Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
File:                     B7BE1DAC482511ECA1A68F13C4F9AE02.roa (raw, json)
Hash identifier:          QSS01Cht+60Ca3lCH+aUYEQ83cHrjHOe9Xz/oSR4PIM=
Subject key identifier:   A0:C8:D7:C5:4B:26:E4:E4:AC:59:79:F5:EF:A1:2D:C8:48:42:C0:16
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       04B9
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 02:26:22 +0000
ROA not before:           Sat 11 Oct 2025 02:26:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139597
IP address blocks:        103.142.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: Oct 11 02:26:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e9c04d-ef94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:56:e0:6c:83:7e:0f:41:b7:7e:c7:78:ff:
                    19:12:98:82:45:f9:ec:c9:76:1a:f9:38:b4:dd:27:
                    cd:f7:60:84:9a:13:66:41:62:5e:dd:e4:96:4d:af:
                    ad:93:5c:3a:d3:3c:46:45:1a:bb:ef:b3:ce:19:c9:
                    11:a9:62:77:2a:96:df:08:62:6f:f0:a3:98:b1:f0:
                    c6:30:dc:ba:dc:85:47:de:94:f2:8f:03:cd:d0:0f:
                    e1:de:c4:68:8b:24:79:3c:d8:d8:e7:d6:1b:b9:59:
                    a0:4d:ef:f6:57:9e:15:a9:29:a0:db:ea:47:f3:6c:
                    49:64:ee:8d:28:aa:49:75:8b:6a:cd:be:89:b5:2a:
                    25:e0:52:85:76:53:33:10:ca:18:5a:88:52:97:ed:
                    06:7b:98:45:3a:92:18:ee:98:57:09:f0:4b:ab:92:
                    31:68:91:bf:94:74:9c:c5:95:ce:59:bd:2a:80:10:
                    a8:a8:a8:c2:3d:a0:5c:e5:97:26:06:e9:39:4e:17:
                    4d:c0:9b:00:69:1d:d4:6d:5f:fd:d5:12:76:04:64:
                    76:fc:79:4a:8c:57:ad:4a:20:f1:2b:12:54:d9:b8:
                    b9:2c:fa:55:76:1f:12:1c:f3:4d:9b:e3:55:66:24:
                    ef:f3:08:15:84:40:58:dd:bb:22:cd:8e:46:f3:b6:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:D7:C5:4B:26:E4:E4:AC:59:79:F5:EF:A1:2D:C8:48:42:C0:16
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:4b:d0:13:e1:15:cf:e2:85:ee:0d:d0:22:13:53:8a:2d:
         25:45:f3:2f:6e:96:16:f7:b5:fa:b5:34:1e:92:09:2e:b5:92:
         33:3d:59:e2:17:ed:07:3f:39:a9:6c:15:fe:00:f8:ec:d0:c9:
         0f:9a:6b:f5:e2:6a:91:e4:8d:eb:28:c2:3c:b8:7e:bc:79:4a:
         d0:41:6d:e0:4d:a9:b0:f9:51:6e:46:1b:51:98:f1:69:2d:cc:
         e8:c1:44:ec:78:22:9b:78:a2:61:fd:bb:b2:a5:c9:dd:1d:6f:
         7a:48:05:3c:be:34:9c:fa:47:d2:b7:8f:12:5a:d0:c4:2c:de:
         5c:53:91:07:0b:20:6b:45:7c:c2:6e:1b:9a:18:f7:58:dd:95:
         d2:1b:0a:a2:6e:2c:e9:60:38:b1:0d:7b:1d:37:ab:38:44:a3:
         8d:b0:57:8f:e9:ea:21:1e:70:84:58:59:9a:d0:8c:96:89:ef:
         6a:e2:64:a9:bd:70:48:25:1d:c7:c4:06:88:a0:5c:3a:57:f1:
         d1:a1:81:a6:4c:cd:20:b1:71:bc:90:9c:02:47:f0:75:fe:57:
         b8:6b:b4:ee:56:38:35:a4:6e:f5:be:e4:c3:99:81:1c:7e:60:
         0b:99:64:93:52:d7:96:11:c6:f4:1e:a3:dc:27:e9:d0:c7:c9:
         99:d0:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:24 2025 by rpki-client