Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
File:                     26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (raw, json)
Hash identifier:          Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=
Subject key identifier:   2F:04:C2:C9:86:F8:C4:14:04:21:10:55:CC:5F:4B:6D:76:7B:55:6E
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       1438
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
Signing time:             Wed 02 Jul 2025 17:25:29 +0000
ROA not before:           Wed 02 Jul 2025 17:25:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5176 (0x1438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  2 17:25:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68656b89-17ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:57:e2:7e:d6:90:4f:01:82:70:b3:6c:8a:
                    b6:05:62:5e:a5:cf:2d:ac:4b:5d:2e:ba:ba:a2:bc:
                    52:8e:34:44:0e:60:31:e9:4e:79:00:83:b8:27:32:
                    71:87:4a:ee:e2:0e:f3:25:3b:bd:11:1a:ab:ed:75:
                    3a:21:e1:34:c4:3c:5c:10:8c:79:44:ba:1f:10:10:
                    94:35:9d:a2:1e:d4:72:d1:a6:24:ab:4a:62:c8:fb:
                    ba:79:a3:70:e7:d6:8b:16:f7:aa:16:2a:4d:36:30:
                    bf:51:eb:82:f4:09:91:be:e6:1e:52:4d:11:38:c1:
                    0c:a5:84:af:53:c9:d8:8c:e6:85:44:e7:ef:a1:47:
                    da:8d:55:2b:2e:d8:7a:5f:08:bc:b2:0b:98:d5:16:
                    98:fa:ee:78:e9:de:40:2f:b6:ac:ac:bf:d4:c3:e9:
                    59:5f:9a:9f:fe:99:bd:1e:6c:d4:ed:f7:a1:7a:08:
                    16:24:f0:3e:1b:d7:cd:fd:7a:75:d6:2f:80:49:38:
                    85:3d:d5:31:c1:91:10:ef:5a:39:97:56:bf:90:63:
                    a8:32:6d:0f:c9:fe:f8:31:2d:9f:e2:6e:f2:97:62:
                    42:52:95:30:b0:f8:19:59:33:f0:c1:a5:9b:2b:b5:
                    bf:e5:8f:3f:4a:06:65:0a:57:78:4b:b1:f3:42:e2:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:C2:C9:86:F8:C4:14:04:21:10:55:CC:5F:4B:6D:76:7B:55:6E
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:59:39:76:4a:41:8e:40:89:e8:96:b4:25:1f:34:09:9c:06:
         a1:aa:41:b2:47:06:09:45:1b:98:74:05:08:28:d9:85:3c:02:
         37:54:a3:c1:72:2a:c7:90:0f:2b:f4:63:c1:80:28:2e:4c:a5:
         f5:ab:9f:14:30:99:39:10:22:c5:26:23:8d:80:00:c2:4d:81:
         9e:73:4e:4f:5d:f4:be:d9:77:98:f6:ae:3c:b6:40:80:5d:d8:
         d0:22:2b:33:d3:59:41:2b:fd:4e:1e:b7:99:78:4e:e0:ee:4c:
         41:d7:1d:f0:bb:bb:21:28:b5:95:98:2d:26:c9:e8:9b:e5:a4:
         13:66:e5:a9:d1:92:4d:4c:99:59:24:51:b4:e4:2a:2f:83:f2:
         b8:75:8f:a4:7f:f6:c4:df:0a:ea:e9:bf:98:a4:56:27:d8:24:
         81:d0:ce:95:c8:a2:04:1f:c5:b2:7e:20:94:8c:cf:df:03:c3:
         e4:5a:2f:6a:92:47:e1:67:2e:ec:2f:72:22:a9:69:86:00:27:
         c0:1b:54:3b:78:1a:7f:91:fb:70:4f:64:ff:d1:37:4f:68:99:
         f6:14:20:54:63:7b:03:3b:b3:e2:ba:4f:09:02:2d:0a:05:65:
         40:80:dd:c4:11:7f:21:9e:1e:4e:83:67:c3:5f:7f:56:1e:a0:
         80:79:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:54:08 2025 by rpki-client