Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
File:                     5DC923B630ED11EE9A24D25BC4F9AE02.roa (raw, json)
Hash identifier:          Ucfo4Yf2WKDf+tPuuQ0HCtKIZnc9DEIRexIICBscDYg=
Subject key identifier:   83:AA:C7:CB:C3:8A:A2:E9:9D:C3:E3:C4:EB:27:F1:7D:64:2B:83:20
Certificate issuer:       /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial:       01AA
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
Signing time:             Wed 15 Oct 2025 06:29:54 +0000
ROA not before:           Wed 15 Oct 2025 06:29:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63018
IP address blocks:        103.133.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
                          rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
        Validity
            Not Before: Oct 15 06:29:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ef3f61-2c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:13:4c:ee:d6:8b:07:56:e9:fb:c2:ef:16:
                    57:a7:4c:ca:bb:df:e9:3b:f6:95:7b:ab:16:1b:ba:
                    57:4b:40:68:d8:ef:ea:a2:b8:b6:0c:33:62:33:5f:
                    f6:ac:28:ed:45:c3:9c:af:2f:68:4e:ce:15:f7:38:
                    1c:49:b2:de:59:da:86:aa:39:5b:69:4f:d6:00:a0:
                    de:05:59:f0:a7:33:fe:67:d3:78:03:28:8b:7a:3c:
                    b6:f1:19:5f:56:0d:dc:c3:a3:e3:89:16:e2:4b:2a:
                    f5:0e:c4:12:b4:6b:7b:c9:f4:9f:a3:17:bc:7e:bd:
                    6b:d2:d7:9e:2f:62:df:8a:b0:67:42:6b:ee:a9:14:
                    03:1d:e2:2c:53:54:94:de:e4:f9:21:5e:d0:a5:3b:
                    e8:b2:bd:8c:fe:9f:7d:70:a4:29:82:0f:3c:8c:9f:
                    39:28:15:35:41:91:47:a9:e1:ae:66:a3:42:53:c9:
                    39:50:ea:65:43:4a:df:c0:bd:87:4f:fb:8e:02:38:
                    2f:67:ca:cf:8e:ac:70:e8:74:11:82:51:f3:36:a4:
                    47:51:e0:e3:ca:ec:a6:ad:eb:68:c3:09:3f:b9:78:
                    ac:a3:b6:98:84:01:24:09:c1:6b:c4:38:51:9e:34:
                    26:a4:7c:d8:6b:00:26:7d:61:54:57:49:45:18:1e:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:C7:CB:C3:8A:A2:E9:9D:C3:E3:C4:EB:27:F1:7D:64:2B:83:20
            X509v3 Authority Key Identifier:
                keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:85:b4:be:7e:61:d1:eb:08:c1:39:67:e0:a4:93:76:4a:
         e5:d8:84:43:9c:8f:eb:95:17:48:4c:e7:82:2f:f7:92:89:31:
         cf:16:3c:21:18:7c:9d:f3:89:c7:32:1c:b8:e8:cc:1b:54:6e:
         fc:a5:51:70:b5:4a:25:79:68:46:4b:6d:42:9a:57:9f:dd:c7:
         39:49:3d:93:a6:2e:1f:e0:a3:69:70:92:11:d7:7a:c1:cb:98:
         d8:79:12:70:f4:d8:74:d5:01:2f:1a:e9:db:a5:07:19:b3:22:
         73:22:78:33:32:cc:dd:ce:cb:2d:36:4a:c4:f1:f0:cd:17:eb:
         fe:ed:93:4b:e1:c0:b2:31:9f:ed:96:ad:9e:9a:ff:ce:f3:0f:
         f8:88:86:98:60:de:00:8f:02:d3:22:b2:81:64:33:c4:2c:29:
         d6:a9:2c:8e:91:64:ce:24:65:9d:d5:a3:28:45:81:b3:4e:28:
         e2:e6:52:33:0c:ad:fe:c6:fe:94:e1:7c:d7:90:b3:52:00:22:
         7c:a7:f1:1a:7b:8e:3d:ec:cf:4a:ae:3a:05:e3:1d:3e:6d:3f:
         77:5f:07:1c:56:db:dc:f6:70:99:67:69:47:59:a9:db:11:49:
         65:a5:70:73:69:66:60:57:c4:75:8a:e7:d0:ff:8f:b6:ed:9d:
         a2:b2:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:08 2025 by rpki-client