Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/D18881E6807A11EBB44A0A58C4F9AE02.roa
File:                     D18881E6807A11EBB44A0A58C4F9AE02.roa (raw, json)
Hash identifier:          BgYstOucC84ZHYmnH6LDnjDF0uTc0h31+Q9K97MIQUk=
Subject key identifier:   ED:8B:41:9B:80:1A:44:08:9B:DC:57:DC:5C:BD:05:CF:B4:47:80:EC
Certificate issuer:       /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
Certificate serial:       06B0
Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/D18881E6807A11EBB44A0A58C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:24:00 +0000
ROA not before:           Wed 08 Oct 2025 22:24:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133546
IP address blocks:        103.234.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl
                          rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
        Validity
            Not Before: Oct  8 22:24:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=68e6e480-f451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:eb:29:1b:36:91:81:88:61:d7:9c:4e:15:
                    84:70:54:ca:3b:d1:07:98:ef:66:1c:3f:fe:ea:2c:
                    d1:4a:12:41:e5:60:b4:82:aa:ce:4e:3d:57:a4:90:
                    3e:b5:d9:f1:3a:ad:23:6a:7a:75:84:a3:e0:8b:ff:
                    46:d4:35:d6:51:24:bd:0e:61:8c:72:f4:9d:c6:fd:
                    36:2a:ae:29:55:d6:5e:04:ee:0d:90:31:07:c8:06:
                    cd:be:22:77:cb:81:79:87:73:fb:f0:82:18:2a:46:
                    e5:de:0d:e3:a7:48:c1:04:ed:7b:20:62:bc:a4:74:
                    6c:21:3b:28:1d:30:9d:1e:2b:a8:a5:36:75:f6:ac:
                    46:7b:5a:d7:92:27:fb:69:c0:12:ca:01:8d:aa:e1:
                    cb:1e:dd:11:ab:c3:00:dc:8b:c7:ab:44:3e:b9:18:
                    c8:7f:e3:d0:d7:8e:28:66:c8:92:53:a5:66:ce:1a:
                    1c:97:3f:66:ea:7c:67:fd:67:9f:9b:ad:69:3b:f9:
                    64:19:4a:ff:9f:4d:04:a9:44:07:59:a1:67:02:59:
                    74:68:86:20:92:af:35:06:af:d5:52:22:3a:5b:a9:
                    ae:ea:3c:3c:40:58:68:58:2d:3e:80:42:e9:8b:02:
                    82:09:5c:0b:d0:94:94:79:4f:12:9f:90:37:44:d4:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:41:9B:80:1A:44:08:9B:DC:57:DC:5C:BD:05:CF:B4:47:80:EC
            X509v3 Authority Key Identifier:
                keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/D18881E6807A11EBB44A0A58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:11:e5:b6:dc:0f:8e:b9:07:76:73:29:36:27:57:e2:1d:28:
         6a:31:35:68:d8:30:15:a9:84:64:98:71:39:91:9c:5d:1f:a5:
         c2:e0:11:4c:d5:1f:d9:42:df:77:48:f0:72:54:e7:df:99:36:
         d2:bb:15:b7:79:71:0f:27:26:52:e1:b9:8e:21:bc:d7:b2:65:
         d9:e3:db:b6:b9:8d:73:c0:41:fa:33:7f:b9:6a:79:86:66:3f:
         f1:45:4d:4a:6b:d1:e1:fd:d2:80:a7:56:5d:b5:43:a3:63:07:
         9a:21:88:f5:d8:6f:4a:8d:21:d8:0c:0d:a6:b0:9e:2b:35:c1:
         57:5e:73:d1:c6:ec:36:ba:42:74:73:ad:ed:3b:7b:68:a0:7e:
         7f:4f:97:4c:98:3c:33:89:77:1a:ac:cd:6d:39:b5:3d:a0:6f:
         69:be:91:d5:c6:16:d9:3f:1e:b0:2d:6e:d5:aa:be:bc:d8:e7:
         e7:b9:2e:f1:c6:32:65:ce:a6:d6:a9:de:c4:20:a2:81:1c:e7:
         92:55:e8:09:25:18:f4:3a:3b:32:5c:d5:5f:5e:88:32:5f:3d:
         12:06:f2:a2:04:eb:85:96:63:e1:e4:04:fa:da:ac:a9:e0:46:
         e6:5a:6a:6a:af:b7:88:dd:23:ad:d4:20:be:cc:73:66:fa:92:
         1a:e7:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:36:47 2025 by rpki-client