Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
File:                     983A5536450611F093EC3A65C4F9AE02.roa (raw, json)
Hash identifier:          NHbLnE6dfpO+MGCT1as1eeVyaaNcSDRifQqYdJ8+rkY=
Subject key identifier:   61:32:2D:16:51:C5:74:1D:F8:E8:9C:D4:C3:2A:44:62:8C:25:40:05
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       143A
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 17:25:31 +0000
ROA not before:           Wed 02 Jul 2025 17:25:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  2 17:25:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68656b8b-7ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:2b:35:01:d5:c0:97:25:ed:a1:e7:2c:89:
                    ed:76:a0:04:6b:2e:12:b5:78:8a:4c:2b:a0:81:80:
                    6c:9c:cf:3e:43:47:f0:8c:66:4d:ba:ff:a4:21:4b:
                    fe:11:a2:a5:4f:44:cc:49:35:68:b1:71:ae:d0:c6:
                    2e:a0:29:2e:95:e8:56:47:5f:d8:c1:7d:38:e0:60:
                    a3:52:ec:8c:f6:4b:e0:db:7b:8a:c6:da:23:b7:b6:
                    65:b6:e2:59:01:6f:58:2e:23:6a:68:0d:8f:5a:37:
                    5d:73:a1:67:38:a8:71:d0:47:0a:56:46:dd:33:18:
                    ed:4d:39:45:20:af:07:75:56:85:1f:01:69:e3:f2:
                    a6:8b:8b:73:17:d6:19:e7:20:d9:93:90:d0:a5:6a:
                    53:59:cf:c1:0a:72:59:f1:9a:76:9b:a3:a5:ba:3e:
                    67:ff:6d:1a:f6:45:19:8a:ac:32:db:ce:b9:cd:42:
                    f1:62:c3:78:3c:5f:a2:62:dc:ac:99:47:fa:3d:26:
                    3d:26:97:b3:cf:e6:49:63:84:e6:8f:ab:b6:2b:4f:
                    c9:58:f7:6a:58:11:88:1b:51:ab:3c:bf:29:cc:07:
                    64:53:34:3b:a6:4a:0b:59:b8:1c:4b:0b:ad:48:41:
                    86:c7:4e:a3:8f:25:62:7b:47:dd:13:f2:6e:18:57:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:2D:16:51:C5:74:1D:F8:E8:9C:D4:C3:2A:44:62:8C:25:40:05
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:49:8f:12:82:7d:d7:19:8e:8c:70:d6:26:89:9a:90:5d:8e:
         e6:5b:aa:61:23:4c:6f:04:6a:61:b0:20:c1:39:65:80:a7:9c:
         0c:64:95:d0:5a:68:75:89:d6:5e:c8:ca:73:c4:c4:3b:3b:ee:
         df:66:a5:e3:71:d0:e3:cb:60:33:91:f2:75:b5:7b:38:af:a7:
         a8:7b:8e:60:86:0e:50:ab:37:e5:63:8a:39:02:ef:b6:36:41:
         bf:0c:54:f3:1e:68:ec:c7:b2:8e:cd:68:d8:25:e5:af:e3:4d:
         5c:dc:cb:0f:d5:30:e0:a4:4c:38:83:16:46:f5:7c:a6:29:35:
         0b:1d:38:e8:27:0a:64:d0:b1:1d:83:61:27:12:f5:eb:e9:d4:
         7e:50:4a:00:d8:fb:95:8c:23:71:ee:cf:b4:da:07:1c:b5:64:
         7d:7e:9b:47:6c:ce:38:a4:7c:8d:cc:2e:ba:97:7b:e4:36:74:
         0e:15:e0:35:8b:81:37:23:f8:6e:b8:d7:90:f1:b2:e3:c6:e5:
         54:8e:e7:6d:4b:5b:90:8e:76:08:a5:95:e7:e8:00:93:c6:57:
         5d:3a:dc:fe:59:4c:5a:e0:2d:ed:3b:ef:f6:38:0d:3c:d4:58:
         ae:d7:32:9b:4e:0c:3d:31:3f:8e:25:67:ef:50:0f:3f:f5:9b:
         b3:c5:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:02:22 2025 by rpki-client