Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
File:                     93A5581E549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier:          EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=
Subject key identifier:   EE:F2:24:FB:7B:49:52:B1:87:F5:7A:38:3D:58:AE:9A:6A:EF:47:AC
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       041A
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
Signing time:             Thu 11 Sep 2025 01:08:29 +0000
ROA not before:           Thu 11 Sep 2025 01:08:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7474
IP address blocks:        203.16.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Sep 11 01:08:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c2210d-eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:fa:d4:e1:1a:c1:3c:24:65:6b:f2:29:be:
                    34:5b:3c:bf:b6:f2:ad:0b:47:c7:06:ec:97:3d:4f:
                    6d:41:49:f5:c2:38:61:a9:cc:5f:f1:2f:9f:52:d4:
                    9f:c0:42:36:c8:af:66:84:72:9b:65:e9:7b:88:b8:
                    b3:d3:62:ad:10:ce:8a:38:d8:d9:73:f4:25:83:9d:
                    46:48:49:96:03:32:69:ab:c9:49:cd:4c:fe:8d:3c:
                    27:86:99:38:75:65:4c:72:ec:7f:98:19:2b:fd:05:
                    50:19:44:43:96:fa:62:d3:94:cd:b1:18:4e:85:10:
                    b7:69:0b:b4:0e:3f:11:1d:5e:47:f2:fc:3e:5e:71:
                    47:e6:05:25:f8:9c:60:f7:4a:9f:85:9a:41:f0:6e:
                    4f:1c:67:aa:80:c7:87:f0:c0:ec:3a:5c:d4:37:f0:
                    9d:ab:59:fc:67:9d:84:2a:c2:b1:b6:f4:cf:52:1e:
                    53:1a:c2:c5:22:eb:f3:46:47:cd:68:bb:d8:fb:9a:
                    22:e5:95:44:ed:10:3e:eb:0e:32:36:8e:0b:19:b1:
                    a9:59:8a:01:e3:be:39:71:ee:53:15:7d:33:43:51:
                    17:b7:82:73:0f:ac:c7:bd:b9:e7:13:67:18:44:84:
                    46:3c:c4:65:1b:a9:35:ed:58:e8:b9:8a:ac:db:db:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F2:24:FB:7B:49:52:B1:87:F5:7A:38:3D:58:AE:9A:6A:EF:47:AC
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:d5:a8:a2:23:05:fa:ff:66:4e:47:3b:8a:aa:33:eb:72:
         cc:7c:48:17:41:ee:87:5d:22:a4:4d:60:d7:e4:78:09:85:40:
         47:8f:f3:cb:de:d5:93:d4:86:ad:24:2a:4a:fa:2b:3f:d3:e7:
         22:3f:d9:f6:17:2a:7b:0b:6a:c0:57:ee:77:94:2a:99:72:89:
         49:5a:94:1c:a7:2f:e2:ae:84:69:24:5a:cc:91:2d:f5:67:e9:
         e8:e2:c1:d3:97:28:2e:fe:9b:a9:53:bc:cb:c0:de:32:6a:23:
         2b:5b:24:12:3f:d2:15:99:ad:1d:98:f2:55:62:00:3a:56:f0:
         c7:66:39:8d:b7:c8:e7:6a:60:d5:28:9c:ba:4b:43:d7:60:16:
         ee:30:ce:f6:9a:6c:ec:ab:69:cf:60:31:f1:51:bd:13:e7:0c:
         f4:bc:fc:d0:7b:23:ab:97:c0:e3:41:f0:9d:d3:e6:54:68:70:
         a4:a0:11:a0:1e:f1:ae:d7:b5:52:be:35:c7:db:1c:8e:b2:54:
         c1:be:86:44:4a:15:7c:e6:33:3a:00:3f:71:b6:c6:e0:27:33:
         98:61:08:49:2b:76:e3:97:e9:0b:7a:8a:0f:c7:74:70:b4:88:
         ae:d0:4f:7c:c7:69:db:aa:72:52:4b:33:f0:4d:de:41:0f:2f:
         7d:b1:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:43 2025 by rpki-client