Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/A642A4AC650A11EB83E0FE0FC4F9AE02.roa
File:                     A642A4AC650A11EB83E0FE0FC4F9AE02.roa (raw, json)
Hash identifier:          XgEiz93GwcjbqWb+Hq9DJ44AhbzclnkFT8Xqo44uktw=
Subject key identifier:   B5:16:6C:A8:FD:05:31:F9:49:78:4B:1F:58:21:1E:1C:F9:69:12:E4
Certificate issuer:       /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Certificate serial:       070B
Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/A642A4AC650A11EB83E0FE0FC4F9AE02.roa
Signing time:             Tue 14 Oct 2025 23:52:33 +0000
ROA not before:           Tue 14 Oct 2025 23:52:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     62468
IP address blocks:        103.122.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
                          rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
        Validity
            Not Before: Oct 14 23:52:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68eee241-daba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:4b:b7:26:c9:56:bc:fd:ae:6f:a5:d4:9f:
                    d0:78:73:17:da:ff:99:1e:92:87:b1:93:98:6e:17:
                    13:ba:79:09:6d:fd:81:cf:3c:cf:9f:2a:28:67:e1:
                    54:37:82:08:72:39:7e:02:9c:9b:52:6e:9d:3f:5e:
                    d1:84:67:91:ca:31:b4:23:0d:c3:a5:27:6c:a9:e8:
                    c1:58:da:65:87:ef:35:0a:25:71:9e:66:99:68:ac:
                    39:24:32:c2:6f:e1:dc:cb:22:7a:14:31:f4:33:cb:
                    09:53:b7:d4:b5:65:51:82:0f:95:5b:3e:e4:7f:1d:
                    cb:36:5b:37:74:0d:b0:3a:33:35:ad:4c:b0:f7:a9:
                    0e:3e:71:9d:b5:89:3d:4d:1f:a2:2f:18:c9:eb:bd:
                    e9:a0:5a:82:41:2a:91:11:4d:68:09:8a:00:e6:a8:
                    b9:60:00:cb:51:4f:68:99:5c:6a:69:2a:c4:60:57:
                    db:b7:e4:91:16:ca:e8:2b:7d:80:1d:44:02:32:08:
                    58:69:bb:ce:09:3c:97:43:38:b8:4e:e0:42:3e:f5:
                    ac:69:c8:d7:18:2e:6f:62:c9:f8:9d:c1:67:4c:74:
                    93:15:bc:4c:ec:98:3b:05:4d:5e:36:8f:ae:bc:aa:
                    e9:2c:5f:79:9b:b3:32:6b:58:b7:29:cd:36:b6:d8:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:6C:A8:FD:05:31:F9:49:78:4B:1F:58:21:1E:1C:F9:69:12:E4
            X509v3 Authority Key Identifier:
                keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/A642A4AC650A11EB83E0FE0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e6:c6:c4:fc:71:2a:ce:2a:15:38:82:b9:48:09:8b:29:c5:
         bb:0f:3a:a1:d0:61:6d:a2:a8:f2:fd:75:19:43:e6:73:31:63:
         92:f9:3f:60:0f:44:c7:c3:3e:b3:3f:52:fb:e6:6c:9f:ef:54:
         fc:4c:84:19:aa:f1:6e:98:4a:bd:ce:1a:c3:03:97:5f:3f:d8:
         a3:c0:4b:b0:4f:59:92:d3:86:54:54:f7:b3:d8:a8:06:16:2f:
         a0:d4:b2:96:5d:4f:15:29:de:77:9b:49:17:3a:88:a3:cc:98:
         82:6d:da:ba:3e:15:4d:54:58:d7:8e:a9:29:23:1e:29:d5:6f:
         51:14:f7:17:cc:68:16:28:5a:f4:b1:30:be:33:70:cd:50:74:
         4c:56:32:1f:09:0f:10:0f:74:41:73:c9:64:e1:f6:b1:3c:bb:
         bc:b5:2f:7e:dc:49:3e:b2:72:f0:b2:1e:3b:b1:07:6b:8e:c2:
         5c:98:03:34:cc:e5:82:4c:26:de:d6:c3:43:78:5f:ad:03:86:
         bc:74:94:15:44:28:67:03:9d:9c:d6:52:b1:2a:33:97:a9:c2:
         2a:26:36:b2:29:18:2f:0a:7d:f6:bf:de:de:84:9b:6c:f2:d9:
         c6:75:c4:4e:7a:75:d4:e8:7f:2e:6e:b5:1e:ad:9a:b2:ef:99:
         55:bf:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:15:32 2025 by rpki-client