Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
File:                     CB3F39368F9711EE927E086FC4F9AE02.roa (raw, json)
Hash identifier:          VTAwFI5V6TqsqQVyryIm8owRzIjYeLQQTEQfspnDCkg=
Subject key identifier:   5E:CC:3E:09:C7:F6:C5:D6:25:60:6E:72:06:41:0D:95:35:47:B2:94
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       0808
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 22:32:15 +0000
ROA not before:           Thu 16 Oct 2025 22:32:15 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137526
IP address blocks:        103.156.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Oct 16 22:32:15 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f1726f-0852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:84:33:a7:d6:2c:d5:8b:bf:fc:15:bd:0c:
                    db:c4:48:3f:28:b4:e3:fa:4a:1e:83:1e:21:a5:c2:
                    40:33:6d:58:e4:65:11:03:d2:47:4d:98:09:69:57:
                    49:bc:dc:30:98:b2:4e:41:c2:77:e9:53:5a:6c:fd:
                    af:db:49:a6:a3:5e:78:0e:66:47:b8:ea:70:98:bd:
                    fc:c0:6d:bf:24:ff:37:5e:1a:bf:c1:73:a6:3a:71:
                    f8:a1:29:a3:75:5a:92:76:be:d9:a0:c5:08:ef:ed:
                    de:7f:e8:55:b5:10:b0:15:69:7a:bd:24:56:6b:e5:
                    cc:51:3f:39:94:9a:37:6a:09:bc:32:f4:69:7a:e4:
                    50:ba:fb:92:0a:b8:fe:09:f9:1e:2e:7b:79:95:d7:
                    be:01:ff:f8:2e:bb:4e:94:93:81:cc:2b:64:b6:e0:
                    6c:86:ea:31:8d:0e:fc:2c:c7:20:80:de:15:30:a6:
                    a0:be:e6:a4:cd:5f:dd:39:d1:ba:20:51:02:70:19:
                    85:d3:a3:ef:38:c8:d7:50:76:13:5b:99:c1:29:7e:
                    60:04:08:06:ca:ed:c5:4b:d8:b9:83:48:0d:9a:d4:
                    19:cf:19:0d:10:fd:b9:98:a6:78:8b:a9:29:95:63:
                    bf:6d:5d:61:75:f1:7e:52:2e:c5:42:a7:18:d5:af:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CC:3E:09:C7:F6:C5:D6:25:60:6E:72:06:41:0D:95:35:47:B2:94
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:30:1b:15:32:f2:75:46:8c:6d:24:e8:7e:78:19:87:ba:d6:
         ee:1b:f1:95:92:05:dc:52:4f:3b:b4:40:48:63:86:0c:83:2d:
         9d:21:fb:15:6d:c3:2d:14:09:f1:10:58:97:01:e4:c0:8d:e2:
         d5:0c:f4:c7:b6:07:2d:75:ea:7b:77:1e:0a:6a:4a:32:fd:1e:
         47:0a:92:0e:76:6d:5c:ef:12:c9:1f:b2:8f:e7:ed:94:ea:57:
         f9:b3:8a:c8:5f:e9:17:d6:48:f1:17:38:67:0e:4f:8f:f3:bf:
         3b:86:d8:54:cf:5b:e4:37:9c:8b:95:10:63:11:b9:2f:f4:4a:
         a1:1e:77:20:fa:f0:fe:6c:1c:a7:d5:57:5f:90:8b:61:bb:70:
         4b:f6:d0:3b:b5:3d:a8:9d:34:91:36:42:22:0f:56:0a:20:42:
         fa:b3:ca:1f:3f:66:36:9e:ad:8a:25:c7:46:2f:0c:ed:12:e6:
         6e:18:1c:7f:c9:d7:32:f4:78:c7:3e:bf:fd:99:34:d7:2b:58:
         c7:62:68:40:9d:de:a1:67:a1:d9:6b:96:08:39:30:65:3b:04:
         52:5f:25:bf:ba:d5:f1:44:4b:1a:e4:81:4f:0a:4c:53:41:a6:
         1b:6f:85:91:51:5f:72:d8:17:0f:5c:50:75:8f:17:91:36:c0:
         9b:a3:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:41:20 2025 by rpki-client