Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File:                     6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=
Subject key identifier:   B3:F6:3A:13:47:1F:3F:03:81:03:2B:6F:21:7D:A7:03:B3:DA:25:BC
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0659
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Thu 02 Oct 2025 22:53:51 +0000
ROA not before:           Thu 02 Oct 2025 22:53:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct  2 22:53:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68df027f-614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:6d:b4:6f:da:60:de:5f:42:a1:81:6b:19:
                    2b:1c:34:75:f5:b6:6c:c9:7a:70:f2:19:38:36:82:
                    0b:04:54:a6:51:02:ab:b5:a2:cd:45:c8:97:60:b8:
                    e7:e2:c2:0a:72:2d:67:e4:f9:6f:1d:aa:ac:fa:6f:
                    11:21:0f:5e:19:8c:d5:ea:de:5e:1a:93:e9:15:74:
                    27:83:3a:02:4e:ff:6a:60:92:bd:9b:ae:7b:80:52:
                    b3:86:a1:6b:e6:95:83:07:cf:c1:f1:62:31:52:85:
                    b3:9d:ba:d6:cb:05:9d:9f:ce:7b:98:01:65:66:72:
                    cd:1b:c2:35:0c:55:01:75:45:fe:6e:46:31:df:33:
                    65:a9:71:04:ea:c0:19:fa:56:1b:7f:52:b3:c2:1a:
                    43:da:6d:d9:49:22:b2:a6:77:d5:d6:ae:e0:ed:c9:
                    48:a7:42:51:84:7e:73:61:40:a2:9a:56:64:e3:d7:
                    d4:6a:60:a1:10:12:26:9f:7d:63:0e:ef:7f:dc:67:
                    8d:02:c1:75:5e:f7:1f:31:53:1d:6b:9a:ef:d3:a7:
                    80:7a:e0:c6:b5:70:8f:ba:d0:7d:69:b9:46:c0:72:
                    4f:d3:50:7f:d6:4e:96:4c:f2:dd:b6:41:a5:38:da:
                    e7:b4:4f:af:e8:92:71:41:b8:4b:a6:95:52:dd:04:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F6:3A:13:47:1F:3F:03:81:03:2B:6F:21:7D:A7:03:B3:DA:25:BC
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:d9:57:39:45:43:42:00:a7:90:38:6b:8e:ac:b0:8f:27:45:
         a1:a0:99:4b:cd:ae:6b:e1:d4:25:a3:08:84:f7:b4:d5:9d:2e:
         cc:d6:b0:59:c4:a0:f6:07:d2:d0:14:4a:3d:b8:01:ab:44:7e:
         1e:76:6c:7d:ad:77:a1:65:cc:d7:f8:0e:26:0c:a9:86:30:77:
         af:fb:84:0a:e9:3b:c3:0f:40:1e:73:3f:ba:bd:b5:0a:eb:f3:
         9f:f1:50:a6:d5:cb:37:01:c6:00:67:0b:ff:50:7a:6e:b4:0e:
         83:cf:ee:4c:0e:f1:af:41:f4:98:a6:60:df:a2:91:1e:7e:16:
         eb:ab:71:a1:66:aa:3b:67:a0:3d:c9:c8:87:ce:3b:79:5d:7b:
         32:45:da:3d:c6:20:b9:73:fc:2f:c3:5a:52:3d:a2:09:25:ea:
         4d:97:61:e6:57:41:80:77:19:90:89:53:d4:fe:03:45:1a:81:
         ed:4f:10:86:ce:dd:4d:9b:0f:4d:46:21:79:b5:3c:9f:ca:cc:
         0a:68:8f:cf:3b:ea:41:6b:a2:78:71:08:de:91:0c:3b:d7:35:
         e6:54:63:6f:bc:11:9b:39:d5:ae:5e:fc:5d:04:fe:70:32:2b:
         ba:a5:32:38:04:36:9c:62:6f:37:e6:62:23:ff:9b:1b:1a:6e:
         dc:91:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:35 2025 by rpki-client