Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/FF9802D6FE3911EBBCE1485DC4F9AE02.roa
File:                     FF9802D6FE3911EBBCE1485DC4F9AE02.roa (raw, json)
Hash identifier:          568OZFsZ65IljrgEB7BfKeTiUKIZul9sanmI2zkZhwE=
Subject key identifier:   EC:03:A9:2E:B8:86:A6:65:7C:C4:C1:10:A5:BD:5C:A6:31:46:E3:2F
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       34A9
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/FF9802D6FE3911EBBCE1485DC4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:21:06 +0000
ROA not before:           Sat 26 Jul 2025 15:21:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45797
IP address blocks:        203.135.184.0/23 maxlen: 23
                          203.135.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: Jul 26 15:21:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884f262-df3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:26:12:b8:b3:b7:ea:b4:06:70:65:92:0d:20:
                    46:44:0e:4b:f0:d7:5f:cf:19:c7:93:0b:98:a0:50:
                    38:49:12:2c:55:3d:8b:3b:59:6a:1e:96:c5:73:67:
                    cb:b9:ec:24:f5:fb:39:60:be:1f:b6:fe:60:07:62:
                    54:b5:ee:aa:8d:e3:d2:9e:22:5a:45:9b:73:14:64:
                    ac:ce:00:70:18:38:ad:cd:1f:c2:49:c1:36:9f:6c:
                    4b:0d:7f:51:74:a8:de:3d:cd:a8:76:c1:d8:03:5d:
                    92:7a:08:eb:9c:75:28:9e:b6:26:19:c1:41:49:ad:
                    0a:80:0a:09:b1:ad:2f:c8:32:1a:09:b5:63:a3:8e:
                    84:75:ac:37:23:de:e0:f7:d7:1c:df:61:58:43:e7:
                    fa:89:58:87:e1:00:4a:bf:d9:a0:23:ba:2b:b1:ed:
                    f9:28:01:43:09:73:9d:45:73:51:5f:20:d5:75:78:
                    0c:5e:37:87:25:87:8a:36:41:7b:a5:ae:a7:88:de:
                    25:c8:03:3e:7a:e1:bb:a7:04:1d:0a:be:83:86:ea:
                    1a:a3:08:b4:ed:bf:6a:09:46:14:4f:48:cc:7f:fc:
                    18:2b:03:27:81:02:51:94:8b:e1:7d:77:9c:27:65:
                    fd:b8:32:09:c5:f3:cc:e8:f3:3d:8a:c0:e5:8f:4e:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:03:A9:2E:B8:86:A6:65:7C:C4:C1:10:A5:BD:5C:A6:31:46:E3:2F
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/FF9802D6FE3911EBBCE1485DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:06:ae:08:13:0d:27:2a:59:f7:1a:f5:31:f3:6e:3a:00:
         dc:2b:c6:00:35:3b:3c:c2:d9:f1:6b:aa:75:7a:7c:aa:1b:87:
         77:e8:2f:ea:89:aa:36:96:1c:60:93:46:da:30:95:87:cc:25:
         99:6a:65:10:a0:c5:4c:3a:c8:e0:53:39:d5:62:ba:0c:8c:78:
         ea:80:f6:d6:93:76:38:a1:df:90:6a:05:b1:c8:1c:01:80:c5:
         b2:37:3a:6d:35:ad:1a:44:b2:87:20:45:f2:fb:93:8c:03:ac:
         cf:7f:44:9b:b8:9b:d4:92:7e:4a:f6:35:83:83:ae:08:58:ee:
         bf:e4:9c:c0:95:2e:14:76:e4:26:45:8f:04:bb:3d:88:7e:42:
         38:5a:73:9f:8f:98:ee:5f:c4:c8:59:0b:a8:66:05:72:9d:cd:
         6d:ac:c6:38:48:00:fd:8a:4d:ce:74:ee:1d:3b:6c:bf:cc:37:
         8e:95:b9:44:55:f4:79:1c:89:e9:70:73:45:0a:8b:de:7f:05:
         ca:00:a0:77:90:30:01:4c:bd:ac:72:b2:f3:8f:ef:af:55:ca:
         95:9b:14:7d:c3:81:33:6a:b3:f2:0e:60:3a:62:f3:60:81:9e:
         0d:32:f3:d3:2e:0b:c7:f7:79:b4:37:25:6b:ca:aa:30:bb:42:
         b5:e4:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:34 2025 by rpki-client