Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
File:                     B6C75D94084711EEB760A583C4F9AE02.roa (raw, json)
Hash identifier:          u5cH8Cct4Kcc1phETe1wMMgP4HVQBU2rSY+p4Vm2lKs=
Subject key identifier:   3D:1A:27:74:D9:5A:3D:95:E4:74:7E:FB:3C:97:3B:51:7B:3F:9F:6C
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       08C8
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 21:31:52 +0000
ROA not before:           Thu 31 Jul 2025 21:31:52 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139008
IP address blocks:        103.152.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Jul 31 21:31:52 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688be0c8-ff31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:02:57:d3:8f:ea:53:a9:af:42:53:3e:28:
                    39:0e:d3:df:5e:dc:2e:57:a5:e3:51:3d:68:4a:db:
                    e0:d8:95:cd:96:78:8d:9a:8d:de:1a:be:26:b7:81:
                    e6:4a:b5:42:a9:27:e7:f6:3f:ee:62:24:0d:86:ae:
                    6a:f7:b0:32:0e:65:11:ae:65:d2:82:25:e2:b9:d8:
                    0a:e4:29:6f:06:ec:8b:e8:07:b4:23:ab:e7:cf:13:
                    53:45:62:7c:1e:01:f2:a4:51:ea:45:7d:02:e5:4e:
                    5b:ff:56:69:39:b9:11:71:f2:c5:be:ae:16:84:fe:
                    59:a5:bb:ea:70:60:e3:0f:c9:12:ee:ac:a6:bb:7f:
                    da:9a:8f:fa:d0:33:78:ab:b6:0f:05:c0:a9:58:38:
                    0b:f1:f0:14:78:44:a3:23:da:ac:10:1e:7e:32:37:
                    82:93:4f:8b:73:d9:3d:65:49:c8:f0:59:93:b1:2e:
                    d1:09:df:35:f8:00:c3:8e:32:36:91:10:a9:97:c5:
                    5f:18:71:3a:6d:1d:ef:af:fd:e3:a8:f5:92:b5:fe:
                    48:ac:36:ce:9b:78:4c:1a:c9:4b:d2:70:4e:9d:4b:
                    5f:9d:05:b6:48:dd:cd:24:d8:12:9b:73:af:b5:1b:
                    9a:39:1f:d2:fd:fb:43:98:52:e7:76:c3:1c:c3:c8:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:27:74:D9:5A:3D:95:E4:74:7E:FB:3C:97:3B:51:7B:3F:9F:6C
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:14:0a:b8:59:95:f7:22:dd:62:2e:d1:a7:00:d6:80:a0:
         90:e7:74:91:da:78:4d:43:c7:01:3f:6e:ee:73:50:b1:96:81:
         85:da:7e:00:cf:4a:27:72:27:0d:13:3d:f3:1f:66:ce:1b:5a:
         5a:5b:02:e3:fa:73:e5:c1:34:54:ef:d2:89:ad:27:57:d3:f4:
         6a:55:0b:49:52:dd:ee:cb:8b:b0:41:e6:68:72:45:d6:7c:88:
         f1:44:6f:54:42:52:97:bf:0c:16:bc:6f:e1:54:aa:16:2b:72:
         b8:40:8a:6d:a8:60:03:f8:9f:57:0a:b4:5e:51:da:e5:19:0a:
         53:5c:1f:07:e3:ef:d9:de:d3:dc:83:64:bf:94:53:ba:d7:a9:
         1e:67:b5:e3:c9:6f:53:8a:82:e3:f6:5a:37:73:0b:a1:70:36:
         83:da:dd:a2:15:6e:b8:87:1a:9e:85:86:51:e8:26:7a:1a:a8:
         70:18:e6:82:98:7e:e9:e2:25:5f:22:37:1a:47:4e:9d:77:7b:
         b3:23:85:cc:ce:c8:cb:10:22:2a:cf:40:7f:d4:a1:25:e0:f9:
         d5:ef:8c:b3:0c:43:e3:31:9a:60:a8:e4:60:3b:a8:20:27:a5:
         42:ec:8b:c2:b7:c7:f6:4c:97:fc:22:0a:84:04:f0:db:3e:b5:
         d6:30:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:18:55 2025 by rpki-client