Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
File:                     983A5536450611F093EC3A65C4F9AE02.roa (raw, json)
Hash identifier:          pEec0R62Bj3aymINooi97WOwxIJFlmEKrKBXY5Z0JM8=
Subject key identifier:   15:00:A3:9E:1B:5B:9B:20:DE:5D:53:37:C6:51:A1:96:9D:81:00:4D
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       1424
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
Signing time:             Mon 09 Jun 2025 07:51:47 +0000
ROA not before:           Mon 09 Jun 2025 07:51:47 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     401701
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 16:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5156 (0x1424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jun  9 07:51:47 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68469293-523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:31:43:01:d1:56:91:f9:b0:c8:7c:7e:6a:
                    b3:2b:5b:14:40:c7:f8:7c:76:3f:c3:89:17:41:f4:
                    2a:14:9d:fc:6a:5b:31:df:65:ed:c8:e3:d3:41:e8:
                    25:e3:1e:12:b7:c5:45:b2:44:e7:db:78:e9:98:b1:
                    0d:8d:1b:21:4d:3d:2f:50:a6:c4:91:86:c4:bc:54:
                    ab:a1:13:8b:41:30:bc:ef:27:34:1f:70:49:cb:80:
                    4e:fd:99:78:e3:08:a1:54:e0:77:54:58:02:95:63:
                    a2:5b:f2:99:a1:b9:57:3b:80:9d:55:91:3a:e6:bf:
                    b4:5d:4f:76:0c:f3:3a:5c:d4:81:15:51:61:bf:76:
                    21:6b:0d:44:b1:6c:0d:b6:9e:4b:32:1f:b0:1c:c9:
                    36:9a:06:a1:db:a0:3b:81:1e:7e:f9:45:c4:5d:cf:
                    11:15:7f:11:0b:88:8d:7c:93:c4:15:a1:5c:75:50:
                    14:fb:ae:d3:ee:ea:42:5f:75:98:40:77:8d:8a:bb:
                    4b:2a:7e:8e:b6:2a:e7:2d:a5:42:30:1c:6b:05:56:
                    b7:51:b8:14:e8:41:9a:4e:d4:88:01:81:cf:bb:bd:
                    b7:f9:04:d0:f9:6d:74:91:07:9a:e3:50:1b:99:fe:
                    dc:e1:25:00:99:c4:ee:c8:2c:68:b7:50:e2:6a:b0:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:A3:9E:1B:5B:9B:20:DE:5D:53:37:C6:51:A1:96:9D:81:00:4D
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:66:15:3d:41:4b:77:42:07:fa:11:a2:2a:d4:03:83:0e:
         f2:d6:ca:d2:4f:ec:bd:2b:24:2b:13:ab:1b:af:30:8e:cf:e3:
         21:22:98:d1:3c:7c:61:73:09:5c:52:63:4f:8e:c0:67:bf:6e:
         ef:61:f8:f8:e6:d9:30:98:a0:1e:3d:5c:73:3a:20:85:44:66:
         27:cb:81:ae:c9:45:95:2d:d5:2d:77:98:c0:fd:31:b0:66:11:
         76:a8:f0:ab:94:5e:1c:f2:59:86:dd:cb:c4:0b:4c:b1:24:9a:
         fd:a1:49:6e:28:81:18:cf:40:03:64:56:3e:9d:ee:85:9f:56:
         d9:9c:16:99:20:d9:52:9d:3f:59:f1:66:1a:23:c0:55:4a:88:
         98:fb:c9:e0:8f:2b:62:97:07:98:05:bc:05:52:fc:18:98:08:
         be:dd:22:e1:be:c7:69:ae:c5:45:8d:76:63:f4:d4:68:b3:62:
         3f:28:e0:8b:be:9c:7a:c1:9f:8f:18:f3:9f:41:78:91:0e:00:
         21:5b:06:24:8e:41:a7:a1:b9:5d:6a:c6:4e:a2:cb:04:2e:bc:
         8b:92:1e:a9:49:bc:fb:b3:93:77:32:eb:da:3e:28:8f:76:fc:
         41:34:58:ce:e9:46:fe:6f:44:b9:6f:23:ed:91:0a:31:cb:34:
         4d:d7:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:41:30 2025 by rpki-client