Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa
File:                     777A4FE4A67311F0B63FA56CC4F9AE02.roa (raw, json)
Hash identifier:          MhcPpDX0ybNW5suRVqJQ8Y/zpF6Sqp1SAZfBtZfMNRA=
Subject key identifier:   06:A2:AA:B3:D4:F7:88:83:E4:17:5F:C2:2C:2C:11:6E:E8:30:EF:27
Certificate issuer:       /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial:       03
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa
Signing time:             Sat 11 Oct 2025 07:25:31 +0000
ROA not before:           Sat 11 Oct 2025 07:25:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132313
IP address blocks:        180.148.8.0/23 maxlen: 23
                          180.148.8.0/24 maxlen: 24
                          180.148.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
                          rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
        Validity
            Not Before: Oct 11 07:25:31 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ea066a-ab48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:eb:ee:b7:81:bd:8b:82:07:36:36:d2:9e:
                    6e:c3:9f:ff:d1:e6:b9:fb:aa:4b:3a:2c:6c:6e:63:
                    a5:51:62:bf:21:d1:2c:f0:64:c7:96:cc:a4:82:be:
                    d6:63:cd:66:88:6f:87:e4:02:46:af:36:fb:09:a4:
                    c3:28:6e:86:7a:e0:b1:f0:86:3a:24:8f:33:5f:85:
                    2c:52:0a:3e:ab:88:92:6b:ff:ab:1a:58:33:15:7d:
                    db:66:fc:cf:5a:1b:a6:70:00:51:1e:ec:58:0d:5c:
                    78:fd:96:b4:b6:e5:f2:dd:61:96:42:1a:75:d7:94:
                    7e:9d:fc:9a:5b:4e:cb:07:d6:6a:b3:52:c6:70:23:
                    c1:98:57:08:30:92:33:02:fc:69:ed:60:f3:36:c0:
                    18:fd:ba:f4:3a:ef:7a:21:36:b9:bf:b3:53:c0:b1:
                    9d:7f:67:35:e7:33:15:97:6f:f0:c9:46:81:3d:29:
                    3e:84:31:a4:c7:17:ec:72:08:f1:59:ab:bf:1f:56:
                    cd:84:47:9e:a4:26:39:0e:45:71:3f:1e:d1:fe:92:
                    23:93:9c:ee:1d:93:db:30:8e:86:5a:07:37:13:e8:
                    52:0d:73:9a:4b:cd:c9:18:e5:5c:42:25:39:d3:3d:
                    7d:61:02:9b:85:6d:27:14:dc:bc:2d:63:38:f0:34:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:AA:B3:D4:F7:88:83:E4:17:5F:C2:2C:2C:11:6E:E8:30:EF:27
            X509v3 Authority Key Identifier:
                keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/777A4FE4A67311F0B63FA56CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:13:2f:d0:dd:19:37:58:d9:23:76:59:5e:a5:26:e9:b8:51:
         e8:41:5a:e2:a8:06:5d:27:86:f8:44:1a:7a:30:a0:35:01:ed:
         b8:fb:81:ca:77:b7:26:f0:3e:1a:e6:0c:f1:83:dc:ea:18:7d:
         29:86:9b:b1:ec:c3:8d:bf:34:ba:d4:32:8c:fd:d7:67:b2:97:
         12:37:d9:f0:a2:4d:40:02:ab:0a:38:ca:c0:b7:c2:0a:0f:61:
         e0:39:31:52:e9:d7:ab:11:0a:2b:3c:0d:14:ee:13:8e:75:fb:
         65:fa:5e:2c:51:91:6d:3c:ef:65:70:54:cd:66:72:b8:36:f2:
         ed:2c:a0:c7:08:4a:e8:2b:ec:41:a5:5a:a3:cf:b8:1a:45:67:
         f9:63:95:0d:76:63:ce:c1:cc:a7:72:11:c0:5a:37:71:3f:91:
         a4:99:2c:9a:14:8d:2a:b5:9f:9c:12:87:38:dc:1d:8e:61:a3:
         cb:37:43:8f:e4:55:5b:16:6c:7d:96:66:66:11:e1:42:fe:7c:
         a2:2f:96:b1:e8:a3:5d:44:cc:8f:18:93:f9:86:59:c3:f4:7b:
         19:b0:6b:e4:4b:c0:a8:ea:7a:dc:aa:93:8d:0d:c7:79:29:54:
         20:89:2a:a7:0e:42:7a:ce:dd:3b:77:81:e4:bb:96:09:f4:26:
         fe:41:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:59 2025 by rpki-client