Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa
File:                     0919A7B69C4111F0A9483031C4F9AE02.roa (raw, json)
Hash identifier:          WAKRMBYdCNNPwO0lju5L+3xdfnFpvUpYnLtfFW5BMDI=
Subject key identifier:   BA:A7:D1:CF:AC:2A:81:3E:16:3A:90:B2:73:45:52:23:2C:F8:31:5B
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       15
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 07:59:19 +0000
ROA not before:           Sun 28 Sep 2025 07:59:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     208185
IP address blocks:        203.21.65.0/24 maxlen: 24
                          203.28.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Sep 28 07:59:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d8ead7-6123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:64:48:90:ae:81:28:89:b7:41:db:fa:8b:
                    b3:d6:4e:70:ad:e4:d4:e7:12:87:5a:44:5e:44:11:
                    46:3d:32:bd:2b:b3:12:d7:c8:62:da:67:cc:15:69:
                    05:60:a8:89:73:24:6c:29:65:de:d4:6a:64:4e:6b:
                    fc:ae:28:3e:ef:48:9b:8e:1a:cc:13:ee:f7:fc:1b:
                    12:10:95:6d:5f:d7:e4:cf:f5:86:86:e0:0f:5f:04:
                    0f:a2:c5:a0:36:6c:4c:91:7a:59:bb:fe:d5:02:2e:
                    20:86:8b:45:a1:78:d9:8c:10:b8:2d:47:c9:f8:30:
                    c4:f9:dc:4a:8c:a4:ee:f1:4a:69:89:0d:76:31:18:
                    85:42:ca:d2:0f:f3:b3:62:b3:2f:31:c6:54:88:9d:
                    cc:9c:04:f4:b4:d3:81:2c:20:bd:79:cf:1d:a3:c3:
                    4a:68:9b:dc:0a:9b:56:53:95:60:9c:5e:e1:8f:5f:
                    00:de:6f:62:a7:f6:be:c1:19:e0:e1:11:ad:86:b9:
                    ae:17:a3:a4:0a:9b:72:b8:a8:66:b9:74:a3:7c:ce:
                    aa:22:9a:a2:b4:f1:5a:31:b0:6c:a1:8c:75:94:b2:
                    ac:c1:68:72:cb:68:fe:dd:32:34:ae:af:2c:d6:81:
                    1c:a0:0f:df:09:a8:e1:cd:1c:3d:7e:63:bd:2b:36:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:D1:CF:AC:2A:81:3E:16:3A:90:B2:73:45:52:23:2C:F8:31:5B
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.65.0/24
                  203.28.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0a:62:f0:61:bf:25:fc:4a:4d:ef:14:ba:7b:ac:65:ae:c7:
         0c:38:36:b5:48:09:4a:1f:b9:1f:6c:a9:dd:f5:76:86:ce:7a:
         17:80:f0:08:0d:6c:8e:43:41:ab:60:9d:2c:4d:0f:88:79:49:
         f6:bc:47:7a:35:e1:5b:8b:2b:9f:b7:98:81:00:73:ff:60:c2:
         b9:da:e9:e6:bd:31:f0:be:5d:b8:d7:a0:04:bd:4b:97:0c:86:
         14:08:77:c1:e4:5d:ab:0d:44:b5:20:79:77:d0:3b:b6:4d:6e:
         f1:5c:9d:e5:e4:7d:68:f2:14:c9:37:7f:77:d1:e5:14:32:87:
         04:bf:4b:87:95:c6:1f:12:7a:d8:9a:ba:70:c3:cb:f1:ae:3a:
         84:40:e7:df:8e:cb:d9:ee:93:0c:f0:01:84:b5:02:a5:e3:53:
         2f:09:b4:0c:aa:51:48:cd:05:b1:89:71:bc:8c:42:53:73:12:
         39:9f:5c:95:71:26:00:8d:78:95:87:3e:81:22:41:48:dd:ed:
         b9:b7:78:4a:6f:33:62:ac:31:d3:d0:05:17:a3:6c:cf:46:e6:
         c3:e1:6e:2a:a3:ab:7b:4f:a7:88:d4:45:cf:63:33:8d:5a:fa:
         4f:57:0e:95:19:72:b7:a1:62:28:14:0a:5c:51:48:5c:40:4e:
         6b:58:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:05 2025 by rpki-client