Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/7054AB4AAC5611EBA1C1D381C4F9AE02.roa
File:                     7054AB4AAC5611EBA1C1D381C4F9AE02.roa (raw, json)
Hash identifier:          QkDFL/xy4lOpxq+tsUM4M0gw7c6hQli8tCJHPGWWDlM=
Subject key identifier:   3F:88:C8:C4:1F:DD:A0:D2:78:C2:E2:15:1B:78:BD:29:E8:D3:5D:39
Certificate issuer:       /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
Certificate serial:       0600
Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/7054AB4AAC5611EBA1C1D381C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 23:11:24 +0000
ROA not before:           Mon 02 Jun 2025 23:11:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142049
IP address blocks:        103.165.180.0/24 maxlen: 24
                          2001:df6:6e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 22:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
        Validity
            Not Before: Jun  2 23:11:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e2f9c-4593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:a6:f5:ac:1e:7a:97:90:65:94:50:2a:bb:
                    82:49:41:cd:f7:37:74:c5:42:7e:68:41:1a:80:8b:
                    f3:4c:b3:8b:33:0b:2b:2c:d6:05:d5:ce:e7:c7:64:
                    5a:13:e6:3a:d9:fa:53:b6:12:90:2c:5a:8c:ba:82:
                    34:89:7c:c2:2c:d7:bc:a7:a3:d7:2c:b5:27:a9:bf:
                    fb:c5:29:f2:6c:c1:c4:6b:a1:04:50:44:32:bf:5b:
                    3c:a0:6b:29:73:97:1b:47:ba:cb:23:68:0c:91:15:
                    62:ee:47:7a:bb:7c:44:52:78:45:83:72:6b:ac:68:
                    85:f2:5e:08:76:c6:5c:28:b5:f3:bb:f3:c7:b4:0d:
                    3a:80:2a:2d:ab:5f:ee:0c:65:50:76:59:ce:ac:7e:
                    89:ce:da:66:a7:22:33:ec:2c:83:10:90:f5:14:f8:
                    b3:75:77:0e:02:7e:be:14:d9:be:a1:c1:a7:cb:0d:
                    cd:11:ba:f4:51:27:fa:72:66:dd:7c:16:f0:26:6a:
                    b6:52:ba:72:8f:b9:0f:cd:42:b2:6f:49:84:9a:e6:
                    e6:50:96:52:40:fd:8e:b1:a5:7d:0a:08:73:be:b1:
                    22:02:cc:05:80:1d:16:5a:52:96:59:a5:dc:7a:74:
                    78:cc:70:aa:7c:3f:af:4e:cf:f8:56:04:a0:f7:43:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:C8:C4:1F:DD:A0:D2:78:C2:E2:15:1B:78:BD:29:E8:D3:5D:39
            X509v3 Authority Key Identifier:
                keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/7054AB4AAC5611EBA1C1D381C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.180.0/24
                IPv6:
                  2001:df6:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:a0:cb:ad:ac:b9:dd:ce:dc:77:31:75:5d:c7:75:ba:5a:bd:
         f9:16:1f:6e:75:4f:87:b1:bd:87:b1:91:65:6c:9c:98:a4:60:
         f6:2d:18:c0:87:cb:e4:1a:db:0e:87:15:e5:15:f4:04:2f:35:
         ec:0c:d5:b3:af:46:27:94:bb:94:6c:f3:32:1a:77:7d:ce:8a:
         af:6e:9c:38:12:d7:c0:73:c4:27:d3:b8:02:2c:b8:49:6c:55:
         3f:f0:73:45:0c:16:25:08:1f:30:07:c2:48:f7:b2:83:78:fe:
         80:45:00:dd:0b:27:34:19:52:a7:c1:54:a6:fc:33:29:0c:41:
         9b:0f:83:16:17:97:e2:29:1e:d2:38:28:92:26:b3:42:9f:19:
         6c:62:2a:f4:72:39:ce:2e:60:5c:30:22:a7:e8:3a:0b:d0:1a:
         b6:a6:4a:c8:73:ad:31:45:9d:9f:fe:61:2e:1f:b1:5a:08:00:
         85:d3:b8:12:16:33:85:19:15:d3:3b:03:33:d5:7e:13:39:76:
         2f:e6:51:ac:2f:e9:2c:c4:ab:d4:0a:f4:7e:f4:f1:68:42:d8:
         98:7a:3e:86:a6:55:9a:9a:92:72:99:d5:72:12:91:d1:97:91:
         75:19:12:18:7f:7f:df:77:2d:71:af:87:b0:82:bc:1f:8e:3b:
         e9:dd:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:54:59 2025 by rpki-client