:d5:7d:3e:0a:d0:0e:30:9b:c7:39:
         6c:cb:13:59:a8:a3:9b:d1:6e:ef:3f:af:23:a5:ca:28:53:46:
         9e:dd:2b:61:66:3f:02:e3:41:49:53:e2:74:96:e7:ce:55:c6:
         96:37:2a:7e:ff:d6:2e:9f:27:2c:98:4e:84:0e:32:2b:bb:bc:
         99:6f:ec:f2:49:45:9c:31:9c:42:5a:59:61:dc:8b:d4:3f:f8:
         ea:23:b7:e2:d6:c6:2c:2a:d3:9e:f5:e0:1e:05:86:f5:c5:03:
         dc:2c:13:8c:11:e2:97:8e:9b:de:f0:97:d5:d7:7d:05:ef:fd:
         76:76:8e:10:19:dc:39:dc:a1:4f:ee:29:ce:26:57:b0:9c:9b:
         6b:e7:67:27:a6:40:1a:b5:e5:d9:ed:36:22:66:7a:00:66:4f:
         28:0e:46:d3:d2:31:ee:d2:be:4d:60:d0:ac:23:92:dc:4a:77:
         3f:9c:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:01:03 2025 by rpki-client