Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
File:                     F6C5480A7C1011EF97676539C4F9AE02.roa (raw, json)
Hash identifier:          fPzznFHrH41Cu7PATVjc5p4RFmjIGfaJ8ZyhknBJH2I=
Subject key identifier:   41:C7:35:9B:1E:C2:86:A2:17:31:5B:74:04:78:B6:61:1B:5D:04:75
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       07C1
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 18:27:55 +0000
ROA not before:           Thu 31 Jul 2025 18:27:55 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     149994
IP address blocks:        103.139.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Jul 31 18:27:55 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688bb5aa-d10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:58:b7:8a:1c:b9:67:89:a0:1d:5c:37:08:
                    91:c1:7d:7e:01:a8:86:c9:2b:89:1a:d7:59:22:7e:
                    3d:db:55:84:9a:39:0f:9b:3b:cc:40:87:0c:a0:32:
                    51:97:b8:b2:df:1e:f6:a3:10:dc:27:30:db:73:64:
                    ff:08:c6:e7:8d:d7:a0:57:3c:aa:86:1c:87:b9:46:
                    af:bd:09:ad:ec:88:58:a7:c8:9d:87:23:89:91:32:
                    d2:53:7d:e4:f6:bb:23:c0:58:9d:72:45:c2:ac:c1:
                    64:d9:b6:ed:f5:1b:bc:f5:14:18:5a:ce:85:4a:6b:
                    e8:19:51:ff:d9:88:b5:e6:4d:be:ee:36:3a:52:88:
                    64:0d:a5:8e:a8:92:92:18:dd:21:72:c9:b2:7f:b7:
                    b7:80:87:f2:bf:12:7c:c3:6c:ac:b3:e9:2d:27:57:
                    c6:45:3b:89:31:22:f1:07:94:cb:97:e5:78:50:58:
                    55:82:2f:6c:4e:cf:aa:b7:9f:b1:df:9f:c3:a5:f4:
                    d2:3e:0f:86:41:4a:c5:07:15:92:b1:fa:9d:b7:3c:
                    ab:d7:eb:8a:a7:f3:3c:b6:38:ef:a4:82:ef:66:b7:
                    7f:98:8e:0b:fb:9a:e9:cc:d9:ad:a3:76:b7:00:18:
                    0b:e3:cf:1a:b1:d6:51:f2:24:ae:c7:69:eb:d5:69:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C7:35:9B:1E:C2:86:A2:17:31:5B:74:04:78:B6:61:1B:5D:04:75
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:30:d4:c0:31:26:2c:be:6e:d7:41:f0:a6:34:ce:aa:d3:
         80:a7:4e:59:3b:d6:ce:c2:8f:d8:04:3f:78:da:f5:ff:b6:19:
         3c:f1:4a:46:a1:27:0c:ed:bc:5f:99:d3:23:e0:37:64:2f:9e:
         45:d4:6b:92:54:bf:07:79:54:2b:7e:65:aa:00:dd:f0:13:1f:
         43:ac:a8:4e:a7:66:27:7c:f0:bc:fa:1b:31:eb:46:00:2d:96:
         d2:ce:0f:04:3a:87:e8:a9:26:ce:0b:9b:e7:f3:87:4d:c3:cb:
         5a:95:2c:52:d5:c4:b4:8a:3f:28:26:fa:62:ef:86:da:fb:c6:
         36:51:71:ac:fc:7e:4c:3f:b9:0b:11:d0:b3:dd:ad:c0:df:fa:
         3a:39:0b:9f:5e:21:d3:fc:96:a6:4f:38:e8:1e:42:25:8d:a6:
         e6:6c:33:25:df:d3:2c:2e:e1:b4:37:33:4c:95:c5:65:79:d1:
         a9:13:63:dd:9b:21:1b:21:f7:94:05:35:34:1f:88:d3:b6:45:
         ca:04:4a:ff:d5:2d:17:30:33:a5:a2:0e:f1:c8:4d:65:b0:66:
         c8:b0:bf:c6:28:69:67:84:77:e6:ca:e8:c9:0b:b0:ab:fb:f0:
         78:aa:87:01:7f:17:ed:60:92:ff:b5:3a:c2:1d:06:82:ea:16:
         b3:0b:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:42:09 2025 by rpki-client