Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/B4684D8A288D11EF96BC5135C4F9AE02.roa
File:                     B4684D8A288D11EF96BC5135C4F9AE02.roa (raw, json)
Hash identifier:          b6ERigxsXjUyaKMbJy8+YRLovoMIY+E6IWTJv3Q8jfI=
Subject key identifier:   52:6C:EE:03:5C:BC:EB:42:C8:F2:22:63:F2:9E:F8:CD:25:E1:8E:6F
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       FE
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/B4684D8A288D11EF96BC5135C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 08:32:44 +0000
ROA not before:           Sat 11 Oct 2025 08:32:44 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138152
IP address blocks:        103.143.72.0/24 maxlen: 24
                          103.143.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Oct 11 08:32:44 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ea162c-b21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:46:b5:6f:8c:11:c8:5a:a2:0c:a4:73:6d:
                    d5:e5:5a:ef:c4:7f:73:d4:e1:7b:4d:fe:7b:2b:b6:
                    66:62:a0:89:29:b8:17:27:73:03:f3:a4:ce:38:58:
                    4a:b5:7f:b5:56:66:f8:54:de:e0:50:b9:21:5d:f2:
                    5d:77:45:18:2a:18:75:41:29:16:de:0d:41:5e:1e:
                    1c:0c:e7:05:a2:b4:ab:53:88:bf:bd:b5:2b:9d:85:
                    3b:b5:56:c8:c8:0a:07:e6:34:8e:63:73:65:31:4a:
                    0e:82:af:3d:7f:2b:5f:9b:bc:bf:6d:3f:97:33:e4:
                    14:15:46:61:c2:e6:66:d8:6b:80:81:81:bb:dd:61:
                    e5:0a:26:5c:0d:6b:9a:ba:01:f4:5a:64:62:9c:c1:
                    96:89:e0:b8:5a:e4:6c:2f:fa:9a:ef:60:12:8a:a3:
                    9c:47:61:80:b8:e2:57:16:43:c2:11:0b:92:bf:e8:
                    cb:e7:a2:d7:fa:19:c7:70:49:71:82:42:9e:17:9e:
                    01:8c:f4:da:9c:ed:a7:9b:d6:82:90:6b:92:f0:f3:
                    19:73:7c:0e:a0:3c:56:d5:c7:9f:13:96:aa:8c:da:
                    0a:d4:bf:42:45:7f:47:8e:8f:c8:5b:3f:0f:ef:a4:
                    53:80:e0:5b:ba:fc:77:eb:aa:a6:97:98:8d:1d:23:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:EE:03:5C:BC:EB:42:C8:F2:22:63:F2:9E:F8:CD:25:E1:8E:6F
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/B4684D8A288D11EF96BC5135C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:e7:46:b0:c4:b5:72:ae:43:a8:41:c0:08:1e:be:47:a7:
         02:56:39:4a:f3:0d:ae:a1:7a:d8:d1:39:70:c9:bd:91:f8:ca:
         8f:37:00:cd:e1:1e:67:b8:4a:8a:52:66:a2:91:3e:05:8e:98:
         c1:54:c9:ba:68:ee:71:c4:04:d6:2e:0e:30:69:db:cc:6b:6c:
         eb:12:6f:db:b4:8d:b9:4e:30:78:32:db:49:5e:b5:9e:06:d6:
         b5:b0:be:ac:a3:3a:db:ba:24:53:b4:5e:cd:f8:93:e9:35:64:
         94:dd:26:21:d6:48:d5:8f:a8:61:0c:47:12:d2:54:73:b9:ea:
         44:3a:8e:31:be:31:f7:c6:84:cd:69:f0:27:1c:00:76:c2:e7:
         94:cb:c0:04:f7:d5:02:9d:04:b3:ac:b4:92:c9:50:55:93:c7:
         de:99:7d:e9:cd:dc:5d:44:54:ea:9b:58:3c:35:6e:ae:4c:b8:
         e5:b2:79:9b:10:01:a9:7a:51:60:84:52:1c:99:48:bc:19:2d:
         dc:7d:02:6e:b3:dd:8e:fb:ab:6d:ad:f7:0d:9e:34:08:a9:d0:
         82:74:48:80:0f:91:4b:22:48:da:86:0b:8b:5e:40:42:b4:c6:
         b6:02:d7:2a:e1:8f:da:6d:59:26:da:6a:15:7c:76:d4:85:ab:
         56:41:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:37 2025 by rpki-client