Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
File:                     F9869896C8F411EBB460DB52C4F9AE02.roa (raw, json)
Hash identifier:          IerjiVdpTpomboBtzuyqypAEqQk0Qd/Z1MS5uP0DEYU=
Subject key identifier:   59:4A:1F:DD:5F:40:48:8A:27:A9:23:80:94:7D:13:CC:9E:B0:3B:34
Certificate issuer:       /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial:       05F4
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
Signing time:             Wed 24 Sep 2025 18:49:43 +0000
ROA not before:           Wed 24 Sep 2025 18:49:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142058
IP address blocks:        103.166.38.0/23 maxlen: 23
                          103.166.38.0/24 maxlen: 24
                          103.166.39.0/24 maxlen: 24
                          2001:df5:4f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
        Validity
            Not Before: Sep 24 18:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68d43d47-efe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:5e:e0:16:a6:f7:e9:2e:4d:08:4a:5e:4c:
                    19:1a:3c:be:80:f5:93:08:d2:c2:ef:a0:42:c3:c4:
                    12:81:1f:1f:3b:c9:d2:52:13:f6:1a:35:24:ea:09:
                    2a:a4:73:ac:1d:3d:39:7a:9b:35:1c:8c:40:98:80:
                    8e:88:b8:3a:66:72:72:45:08:37:45:dd:5e:28:87:
                    4a:08:df:55:ee:38:a3:ba:4f:2a:40:8e:e0:52:58:
                    d0:34:01:66:b5:86:1e:84:8e:a7:db:cd:67:94:e6:
                    e7:38:b9:5e:9b:e5:dd:08:1f:44:0a:be:13:1f:98:
                    66:87:ff:87:4c:31:5a:42:fe:c3:ef:a5:7d:85:5d:
                    d8:1b:20:5b:66:58:18:8c:83:f7:c4:87:f2:39:74:
                    7c:59:c3:a2:2e:35:05:2c:da:5d:f1:1b:97:a8:68:
                    ca:b2:7f:89:84:3f:96:bd:8a:5e:c7:93:bf:78:84:
                    b1:60:fc:71:b9:ed:b2:85:45:37:ee:e0:f2:4f:4e:
                    2c:11:86:a4:01:f1:c7:8f:cd:4d:22:1d:55:dc:86:
                    4f:06:ae:5c:3d:61:cb:cf:d6:8c:1c:7c:20:bb:3b:
                    42:b1:0e:d3:e1:db:99:94:cb:05:9e:58:ad:51:26:
                    e5:79:4a:e1:7a:8a:8e:af:99:03:e1:bb:07:09:84:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:1F:DD:5F:40:48:8A:27:A9:23:80:94:7D:13:CC:9E:B0:3B:34
            X509v3 Authority Key Identifier:
                keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.38.0/23
                IPv6:
                  2001:df5:4f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:73:24:82:13:ed:87:ce:04:24:d2:51:31:09:86:6c:0c:
         c7:e7:a3:a4:67:a2:8b:39:55:5b:b8:6b:d5:1e:07:ae:1d:25:
         e7:70:27:93:d0:06:dd:2d:99:87:f6:87:e5:62:a2:31:f9:92:
         f2:75:c8:39:b6:3e:dc:e6:d8:a7:20:e4:e7:e5:29:26:ff:63:
         9a:ee:e4:3e:88:f5:45:f1:b3:f6:b0:ae:91:11:6b:ca:58:98:
         f0:b9:bc:75:da:90:2f:b8:5f:d7:ff:c2:48:ac:73:5d:c3:4b:
         f0:e8:7e:da:c9:6c:36:eb:9f:97:11:9e:a6:c0:c4:47:14:5b:
         64:73:52:6c:e6:c4:d9:3e:8b:90:55:b4:60:25:14:10:ba:33:
         d3:a4:77:a5:db:95:0f:71:a1:d6:8c:0f:e9:a0:8f:7e:7d:89:
         33:f4:9c:46:4a:f0:37:85:00:b0:ee:75:f2:dd:31:fd:b6:36:
         a7:7f:9e:3e:75:2e:b4:47:96:b6:f8:6a:34:35:5c:81:ac:8a:
         e7:6d:f9:11:ba:8f:f7:d0:81:b4:49:46:1c:78:8c:b4:d6:66:
         64:2a:95:e6:8f:48:c2:9e:a2:cd:eb:74:04:a3:bc:9d:0a:fd:
         88:db:7c:06:61:2d:e1:c6:3e:82:00:0a:c1:34:e6:7c:8c:16:
         78:c7:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:17:39 2025 by rpki-client