Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa
File:                     B39CC5D0999C11F0B916112DC4F9AE02.roa (raw, json)
Hash identifier:          6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=
Subject key identifier:   F5:78:A3:F6:0B:A5:DB:C7:6D:28:DF:5C:75:26:CC:2F:93:54:5A:9A
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       0A
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa
Signing time:             Thu 25 Sep 2025 10:46:40 +0000
ROA not before:           Thu 25 Sep 2025 10:46:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137964
IP address blocks:        103.183.117.0/24 maxlen: 24
                          2400:62a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Sep 25 10:46:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68d51d90-207c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:56:e5:47:b7:e2:8b:80:59:bb:cd:b8:23:
                    f5:98:29:99:42:01:ba:55:9a:32:35:a1:02:09:25:
                    92:47:12:e7:64:2d:20:34:71:da:a4:d1:de:94:12:
                    89:a9:fd:bd:97:fc:91:d4:7c:bb:a2:e3:50:90:a6:
                    7c:dd:f1:24:57:01:b3:31:ea:04:4c:00:c4:ac:29:
                    98:e9:60:8b:37:96:78:e7:ff:2a:c3:a6:f4:81:cb:
                    f1:90:37:d6:70:59:5b:05:43:b0:8f:56:e2:b2:8c:
                    43:66:10:61:23:89:d5:ab:f1:de:c8:79:e0:c3:03:
                    50:6f:85:3b:47:69:f8:32:a1:32:6f:5e:3b:80:56:
                    58:84:ed:79:dd:d2:2f:e9:0c:9f:e4:59:df:79:d9:
                    89:06:d7:f1:60:22:99:82:32:2e:48:51:f7:27:f5:
                    bd:76:e0:63:29:62:c2:e3:2d:f6:4d:0e:5d:3c:36:
                    cd:65:4d:1f:32:5c:c3:74:04:47:03:e2:42:f4:46:
                    d5:04:2b:61:0e:6e:53:a8:64:65:57:5a:cc:31:b9:
                    4b:8b:c7:69:01:ef:f5:d0:f2:d0:fa:18:f7:f5:84:
                    bd:0e:cf:15:45:0f:cb:8c:60:c6:55:57:13:c2:7e:
                    b4:94:84:72:ef:b1:ce:fe:fd:db:f2:2a:53:56:10:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:A3:F6:0B:A5:DB:C7:6D:28:DF:5C:75:26:CC:2F:93:54:5A:9A
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B39CC5D0999C11F0B916112DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.117.0/24
                IPv6:
                  2400:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:33:bb:af:96:79:0a:12:be:70:73:c9:6f:ad:94:db:81:
         39:af:6e:51:98:6b:46:f0:95:4e:53:fa:fb:04:4f:bb:27:ec:
         bd:74:e8:ea:99:cc:3e:d2:f7:20:f4:e8:59:c8:ae:e3:92:b4:
         5e:ae:6e:79:bd:ee:1c:80:48:ff:70:f1:1b:1f:12:bf:55:1a:
         5b:0d:94:99:d3:9e:d6:18:f9:60:0b:df:01:01:4f:c4:d7:de:
         14:be:15:7f:4e:db:98:d3:4b:9e:7c:24:36:9b:58:56:79:26:
         62:a9:c1:d9:f5:3f:f6:20:ce:e9:f8:38:e8:4c:94:43:41:3c:
         29:75:b8:63:56:e2:57:98:28:76:02:33:3b:e4:fb:48:af:d1:
         46:ea:a4:8d:9a:63:6a:f5:39:30:ac:7e:e4:c4:35:46:e6:87:
         63:ed:2e:1d:eb:fb:52:97:7b:f2:43:82:54:0c:db:0c:21:53:
         36:c7:2d:4b:28:4a:61:08:5a:7c:49:bd:bc:e7:9c:6a:85:5e:
         e3:56:89:74:51:b3:bb:38:a8:68:2f:8c:70:04:c7:b5:ed:43:
         17:4d:10:f3:7d:1c:30:45:a8:9b:55:94:d0:09:44:a9:4c:b3:
         e1:7f:e6:33:48:ff:4e:ce:61:8a:b8:4a:5f:89:12:8c:40:37:
         8c:36:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:32 2025 by rpki-client