Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
File:                     23B27B60F68011E982571C3EC4F9AE02.roa (raw, json)
Hash identifier:          GO1uvSUSs2KlKPAfKRLY58uFyr43GGZE9D5pAlewhKE=
Subject key identifier:   4F:F0:A9:34:A5:59:FD:CF:67:D6:36:A9:D5:1E:E0:03:00:B8:C6:B3
Certificate issuer:       /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial:       0C94
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
Signing time:             Mon 31 Mar 2025 18:18:12 +0000
ROA not before:           Mon 31 Mar 2025 18:18:12 +0000
ROA not after:            Fri 01 Aug 2025 00:00:00 +0000
asID:                     138651
IP address blocks:        103.135.136.0/24 maxlen: 24
                          103.135.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
        Validity
            Not Before: Mar 31 18:18:12 2025 GMT
            Not After : Aug  1 00:00:00 2025 GMT
        Subject: CN=67eadc63-e1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:9c:43:91:35:ce:4d:c6:11:68:9f:aa:9f:
                    36:8d:e3:88:4f:0f:6f:c5:12:9d:99:de:e4:48:92:
                    1a:1d:ce:10:52:14:63:47:06:13:af:48:43:9b:d6:
                    87:d0:b3:8d:5a:63:ea:fe:17:18:4b:0e:00:85:10:
                    f0:35:1b:a6:2b:82:06:bc:9d:8c:d3:e8:01:0e:2c:
                    c8:7a:7c:c7:2b:6e:24:ef:aa:c6:e0:99:6b:02:49:
                    0f:4d:dc:20:b5:94:e9:7f:ab:5b:34:f1:92:ec:03:
                    70:1c:f1:83:97:de:3b:e8:a0:29:07:8e:d6:60:ec:
                    0a:bb:8a:3f:a0:da:f7:79:e5:03:a3:a8:61:ee:d8:
                    bf:d0:ec:0f:98:78:ae:03:ff:cd:31:ac:54:35:62:
                    c4:04:bf:5a:6d:4e:53:55:07:61:7f:44:02:2a:fe:
                    77:6b:b8:7c:dc:8d:73:f6:5e:f7:43:89:ad:86:c2:
                    aa:eb:08:9b:ab:22:52:b9:23:07:61:a0:a2:60:e3:
                    d6:09:4e:29:5f:17:32:99:80:38:d2:f5:3a:56:22:
                    3e:be:d4:f6:f7:d1:d4:fa:fd:b7:19:3e:78:47:cc:
                    f2:70:a0:59:a2:06:04:0a:c4:1c:43:0b:9e:f6:0d:
                    81:40:1a:cc:68:20:c6:b5:cf:d5:ab:07:21:11:be:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F0:A9:34:A5:59:FD:CF:67:D6:36:A9:D5:1E:E0:03:00:B8:C6:B3
            X509v3 Authority Key Identifier:
                keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f6:0a:ba:08:f8:79:79:e6:cc:54:39:29:c5:78:9d:6a:f4:dd:
         a0:f9:57:54:ba:c7:79:14:77:88:41:a1:0c:a8:19:93:9b:33:
         0b:46:b8:bd:db:46:c5:74:e2:8d:c9:d7:d0:9a:53:35:c0:cc:
         19:a1:7a:3c:b2:15:fb:97:e1:81:c0:3c:2c:27:ae:7c:38:71:
         d6:44:68:4d:ce:83:46:c8:c7:cc:22:cb:05:a0:53:20:3b:dd:
         91:26:8b:51:d5:c7:44:ba:7e:20:de:1c:3c:4d:af:bd:b8:29:
         9f:71:8a:a6:53:fd:a4:a7:8e:e9:d7:56:e3:f5:5f:23:8b:ab:
         b0:c1:3e:23:b5:73:d1:71:f7:50:19:0d:55:82:56:7d:a2:2d:
         25:9e:27:e4:e2:5a:2b:d2:cb:3e:21:cf:8e:34:df:55:98:66:
         be:16:39:d8:b3:20:8d:9d:b2:93:ad:4f:8c:cc:86:1e:03:65:
         fd:f6:cb:bf:02:84:2a:14:27:74:84:ad:b7:c0:f2:86:59:9c:
         6e:35:00:67:c8:a8:67:01:53:b5:ac:28:c5:4e:a2:30:6d:e1:
         4d:20:df:c1:99:fe:c6:7f:7b:a5:83:79:b8:60:67:59:06:7d:
         01:17:ef:b7:3d:9f:6f:ba:42:92:d2:6e:09:bc:74:f9:9f:fc:
         3a:8e:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:35 2025 by rpki-client