Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
File:                     F9B1B1167E3F11F0B7941020C4F9AE02.roa (raw, json)
Hash identifier:          bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=
Subject key identifier:   8A:2D:C8:FD:11:5B:A3:B1:C0:0D:71:27:4F:46:A4:FA:EB:1B:0C:98
Certificate issuer:       /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial:       02
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 03:36:09 +0000
ROA not before:           Thu 21 Aug 2025 03:36:08 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154158
IP address blocks:        155.35.46.0/23 maxlen: 23
                          155.35.46.0/24 maxlen: 24
                          155.35.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
        Validity
            Not Before: Aug 21 03:36:08 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68a69428-3f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:20:eb:d8:06:8a:c5:73:f2:c6:c2:ab:fa:7b:
                    5f:87:05:c4:41:71:e4:48:6d:9a:1b:7b:03:58:b9:
                    9c:3c:9f:f0:c9:61:f1:e4:e7:5c:69:ee:73:ff:83:
                    05:64:40:25:30:d7:24:09:73:32:e7:8b:d8:1c:73:
                    45:8c:34:90:25:de:7c:e2:3f:44:25:28:61:f4:ab:
                    11:28:66:f0:26:fc:53:51:38:b3:8b:5f:2f:78:3b:
                    10:35:90:9c:93:8a:a9:0f:bc:3f:43:ca:2c:94:35:
                    ed:39:30:12:c5:e3:99:d7:79:60:a2:0c:f6:2e:96:
                    32:98:d1:4a:ab:27:aa:56:8b:62:71:dd:46:3f:95:
                    44:41:9f:5d:85:00:44:e0:9d:7a:cd:c4:cb:c6:fc:
                    0a:e8:1a:99:d3:58:7e:43:e8:6a:7d:94:e9:6a:a7:
                    03:18:c3:b4:5e:be:6b:7c:08:c9:cf:7a:cf:a3:fa:
                    e4:5a:2a:74:4f:91:65:58:b3:d2:c3:a9:05:45:35:
                    dd:5a:07:51:bc:04:91:84:2b:83:24:1e:67:26:af:
                    f0:b2:68:15:9b:c7:09:b2:84:7f:f5:2d:9c:51:c7:
                    0f:aa:14:22:c3:b8:2e:80:36:cf:58:f6:4b:cc:0e:
                    dd:a9:2b:87:c3:bf:20:16:72:90:db:ed:2e:de:67:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:C8:FD:11:5B:A3:B1:C0:0D:71:27:4F:46:A4:FA:EB:1B:0C:98
            X509v3 Authority Key Identifier:
                keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.35.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:56:64:c5:74:e2:7e:b8:bb:17:8a:56:73:91:c3:5e:de:
         8f:0a:a4:1f:ff:55:5e:35:72:c2:fe:17:60:f4:4e:78:b1:0b:
         7b:70:0b:30:df:b1:e8:dc:51:26:48:c4:a3:aa:65:52:e5:21:
         33:d5:84:86:ee:e5:52:8c:e4:5e:7e:d1:70:a0:c7:29:53:e2:
         a4:69:e5:69:4c:58:73:7c:40:1d:17:20:24:3e:65:81:44:af:
         e0:99:57:77:41:28:b1:f1:18:67:18:09:de:23:bc:a4:2c:a1:
         00:d2:ee:ea:4a:8f:8b:48:af:78:09:c8:a2:ce:64:67:cc:1f:
         50:54:34:76:51:42:8c:a2:1e:3e:cb:ca:b2:cf:4d:72:a9:de:
         13:35:d9:ef:25:11:b8:1e:66:45:74:14:a0:b9:b8:1b:01:04:
         68:ea:f3:3e:95:df:be:de:5b:16:2c:ac:8f:ee:6d:d1:07:fd:
         55:72:d6:bb:45:01:ff:e2:9b:46:f3:2b:5f:3d:2d:f0:03:7b:
         e8:77:ff:32:2f:1e:52:7d:ef:97:8f:4b:8c:24:ab:56:ee:b3:
         50:39:d8:35:2d:af:c2:ea:79:2c:6e:51:8c:d4:0e:3c:92:89:
         8c:3a:b8:33:bb:89:66:11:94:ed:81:37:45:30:bb:fc:a7:51:
         08:5d:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:05:52 2025 by rpki-client