Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
File:                     C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (raw, json)
Hash identifier:          7nB9PKLpginNAvHpyeXPNO88VYIsFeVoJ8sBAHLSABo=
Subject key identifier:   04:36:EE:19:25:B3:ED:FE:63:BE:BD:86:38:9D:91:CA:18:D3:39:0D
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       EC
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
Signing time:             Fri 13 Jun 2025 04:35:00 +0000
ROA not before:           Fri 13 Jun 2025 04:35:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Jun 13 04:35:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684baa73-de95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:20:12:47:5e:ff:c1:b5:d4:a8:50:94:aa:
                    b1:d6:d3:37:98:f5:e5:0d:36:31:45:37:20:fe:a8:
                    7c:e7:b5:e6:16:3c:9d:fc:f5:df:94:16:5a:01:15:
                    56:c7:f4:8b:d8:45:23:61:71:61:bc:1a:39:3d:b2:
                    d2:71:0e:17:b6:e7:b9:c6:fd:15:de:15:00:81:6c:
                    33:89:30:a6:a8:d5:62:4e:82:05:40:ef:36:06:4e:
                    74:f9:44:41:ee:15:c3:3f:d9:37:c9:0e:8d:2f:9f:
                    66:4c:b3:9f:66:33:dc:67:3c:ca:d4:a5:e9:7d:fe:
                    42:23:0a:c0:89:e0:0d:7f:9d:13:af:2f:29:ed:56:
                    b9:be:aa:57:e9:4c:52:1c:07:25:5c:23:34:3f:cc:
                    8c:ca:71:d7:88:03:42:bd:91:84:59:b1:df:a9:0e:
                    7a:e4:10:e0:9c:36:80:cd:8b:ec:a9:a7:5a:6b:d4:
                    8d:20:4c:ea:92:69:c7:9a:32:b1:54:ae:c7:45:9c:
                    41:8d:67:c2:ee:7b:56:f4:51:aa:2b:17:27:89:d9:
                    96:c2:34:0f:5f:1a:27:ab:4e:c0:d3:82:21:e9:ba:
                    25:c0:7e:47:0a:2a:6e:5a:2a:23:f5:b3:ef:75:5d:
                    97:2a:39:7d:b5:36:bb:ed:3b:dc:34:37:b7:66:7b:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:36:EE:19:25:B3:ED:FE:63:BE:BD:86:38:9D:91:CA:18:D3:39:0D
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:f9:59:4a:7f:d7:92:3d:6d:cc:f9:db:4b:fc:22:d9:59:
         b6:7d:80:6e:ca:31:51:a7:03:b5:ef:f4:6c:21:63:ab:f5:4a:
         f6:9a:b4:76:30:d9:cb:b0:f5:f2:21:6e:1a:ff:84:59:97:3c:
         60:fd:35:db:a4:23:cb:0b:4f:ad:e9:c4:7d:48:a7:4f:e3:94:
         b9:ab:d6:55:5e:db:b3:77:0f:e7:9f:86:b6:71:ea:7f:5c:8b:
         b2:d0:cd:2b:2a:a5:e8:61:60:ce:03:be:74:89:f4:16:d3:e3:
         55:68:82:0a:94:95:d9:0b:56:c2:e6:19:27:3e:ba:a4:72:3a:
         b5:89:be:00:d0:17:46:c6:3d:07:76:b1:c2:8e:dd:2e:eb:17:
         9a:27:ed:aa:3c:85:2c:98:22:c3:1a:58:83:c0:5d:92:dd:43:
         c7:8e:cc:e5:4d:72:15:8f:e0:bf:25:37:8f:6d:9a:a3:49:e6:
         b0:16:fc:88:37:64:16:ea:df:dc:fe:fd:21:73:55:5a:16:81:
         ef:ee:aa:7f:e5:56:9d:b1:b4:68:4e:b0:70:9e:b5:63:96:a7:
         cf:f3:a1:8a:f4:58:75:41:f1:bc:40:72:47:d4:f9:58:6f:86:
         26:88:a5:32:e9:ad:3c:81:92:a2:c0:01:43:d5:b3:2c:21:98:
         a0:28:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:25 2025 by rpki-client