Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
File:                     776724AAF7B711ECAE4F7935C4F9AE02.roa (raw, json)
Hash identifier:          t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=
Subject key identifier:   FB:10:9A:0A:F4:E8:87:94:4D:D5:E2:CA:DF:98:43:59:7D:B3:4D:05
Certificate issuer:       /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial:       02D4
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 03:08:50 +0000
ROA not before:           Fri 01 Aug 2025 03:08:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149988
IP address blocks:        103.190.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
                          rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
        Validity
            Not Before: Aug  1 03:08:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688c2fc1-da22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:c4:bb:cf:7f:b5:34:7a:46:ab:05:7a:fb:
                    c5:ef:cc:83:5c:c0:2b:1d:c9:57:8e:60:09:94:fc:
                    25:da:7a:88:f1:23:d8:92:b0:a3:2c:e4:9c:56:fb:
                    1c:af:9d:9a:54:ba:6a:ea:7d:56:0e:ce:40:41:49:
                    06:df:37:0c:d5:89:f2:9c:cc:1a:50:78:71:4b:1e:
                    c3:30:69:9f:5a:eb:f2:e3:c4:30:83:83:a4:f7:4f:
                    fe:7c:95:74:37:2e:24:71:a8:a6:c7:2c:ad:5b:e9:
                    76:1f:77:33:3c:05:9e:cb:41:bd:d3:64:53:0f:2c:
                    a4:18:19:e8:b1:63:14:c7:52:07:b6:40:aa:8f:9e:
                    bb:86:39:16:63:2a:77:3a:a7:06:a1:a9:8d:b8:fe:
                    4d:1d:9b:4a:02:e0:a7:37:95:41:69:a9:02:6a:9c:
                    96:a7:90:52:f3:c6:78:73:4f:65:c4:25:10:f4:81:
                    d5:d5:a6:8d:04:5e:c8:4f:25:29:76:1d:ed:a3:63:
                    38:04:87:54:aa:04:8a:21:12:02:9e:d2:49:2a:ab:
                    33:ad:7a:4f:ba:42:30:0f:8f:61:4a:ed:66:01:d7:
                    d4:ad:ae:2f:0a:13:26:7d:6a:19:33:72:73:66:42:
                    f6:7e:d6:2f:ab:2c:bf:a5:11:db:7c:e7:8f:c5:b2:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:9A:0A:F4:E8:87:94:4D:D5:E2:CA:DF:98:43:59:7D:B3:4D:05
            X509v3 Authority Key Identifier:
                keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:55:f9:e1:a3:8b:7b:c3:2f:4c:4a:53:72:77:08:b1:62:
         8b:48:ce:bf:a4:d6:ac:3f:96:c7:f4:c0:ca:b7:20:bd:d2:1a:
         fd:22:78:d5:a3:8c:1f:b4:4e:02:e5:ea:60:a7:7a:60:92:de:
         3f:37:d8:85:77:8e:70:23:aa:17:5c:d6:fd:1b:ce:a5:78:76:
         c0:e0:43:2e:3a:2a:bf:41:ea:66:91:6f:c4:5a:a5:aa:4f:a5:
         c7:0c:9f:72:26:69:78:eb:86:53:c7:82:0f:a4:88:cf:18:59:
         61:e9:6b:d6:e0:94:62:9b:64:c2:97:19:a7:92:1b:84:a1:ee:
         53:aa:46:4c:94:98:e5:0f:49:d3:c4:9d:ae:7d:16:02:15:27:
         d4:c8:60:ca:8f:fd:b1:34:5b:20:d2:8b:fe:7a:6b:ed:04:e7:
         63:c6:ff:bc:be:ed:11:a4:a9:cd:ed:df:b4:69:65:62:f1:6b:
         51:22:fc:9e:a9:c0:dd:5e:b7:59:85:3a:79:4b:f4:f8:92:00:
         13:2a:b6:3d:a5:fc:fe:8d:e7:e4:5f:0f:b7:6e:46:b2:a0:f0:
         b7:43:34:69:ae:76:fe:8a:4c:77:4f:4b:07:bb:74:e9:0f:1f:
         6f:41:6e:5a:45:4d:e1:a2:0e:93:4c:ac:ff:a5:c0:ff:c6:68:
         87:7e:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:45 2025 by rpki-client